Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/3137392e34322e37382e302f32332d3233203d3e20323731373839.roa
File:                     3137392e34322e37382e302f32332d3233203d3e20323731373839.roa (raw, json)
Hash identifier:          7nUo9mXfQr6gFu34u+0dmM1uRvwxXfc3kllJL99ZbhU=
Subject key identifier:   F3:CE:3F:8A:61:9B:2B:A7:A6:19:55:EA:78:0F:E7:AF:89:D3:DF:20
Certificate issuer:       /CN=11014FEC5A6AAC08A3AAED5BB2E455971184D6F8
Certificate serial:       7A683A98E9BB7704B646A0B2781D09E9BA642B2F
Authority key identifier: 11:01:4F:EC:5A:6A:AC:08:A3:AA:ED:5B:B2:E4:55:97:11:84:D6:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/3137392e34322e37382e302f32332d3233203d3e20323731373839.roa
Signing time:             Tue 05 Mar 2024 17:59:24 +0000
ROA not before:           Tue 05 Mar 2024 17:54:24 +0000
ROA not after:            Tue 04 Mar 2025 17:59:24 +0000
asID:                     271789
IP address blocks:        179.42.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:3a:98:e9:bb:77:04:b6:46:a0:b2:78:1d:09:e9:ba:64:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11014FEC5A6AAC08A3AAED5BB2E455971184D6F8
        Validity
            Not Before: Mar  5 17:54:24 2024 GMT
            Not After : Mar  4 17:59:24 2025 GMT
        Subject: CN=F3CE3F8A619B2BA7A61955EA780FE7AF89D3DF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:f1:91:c2:cc:44:e2:d8:fd:03:a7:ef:2d:
                    66:6f:09:2f:80:29:2c:a3:12:44:f3:32:3f:ff:72:
                    ec:6f:5f:15:2f:c2:a7:06:83:6d:ef:03:85:cd:00:
                    a2:1f:fa:7e:1a:fc:d6:ed:1d:49:36:4d:be:a5:67:
                    9a:3c:0c:a3:c5:a1:53:82:fb:64:49:93:fb:80:82:
                    e5:2a:fd:4b:32:2f:33:59:f7:96:76:c3:08:22:3e:
                    aa:fc:64:55:e4:ea:fc:79:85:bc:67:f9:7f:a7:d6:
                    52:f1:5b:45:82:2b:7b:f8:c8:2d:26:f0:bc:a1:36:
                    b7:84:e1:8c:c7:3e:a1:a8:23:3d:87:3f:f7:96:1a:
                    68:ae:18:c6:73:ef:6b:0c:23:c6:e4:5f:a1:7f:85:
                    a1:8f:fb:88:04:56:6e:5a:a8:1d:c0:ed:68:2f:bc:
                    af:80:06:79:42:5d:52:13:9f:05:fe:8d:4c:f6:7e:
                    33:43:1b:87:07:73:42:ec:2c:87:bf:c4:26:a4:ad:
                    4c:1b:1f:b8:ec:7c:08:ce:09:56:42:1e:dd:aa:02:
                    a2:bf:2e:c5:32:91:d1:69:ff:74:f3:bb:8f:34:fd:
                    2f:0e:87:ba:20:ce:67:2a:18:8b:1f:04:52:20:08:
                    6c:59:25:8f:0f:f0:15:6d:3b:ba:d7:7d:3a:b7:5b:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:3F:8A:61:9B:2B:A7:A6:19:55:EA:78:0F:E7:AF:89:D3:DF:20
            X509v3 Authority Key Identifier:
                keyid:11:01:4F:EC:5A:6A:AC:08:A3:AA:ED:5B:B2:E4:55:97:11:84:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/3137392e34322e37382e302f32332d3233203d3e20323731373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:50:b9:8b:a8:66:84:ef:c2:7d:9f:b7:7e:48:f8:57:9b:
         96:45:7c:08:cc:45:59:7f:8d:01:05:2e:c5:9d:20:c8:64:b2:
         50:79:b6:53:a1:30:d5:ef:80:7c:6b:ae:c5:ae:d7:2f:95:54:
         85:02:b4:bc:47:db:cb:2f:6c:e4:e6:a7:84:cf:0e:4a:a2:fc:
         fe:23:e4:c9:31:28:a9:3d:2d:20:b3:31:15:62:0d:ae:30:a0:
         b4:ea:55:2e:b4:7a:3b:85:4e:e1:8e:a8:c3:e6:8e:ad:8b:5f:
         18:3c:30:8f:9a:04:24:9e:81:bd:ce:64:ce:bf:43:40:6d:97:
         f0:79:0f:a7:9e:84:e6:a3:4d:a1:b1:22:5a:33:52:ad:c5:2b:
         20:9b:c8:51:f0:5c:c0:9f:c1:c4:57:c3:53:a2:ba:21:14:87:
         fb:24:cd:97:4b:37:7c:48:51:4a:69:d0:9d:16:de:aa:f2:a0:
         2a:32:ae:d1:18:3e:f5:9b:07:26:65:21:7b:5a:23:74:04:6f:
         a1:75:1d:97:39:43:f6:99:9d:37:48:f6:a0:70:33:aa:a6:ee:
         20:41:67:a3:aa:16:a1:e0:ac:51:03:ec:26:8c:96:24:76:02:
         13:ae:02:2f:a6:5d:ea:5c:37:6b:90:15:02:b4:5e:df:f0:81:
         63:41:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org