Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e302e302f31362d3136203d3e203238303234.roa
File:                     3137392e35392e302e302f31362d3136203d3e203238303234.roa (raw, json)
Hash identifier:          HlzSzbZ/CDedANehpMiCYnI2sbWNu7qa4MN3vC0qdks=
Subject key identifier:   AB:72:A6:B9:66:D4:7B:3E:8A:A5:0B:F1:FB:25:69:49:EE:61:2E:56
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       404B42EA8E88C93EDE90BBABEA47A547A639FD3E
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e302e302f31362d3136203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:12 +0000
ROA not before:           Tue 05 Mar 2024 17:51:12 +0000
ROA not after:            Tue 04 Mar 2025 17:56:12 +0000
asID:                     28024
IP address blocks:        179.59.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:42:ea:8e:88:c9:3e:de:90:bb:ab:ea:47:a5:47:a6:39:fd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:12 2024 GMT
            Not After : Mar  4 17:56:12 2025 GMT
        Subject: CN=AB72A6B966D47B3E8AA50BF1FB256949EE612E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:c7:9d:3b:31:7e:c5:d6:35:e1:0a:96:28:
                    5a:be:eb:67:8c:fd:9d:7a:8a:64:da:42:da:a2:a0:
                    cd:7b:2b:e9:9d:7a:78:aa:66:3d:18:4e:4f:0c:62:
                    55:1c:3b:8d:f8:3f:6d:ce:5a:9f:c5:1f:8c:fa:3f:
                    dd:47:1f:5b:6c:27:7f:8a:ef:e9:86:50:37:30:c4:
                    80:84:11:6d:06:87:7c:c8:e8:c2:d7:56:b1:df:a1:
                    e8:d3:b7:86:10:bf:12:e8:eb:48:0a:4c:22:cf:03:
                    2a:62:f7:97:b0:50:0c:2d:42:25:ab:a1:c5:e3:3f:
                    16:01:c1:f3:1c:16:58:d7:73:2b:65:64:20:d8:87:
                    3e:6b:5f:fa:64:f5:b9:7d:a5:b6:99:77:7a:cc:5c:
                    3d:2b:10:4d:04:94:2f:df:c7:82:37:3b:e5:94:23:
                    3d:15:95:0c:e1:50:09:ef:85:89:86:bc:7e:a6:63:
                    28:ec:8f:47:47:85:8e:37:a8:01:bf:34:6a:45:80:
                    70:a2:e7:e0:10:06:3b:fa:b9:69:e7:54:7f:fc:2d:
                    b9:ec:c8:e8:12:fb:36:8b:cf:56:c1:7f:1b:1b:e3:
                    a4:ba:7d:89:de:f6:2e:6d:b5:23:ad:10:46:b2:c7:
                    ec:b6:4b:09:20:79:4b:27:89:2a:80:b0:0a:3a:9d:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:A6:B9:66:D4:7B:3E:8A:A5:0B:F1:FB:25:69:49:EE:61:2E:56
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e302e302f31362d3136203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:90:0e:05:3f:44:2e:0a:46:a7:78:a3:18:61:e3:df:f7:
         9d:57:4f:b6:09:fc:65:a6:91:f1:b0:a9:f3:ba:b6:6e:e1:23:
         86:27:74:37:33:2d:04:c8:17:6e:b2:8d:01:6c:66:21:87:da:
         02:d9:f9:82:ad:fc:0b:bc:84:7c:78:02:d4:48:f4:ef:46:3f:
         99:7f:74:9c:39:dd:2c:cb:f6:4f:4b:0e:5a:f2:c6:b4:df:34:
         bf:7d:94:a1:a2:d6:da:54:80:e9:69:45:e2:78:30:0b:03:6b:
         3f:75:74:ee:9c:b5:4a:8b:fd:76:82:24:11:e8:f4:f1:3c:b4:
         98:1b:65:ce:53:c7:40:51:12:ab:fd:ce:fe:1a:4d:74:9d:6b:
         22:5a:bf:f7:a8:1b:ad:58:ea:d5:3f:53:03:e6:17:6e:b0:8b:
         60:45:c1:39:57:6a:14:a4:48:89:ec:18:2d:40:3c:9f:34:8c:
         6b:5a:b4:97:bb:9a:42:7d:e4:d9:bd:a6:89:12:db:c7:4a:5c:
         c9:32:28:de:eb:c6:fe:a2:51:81:e8:99:d8:a9:37:25:ab:84:
         2b:57:32:55:cf:fa:2e:4e:ee:7c:50:eb:7a:a0:0e:4c:68:48:
         b6:d7:13:ca:ef:3d:24:2e:06:1b:33:2d:9e:12:94:84:b0:3b:
         2c:1f:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org