Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/3137392e36302e3231362e302f32322d3234203d3e203532343635.roa
File:                     3137392e36302e3231362e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          3q4oI5VTl1SC1hEU0v18eKiS/xo6G3tX80Rr3FDPSkg=
Subject key identifier:   0C:62:0E:2D:C0:01:34:FD:3F:F5:98:AE:87:95:30:B6:E4:87:61:B5
Certificate issuer:       /CN=F11671E8AD1F6827AB7D45E8CB857EE1C49499AF
Certificate serial:       0DCECD0EFF473C0F6FF138C8882B1493B9CBCCD2
Authority key identifier: F1:16:71:E8:AD:1F:68:27:AB:7D:45:E8:CB:85:7E:E1:C4:94:99:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/3137392e36302e3231362e302f32322d3234203d3e203532343635.roa
Signing time:             Tue 05 Mar 2024 17:52:56 +0000
ROA not before:           Tue 05 Mar 2024 17:47:56 +0000
ROA not after:            Tue 04 Mar 2025 17:52:56 +0000
asID:                     52465
IP address blocks:        179.60.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:cd:0e:ff:47:3c:0f:6f:f1:38:c8:88:2b:14:93:b9:cb:cc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11671E8AD1F6827AB7D45E8CB857EE1C49499AF
        Validity
            Not Before: Mar  5 17:47:56 2024 GMT
            Not After : Mar  4 17:52:56 2025 GMT
        Subject: CN=0C620E2DC00134FD3FF598AE879530B6E48761B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:78:9d:6a:9d:fc:be:d2:e2:39:a3:cf:48:
                    35:94:f0:b4:19:13:d5:59:e8:52:a8:b9:50:55:02:
                    0f:53:91:a5:6c:ab:a1:41:c2:7c:54:48:5d:a5:80:
                    eb:69:7a:57:4c:87:27:2e:60:59:2d:78:15:e9:44:
                    e2:fe:b3:ce:2c:10:6e:c4:97:0f:4a:92:86:bc:b9:
                    db:62:86:eb:fa:bc:da:d3:6c:1e:5d:05:ee:5b:35:
                    f7:83:4a:47:90:e1:72:6f:4d:d3:90:1a:b2:19:2b:
                    81:1e:f6:4f:fd:89:8a:67:5d:3c:6e:51:bd:dd:23:
                    b9:d1:2f:0d:b4:16:a5:05:7a:ae:c5:91:35:64:e6:
                    49:5a:1a:2f:a6:cc:10:d2:d0:b0:06:74:e0:35:1d:
                    f9:07:47:8e:74:29:b4:6a:d8:2a:82:bf:10:19:d8:
                    92:e8:9e:4f:4a:fc:99:a7:18:3e:42:26:5a:18:53:
                    1b:a2:23:29:7d:e6:96:18:a4:7c:12:b0:5c:7d:0b:
                    7d:8c:72:8c:f2:45:e8:6b:fc:92:d3:34:73:97:94:
                    11:f2:1c:bc:af:60:e2:34:da:d1:96:dd:ef:24:e5:
                    62:83:00:ec:96:b4:b5:aa:87:75:30:da:63:e4:ce:
                    da:dd:65:e7:f9:00:c7:1b:a0:3a:ef:db:ba:57:d8:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:0E:2D:C0:01:34:FD:3F:F5:98:AE:87:95:30:B6:E4:87:61:B5
            X509v3 Authority Key Identifier:
                keyid:F1:16:71:E8:AD:1F:68:27:AB:7D:45:E8:CB:85:7E:E1:C4:94:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/3137392e36302e3231362e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:71:a6:34:6f:ba:3d:2f:39:55:75:df:49:de:50:4e:1c:97:
         67:1f:9f:7e:68:a5:d5:1d:2c:da:a9:1a:93:66:49:f2:c3:e2:
         85:e3:dc:16:cf:1d:72:c4:0e:91:b2:d5:fd:7b:6e:5f:fe:e1:
         35:1f:2f:4e:2e:6b:e3:39:8d:9e:3a:9a:a6:d3:9c:77:a2:36:
         50:1e:0e:98:be:93:87:33:ba:32:4e:49:7c:41:ca:91:a8:4a:
         05:b4:d3:bb:6a:66:dd:44:e5:d9:f3:59:6b:c9:73:56:96:41:
         12:ce:9e:f2:7b:74:c1:bd:65:d6:7d:d8:22:de:1e:2c:12:6e:
         cb:62:2e:ac:18:a7:54:4c:fe:20:f7:44:b3:0a:d1:cb:41:75:
         c9:a7:5b:c1:86:92:8f:36:01:88:a3:42:da:4d:c2:6c:cd:6d:
         d2:cb:e5:29:ba:50:17:cf:6f:36:90:c7:3c:34:db:ff:e6:62:
         b0:92:34:67:f5:54:df:fc:ab:19:b9:62:3e:23:a8:c6:84:64:
         0f:fe:8e:44:f0:4f:a7:c1:8e:69:71:a7:08:51:88:54:f0:3b:
         33:0c:d1:e2:1d:65:49:03:7f:b7:4c:0e:e8:20:65:47:6b:57:
         f8:33:56:9a:1a:69:e6:89:b3:b5:de:07:8b:a8:05:93:cb:f8:
         dd:37:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:06 2024 by rpki-client on console-ams.rpki-client.org