Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa
File:                     3137392e35382e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          tNdZppjyYmkDojv5lsFQwmJmpxNeXxzCGL5+FmuaHms=
Subject key identifier:   EE:D1:79:66:9D:86:4C:54:EA:21:AD:98:D2:5A:5D:BB:FF:11:C8:26
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       4CC6557ED24FFCE45230B9EF414015997206443C
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     28024
IP address blocks:        179.58.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c6:55:7e:d2:4f:fc:e4:52:30:b9:ef:41:40:15:99:72:06:44:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=EED179669D864C54EA21AD98D25A5DBBFF11C826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:3e:b1:b4:64:83:e6:01:fb:47:b0:98:cd:
                    b7:0e:6f:07:2a:04:e0:e7:bc:65:c9:79:1f:7e:50:
                    a2:46:2b:27:84:c1:ef:3e:c8:97:bd:16:94:e2:aa:
                    18:45:36:6e:72:82:67:73:46:f0:44:2f:33:ea:1d:
                    15:6f:f1:09:2b:33:75:95:a1:e7:d5:b4:b0:72:f5:
                    1d:0b:cf:5f:3b:18:28:2b:d3:d8:2b:04:0e:ad:39:
                    52:fa:63:1f:6a:a7:d6:ab:d3:d3:8a:44:a4:b0:b2:
                    75:73:43:ee:68:3e:da:7b:50:52:47:8b:d4:3d:a8:
                    ef:3f:ea:8e:4b:15:3f:04:93:7b:8f:58:9d:29:34:
                    0d:6f:f1:10:39:eb:b1:1f:3a:5f:d1:73:28:49:5d:
                    66:b2:2b:b3:38:5d:bd:d7:31:3a:99:db:12:32:6a:
                    ab:84:48:2d:86:b4:fe:17:54:c5:7a:6b:12:e3:39:
                    c6:5a:8d:43:d4:21:f7:7a:98:c5:c2:46:73:a4:06:
                    82:a1:b9:ef:32:c0:04:69:55:a8:1f:0a:21:ed:25:
                    a0:9e:46:8d:b8:a1:e7:dc:51:37:8f:74:0f:11:ac:
                    03:2c:09:1f:29:f7:24:69:13:a5:76:b0:31:41:f3:
                    e2:82:2c:49:71:32:a2:9d:32:a1:81:2a:cf:81:1d:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:79:66:9D:86:4C:54:EA:21:AD:98:D2:5A:5D:BB:FF:11:C8:26
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.58.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:aa:cf:44:d7:a4:05:16:c5:e5:37:d5:da:fd:8c:c0:77:e0:
         16:3d:6d:40:39:19:08:a2:06:1a:1c:bf:22:b9:66:35:fd:b7:
         eb:a1:0a:6c:e0:70:1b:50:30:5a:ba:00:9c:27:e0:99:94:33:
         86:c6:5f:79:e8:9f:76:a7:1c:81:58:42:7b:0c:b2:db:46:31:
         28:f7:71:b3:3e:92:5f:ad:72:77:60:d9:d0:be:f3:71:f6:07:
         21:d3:34:d6:b0:7b:1e:5c:fe:fd:e1:3c:6d:ef:c9:b5:2f:3e:
         4c:c2:a7:32:c7:a8:e6:86:6a:13:db:39:17:e2:19:f9:c2:73:
         0b:40:d7:78:e4:35:9f:d3:b0:4c:66:19:78:98:93:b0:d5:81:
         ec:e7:a2:81:67:6c:dc:85:c1:81:d5:0b:d6:c3:7b:02:76:20:
         f4:5d:5c:b7:5c:0c:53:9d:01:49:11:de:a6:be:bf:3c:98:3e:
         0f:6e:cb:ec:8e:cd:15:73:66:5b:63:fd:4b:ec:19:ed:38:ba:
         0d:e7:d0:47:d4:d9:57:c4:e9:0d:3b:a8:1d:c9:d7:fd:49:1f:
         1a:2d:5a:b2:5d:c7:15:6f:b6:38:3f:e7:c4:f2:70:31:23:0b:
         c8:f7:3c:be:64:9e:16:8d:75:42:8c:d5:5a:e7:fa:ff:dc:d9:
         df:13:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org