Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e3139322e302f31382d3138203d3e203238303234.roa
File:                     3137392e35382e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          19IiBpTwMtp8lwNobJgnFPMGLgLtpe1qsieOvCVWixM=
Subject key identifier:   38:15:35:99:CC:49:CD:B2:96:9B:44:85:0D:23:2E:B4:08:A9:C0:F2
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       0D8D74F8024194F6CB46531559615C5806E8C620
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     28024
IP address blocks:        179.58.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:74:f8:02:41:94:f6:cb:46:53:15:59:61:5c:58:06:e8:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=38153599CC49CDB2969B44850D232EB408A9C0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:e5:8d:69:6c:b2:46:44:8e:75:ba:e9:69:
                    ec:b7:8d:c0:50:94:45:ad:01:ce:d2:24:f8:2f:aa:
                    cf:aa:c6:64:8a:27:49:f7:da:86:6d:aa:9c:ee:fa:
                    9b:34:3c:10:8e:43:cb:bc:7d:34:a9:af:b3:9c:6d:
                    af:17:b5:42:6b:b2:69:39:55:61:0a:e5:52:92:2d:
                    75:99:44:94:57:c6:26:04:05:91:a1:ab:81:cb:96:
                    e2:4a:04:bd:4c:6c:eb:71:9c:eb:6b:5a:7d:bb:0c:
                    e2:12:8f:fd:65:f7:c7:d3:bb:f2:e6:c9:60:26:08:
                    44:75:5f:7f:4e:78:dc:04:c4:a6:a5:ff:50:f0:0f:
                    43:10:ae:7b:df:86:cf:a6:97:c0:99:29:d7:b3:31:
                    fb:ad:03:d7:49:1f:d7:a0:a3:ab:f9:09:8d:b3:14:
                    25:98:2a:d5:ee:60:74:9e:64:ca:4f:62:aa:50:7b:
                    dc:94:1a:7b:67:c0:bf:74:66:79:03:2d:0f:52:02:
                    6c:3b:e6:9c:33:68:05:4f:8c:d2:c0:83:ab:cc:48:
                    13:d9:1b:7e:79:ea:24:52:63:00:c6:92:a2:f3:30:
                    22:32:8c:41:36:7c:7f:ae:d8:84:0d:ca:69:06:b5:
                    a2:02:f2:86:a6:6e:dd:9f:27:0a:4f:77:38:22:ca:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:15:35:99:CC:49:CD:B2:96:9B:44:85:0D:23:2E:B4:08:A9:C0:F2
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.58.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:5f:45:16:66:34:8c:bb:d8:5d:2e:78:17:21:6c:50:a3:
         3a:ea:f8:95:38:74:3e:27:0a:af:5b:f9:f8:a9:b2:30:de:cb:
         2d:66:ec:d1:54:ce:f5:98:26:76:07:d9:ac:95:d2:60:fd:27:
         50:72:9c:5f:45:52:49:c9:b6:8d:fd:e0:ca:53:91:a3:c0:65:
         2f:24:ad:cf:c1:3c:5c:e2:24:45:00:94:01:a0:4f:c6:62:94:
         70:a5:50:c3:f2:73:c3:4c:cd:68:2d:83:11:36:0a:ab:48:a1:
         ac:8d:0e:40:b8:9d:96:ce:f0:57:df:0e:49:58:c7:bd:05:2e:
         11:58:5a:86:33:0e:c6:75:5b:f7:44:81:bc:58:89:41:c4:1e:
         be:1d:7e:eb:7e:00:fe:32:12:f0:93:e8:15:4f:f0:e0:0f:ae:
         d7:5e:82:f2:fe:1f:88:d7:5f:e8:ee:df:0f:59:c5:36:ae:91:
         f8:a6:41:99:7b:b2:e1:38:79:86:ab:bf:76:a4:45:05:43:57:
         08:fd:86:71:27:9f:13:a2:21:5b:ac:ed:c2:dc:8a:5d:5d:7f:
         f1:59:99:3a:a5:26:17:65:8c:d8:bd:d8:ac:6a:69:11:44:d5:
         31:2e:12:39:ec:5e:0f:2d:75:80:31:71:d4:59:0d:78:fa:39:
         d0:26:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:10:28 2024 by rpki-client on console-ams.rpki-client.org