Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3137392e36312e36342e302f32302d3234203d3e203136393231.roa
File:                     3137392e36312e36342e302f32302d3234203d3e203136393231.roa (raw, json)
Hash identifier:          Mf3G0FHSacOJhUvNdTB2Kb3Uu3ZTCNJdSXSyXYr0lm0=
Subject key identifier:   5D:C0:A1:4F:E0:06:48:45:85:D9:BC:53:1E:4A:2C:D1:CE:C4:FD:23
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       552A38502577D11BB1FF7F25C49FDA73918A25BC
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3137392e36312e36342e302f32302d3234203d3e203136393231.roa
Signing time:             Tue 05 Mar 2024 17:47:58 +0000
ROA not before:           Tue 05 Mar 2024 17:42:58 +0000
ROA not after:            Tue 04 Mar 2025 17:47:58 +0000
asID:                     16921
IP address blocks:        179.61.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2a:38:50:25:77:d1:1b:b1:ff:7f:25:c4:9f:da:73:91:8a:25:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Mar  5 17:42:58 2024 GMT
            Not After : Mar  4 17:47:58 2025 GMT
        Subject: CN=5DC0A14FE006484585D9BC531E4A2CD1CEC4FD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:fc:69:6c:86:b6:18:fd:99:53:14:d3:2c:
                    e0:ea:e4:40:4d:4b:db:a8:3b:45:79:e7:74:de:69:
                    6f:21:28:e2:35:f9:04:15:ad:81:b2:51:08:77:04:
                    8c:3e:0d:97:be:a2:5f:d8:5a:79:1b:e4:a3:94:b7:
                    0c:04:94:26:83:5e:a4:2c:1d:ae:da:37:75:29:4f:
                    89:6e:20:8b:9d:da:25:09:ab:15:ff:87:de:33:c5:
                    43:b0:42:bd:d6:42:eb:54:08:7f:c8:57:21:cd:1b:
                    4b:81:18:af:f3:78:86:ff:51:65:c3:c9:a4:26:05:
                    f3:70:9b:e7:aa:75:92:0a:70:2f:5e:ff:5a:16:f6:
                    02:74:8c:e6:06:d7:69:ac:db:59:8d:d1:60:ed:2b:
                    dd:b8:b4:99:a2:7b:97:90:76:39:f9:d2:f4:22:0a:
                    92:68:79:2e:b5:19:f7:9b:dc:82:ed:2a:b8:aa:ae:
                    09:b9:ab:4d:27:59:21:da:74:0c:ec:b1:6b:c5:19:
                    aa:fc:d2:21:50:a8:6c:56:af:a8:48:0b:2e:d2:85:
                    39:ae:18:1f:b3:0e:41:c5:96:65:31:98:72:ab:de:
                    c8:1f:b8:4b:b1:94:64:b3:0f:6f:67:e1:5a:99:5a:
                    0c:29:fe:f3:ab:49:9b:31:ce:1b:3c:ef:55:e3:a0:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C0:A1:4F:E0:06:48:45:85:D9:BC:53:1E:4A:2C:D1:CE:C4:FD:23
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3137392e36312e36342e302f32302d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:74:3a:63:26:26:61:a5:05:7b:45:6b:d1:3c:aa:9c:03:
         3d:05:f0:68:b1:16:af:40:37:b1:21:31:d1:36:73:b4:1b:3c:
         41:c6:59:2b:e3:ed:bb:bf:63:dd:d5:0c:d8:f5:5d:35:03:0c:
         42:30:db:79:e8:04:cd:45:53:7b:1a:a8:dd:fc:da:bc:cf:35:
         8a:ec:96:92:d3:de:96:90:92:9d:29:74:4b:65:9b:a2:1d:1e:
         9a:c4:d4:7e:2e:14:85:67:27:20:56:4d:de:b2:3e:b6:16:35:
         f6:7e:c8:72:b7:c4:02:63:fa:a9:7c:95:e7:52:ab:6d:86:0c:
         6e:4d:d7:7f:aa:8b:da:51:78:49:ed:8e:2f:49:f9:1b:34:bc:
         77:23:c3:32:99:52:66:1d:0b:cd:dc:1a:f7:f3:6d:ca:93:76:
         98:16:3c:68:cd:d1:57:62:8b:a7:a8:df:00:c1:17:81:68:d0:
         16:a6:d0:7f:72:72:51:8a:39:80:8b:ab:dd:46:e5:08:b7:cd:
         45:16:9d:98:74:e9:f6:9b:48:23:29:77:19:32:4a:2c:7f:57:
         7a:f3:5f:e8:12:7f:0a:85:1d:c9:40:d4:8e:c3:93:b3:4f:54:
         f3:ae:b7:69:f5:9e:fd:ac:0d:1f:ff:08:43:93:ac:ec:0f:81:
         33:50:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org