Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e36342e302f31382d3138203d3e203238303234.roa
File:                     3137392e35392e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          J5g++QJWBrZdq1vqr3ObE6hNrYsr3l8kocwu1IXxM4U=
Subject key identifier:   34:8B:FD:A1:6C:E7:40:C8:15:D4:CF:12:F1:43:F0:CE:43:1C:8D:8A
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       041B1A887D52765C2FC907B0EBF54155A4107796
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:06 +0000
ROA not before:           Tue 05 Mar 2024 17:51:06 +0000
ROA not after:            Tue 04 Mar 2025 17:56:06 +0000
asID:                     28024
IP address blocks:        179.59.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1b:1a:88:7d:52:76:5c:2f:c9:07:b0:eb:f5:41:55:a4:10:77:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:06 2024 GMT
            Not After : Mar  4 17:56:06 2025 GMT
        Subject: CN=348BFDA16CE740C815D4CF12F143F0CE431C8D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:99:b2:c6:fa:8c:c1:2b:68:19:fa:be:03:
                    d6:d9:95:93:1d:c4:6a:d7:2d:64:d5:02:f6:09:0b:
                    be:10:7e:b6:de:cc:2f:68:b1:74:c7:f5:ab:63:cb:
                    68:20:56:5e:f6:04:03:81:f5:7e:43:28:76:f1:20:
                    e0:b2:19:fd:4a:d8:9a:09:c9:db:3d:84:88:47:b4:
                    ff:ec:59:e8:61:ce:b5:a0:70:03:22:1a:9e:fc:1b:
                    93:96:02:fc:a1:5d:ec:cd:c3:d5:d9:78:4f:c0:7c:
                    a7:3e:b4:93:45:3d:2d:c9:e1:c9:c5:d0:cd:de:dc:
                    b6:25:6c:51:75:4f:75:0d:ac:d4:ba:f1:44:70:4e:
                    05:27:44:b6:1c:d3:35:32:dd:01:f0:39:94:ad:5c:
                    02:80:4b:d4:cb:7a:70:dc:a7:57:95:f6:e4:ac:af:
                    bf:f9:23:ef:a6:f1:22:00:51:e9:20:9e:f3:79:a9:
                    dc:a9:cd:f4:03:9b:82:a3:26:e3:c6:80:d4:02:98:
                    00:1d:78:ed:e2:31:2d:52:57:f7:d3:ee:b0:c2:10:
                    f2:7e:59:b6:be:02:f2:45:6d:ad:f3:d6:cb:27:7d:
                    69:ee:d9:1b:55:72:3b:bd:5d:e7:b8:59:c4:ba:fe:
                    14:05:37:34:48:4b:fa:09:03:9e:ff:87:39:b4:7f:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:FD:A1:6C:E7:40:C8:15:D4:CF:12:F1:43:F0:CE:43:1C:8D:8A
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.59.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:ea:e6:34:5b:54:cd:a4:88:13:30:33:5c:2b:79:d4:ad:39:
         9f:22:90:bd:00:ef:52:cb:9f:ae:6f:48:d9:f2:77:80:62:cf:
         a2:cf:9d:79:4c:4b:05:25:b2:53:1e:40:c4:29:7a:f6:27:57:
         26:3f:05:89:38:da:8a:78:6d:2e:1c:fd:ed:41:27:7b:03:ed:
         48:a5:90:6d:d4:3c:96:5e:c0:57:37:ca:e9:2d:29:dc:39:92:
         b9:b2:81:ec:02:e8:2f:85:09:02:ee:90:65:ea:7c:0e:a4:ce:
         f1:bc:1d:99:ee:2d:ac:81:af:64:87:78:b5:65:9e:98:df:e3:
         67:17:7b:d5:02:ef:13:94:5e:6f:2c:2c:b4:f7:b4:e9:04:8e:
         dc:92:eb:fb:e4:b3:7a:93:60:41:d4:67:15:b6:9a:03:87:09:
         02:ac:bb:73:e2:a4:58:72:c7:8d:39:b0:10:51:6b:e3:81:73:
         b9:48:35:1a:49:5c:66:4b:eb:a3:d7:ce:08:2d:88:b0:d3:ed:
         c7:54:bc:d3:9b:35:0a:c6:a9:05:31:1a:ea:d4:6a:79:b8:4c:
         9b:39:e2:b3:83:37:38:c2:fa:af:40:9d:89:d2:ea:6c:4f:62:
         3e:a5:cc:56:0e:57:1d:06:2a:37:07:8b:82:92:0d:c2:3f:9c:
         1f:c4:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org