Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3139322e302f31382d3138203d3e203238303234.roa
File:                     3137392e35392e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          u0pUv7Y+QQg9Dzo0uvu8djLxwJpauNvwp8ITJbr7xVk=
Subject key identifier:   82:EB:8D:F2:D3:7E:11:66:CE:F3:E5:C9:5F:D7:0E:2D:57:51:89:9D
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       5CBCCDE93151103C24EDB714A805010F5281B6F1
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:11 +0000
ROA not before:           Tue 05 Mar 2024 17:51:11 +0000
ROA not after:            Tue 04 Mar 2025 17:56:11 +0000
asID:                     28024
IP address blocks:        179.59.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bc:cd:e9:31:51:10:3c:24:ed:b7:14:a8:05:01:0f:52:81:b6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:11 2024 GMT
            Not After : Mar  4 17:56:11 2025 GMT
        Subject: CN=82EB8DF2D37E1166CEF3E5C95FD70E2D5751899D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:ce:8f:fe:b5:8c:c4:5a:b0:34:0e:0e:1e:
                    f1:4f:4e:cc:66:18:f3:9d:d9:c6:72:ae:dd:10:fe:
                    05:6a:16:1f:4d:e4:ce:83:d8:da:50:1f:f7:20:86:
                    35:66:6f:db:b8:1a:fa:f2:9e:f4:78:3a:e9:78:2c:
                    44:62:54:88:fa:53:97:77:1b:e3:f7:67:74:fc:2f:
                    fc:03:f2:e0:44:b2:b8:3b:06:b1:6d:c9:a7:38:fd:
                    ff:80:0a:88:86:96:74:91:33:db:0e:32:37:36:d6:
                    61:f9:8a:7a:25:31:ad:f5:fc:7c:4a:18:6a:bd:cc:
                    ae:ab:9f:66:a9:2f:b0:c1:d3:b8:ea:12:b5:7f:72:
                    6e:be:93:3f:19:30:5b:88:14:b4:04:4e:57:cd:a9:
                    a4:be:b7:ac:89:ab:a7:f4:49:30:f5:68:ec:09:5b:
                    bf:cd:b0:3d:b4:b9:81:2b:fc:a3:b2:bc:8a:26:62:
                    e0:62:cd:5a:2b:3c:6a:35:a1:91:f7:c5:f4:6a:d1:
                    74:7e:64:71:39:ec:20:57:27:1b:d3:bd:c9:da:6c:
                    92:a3:c3:58:d8:0f:6d:16:73:a2:37:f7:45:2d:b7:
                    24:7f:0a:3b:cb:64:4c:3e:47:11:21:a1:63:74:09:
                    4a:16:81:58:44:37:99:88:c3:4e:84:2a:8b:04:76:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:8D:F2:D3:7E:11:66:CE:F3:E5:C9:5F:D7:0E:2D:57:51:89:9D
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.59.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:46:eb:c0:20:59:05:81:1d:83:b7:95:59:5a:06:12:10:34:
         30:8f:25:c1:04:96:56:85:c1:5a:82:15:fe:c6:f6:73:c3:dc:
         3c:5f:71:03:cd:94:42:c0:eb:80:fc:6a:b2:b9:49:8d:51:1b:
         8a:86:7c:e1:4f:62:ac:df:f6:ba:c0:13:34:85:63:b5:de:27:
         43:c1:b0:d8:2f:c5:d3:8d:9b:5e:aa:bd:a4:0c:50:b8:56:a5:
         1d:3c:83:11:ba:28:12:ad:19:fd:70:47:88:7c:84:53:9c:f9:
         62:92:ba:eb:30:3e:0e:08:0b:9c:d9:a9:be:47:19:e7:b8:ba:
         b9:42:b1:04:f9:eb:8a:18:4e:5a:5d:9d:12:b9:cc:cb:aa:cc:
         7b:ea:b4:46:37:9b:5c:18:d9:47:61:51:8f:3c:ff:83:ae:7c:
         39:3c:25:51:e9:97:57:f0:cd:a4:3f:90:77:32:79:81:50:23:
         d6:c4:b0:e7:4f:66:0b:f2:f9:b1:db:39:e2:84:db:13:11:16:
         b1:63:27:c0:47:95:4e:c5:d3:c9:f1:50:2d:51:97:1b:54:fd:
         36:38:c1:d7:f0:3c:bc:62:05:88:82:70:27:a9:4e:b3:04:df:
         44:b6:93:2f:d8:09:cf:3c:c0:c5:a4:83:c9:4c:c5:57:40:42:
         89:ee:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:41 2024 by rpki-client on console-ams.rpki-client.org