Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/3137392e34392e3136302e302f32342d3234203d3e20323632353839.roa
File:                     3137392e34392e3136302e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          lRLPPFRRGAJzkxC4ZDv+6fN2iVlPZFogrkvNlT0cl44=
Subject key identifier:   FC:EC:18:B6:A6:F8:ED:91:B7:92:E9:D3:B2:45:92:9B:3B:09:52:E7
Certificate issuer:       /CN=60FB600214084710F2CA54BE27F103025DED83EE
Certificate serial:       1ECDBF4025B4F883A042D643041C9EF2E1753124
Authority key identifier: 60:FB:60:02:14:08:47:10:F2:CA:54:BE:27:F1:03:02:5D:ED:83:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60FB600214084710F2CA54BE27F103025DED83EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/3137392e34392e3136302e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:49:05 +0000
ROA not before:           Tue 05 Mar 2024 17:44:05 +0000
ROA not after:            Tue 04 Mar 2025 17:49:05 +0000
asID:                     262589
IP address blocks:        179.49.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/60FB600214084710F2CA54BE27F103025DED83EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/60FB600214084710F2CA54BE27F103025DED83EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60FB600214084710F2CA54BE27F103025DED83EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:bf:40:25:b4:f8:83:a0:42:d6:43:04:1c:9e:f2:e1:75:31:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60FB600214084710F2CA54BE27F103025DED83EE
        Validity
            Not Before: Mar  5 17:44:05 2024 GMT
            Not After : Mar  4 17:49:05 2025 GMT
        Subject: CN=FCEC18B6A6F8ED91B792E9D3B245929B3B0952E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:f5:8f:15:6f:03:14:6b:60:97:31:94:80:
                    bd:d5:95:52:f0:63:2b:31:3e:6a:42:17:e5:5a:d7:
                    34:5b:26:59:a4:cf:89:f6:bc:60:2e:62:45:4c:14:
                    ea:5e:86:00:9f:13:65:34:b7:3b:c6:fe:ba:4a:00:
                    ac:a2:6a:1c:30:25:cf:a4:7d:1e:40:46:00:5e:42:
                    ad:ee:ec:d2:fc:e9:62:9f:b9:a8:60:c2:f4:42:b1:
                    f5:31:44:ac:38:32:c3:8f:f1:00:74:47:2d:fa:1a:
                    6f:85:28:4a:bb:e4:ca:ca:07:90:8b:b3:ce:d1:29:
                    76:54:46:02:53:c0:23:6b:08:ac:87:c3:e0:ee:ab:
                    cf:2c:a3:07:c5:a7:77:9e:d5:c8:aa:71:4d:2b:42:
                    bb:b1:10:b6:23:1d:60:bd:d5:b0:e5:3a:b3:c3:17:
                    38:3c:8e:6c:6c:43:1d:0c:75:75:c5:35:ce:c8:9f:
                    8c:7f:17:13:1e:d9:2b:96:ba:10:49:1f:99:0a:84:
                    3f:55:84:65:07:f9:1f:65:94:a9:f9:f2:b1:b2:8f:
                    8c:7b:28:5e:e9:64:46:d9:70:1b:03:5e:4c:ca:2d:
                    08:3e:bb:ad:85:6b:ec:1d:1b:12:27:0a:4d:8c:94:
                    2e:1a:21:de:c4:ce:4b:b8:14:a4:c4:f4:5c:5c:9c:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:18:B6:A6:F8:ED:91:B7:92:E9:D3:B2:45:92:9B:3B:09:52:E7
            X509v3 Authority Key Identifier:
                keyid:60:FB:60:02:14:08:47:10:F2:CA:54:BE:27:F1:03:02:5D:ED:83:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/60FB600214084710F2CA54BE27F103025DED83EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60FB600214084710F2CA54BE27F103025DED83EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/3137392e34392e3136302e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:bd:05:06:13:ab:96:24:43:d2:5d:0e:41:87:0a:a7:a5:
         0c:33:2e:e2:46:c9:6e:c5:e6:c0:4e:a5:53:fb:2e:73:3a:16:
         a7:5b:93:07:ac:59:3b:62:6e:19:79:f7:e3:b9:9d:00:63:c8:
         32:73:85:0f:b7:6b:c4:22:f9:6c:fb:6e:c9:2f:5b:23:a6:8c:
         31:42:ec:81:67:c5:a0:33:04:25:f0:10:91:b5:a5:94:25:0b:
         67:9d:4d:64:b6:cb:0c:2b:25:db:c4:68:4b:87:57:0a:27:93:
         11:c2:71:ee:e9:39:b7:5b:ae:82:6c:4e:37:f3:eb:33:04:29:
         68:35:7d:2b:06:a4:1e:82:dd:45:d8:eb:d6:25:d4:9d:d8:cd:
         13:75:9e:e6:4c:93:85:29:ff:e1:3a:a4:1d:dd:aa:b8:7d:71:
         2f:c0:60:d4:2a:35:33:e3:c8:3c:c4:0c:16:86:06:58:9c:d9:
         15:7c:68:66:8d:6d:de:39:5f:31:73:10:42:53:95:f3:1c:0a:
         e1:31:c0:2a:69:0e:5c:4b:32:e0:f5:e1:88:37:c1:20:6a:5c:
         3c:60:49:cc:ec:a0:8d:63:51:bf:ba:f4:1f:69:a5:b1:8a:77:
         83:e0:f0:aa:22:3e:b2:9f:1a:b5:ca:80:7b:c5:6b:7c:d6:76:
         a1:04:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org