Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/3137392e34392e3136332e302f32342d3234203d3e203133343839.roa
File:                     3137392e34392e3136332e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          FpAIbagYElo5RGkGxWBBTNkmDOERovsR2RJXIUN+RAA=
Subject key identifier:   78:26:8E:24:D2:3D:B3:C5:67:5F:63:6A:88:1F:7E:30:8D:25:96:4E
Certificate issuer:       /CN=60FB600214084710F2CA54BE27F103025DED83EE
Certificate serial:       4243BC35A77BC7FEEA924912D201340ABEC94A04
Authority key identifier: 60:FB:60:02:14:08:47:10:F2:CA:54:BE:27:F1:03:02:5D:ED:83:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60FB600214084710F2CA54BE27F103025DED83EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/3137392e34392e3136332e302f32342d3234203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 17:49:04 +0000
ROA not before:           Tue 05 Mar 2024 17:44:04 +0000
ROA not after:            Tue 04 Mar 2025 17:49:04 +0000
asID:                     13489
IP address blocks:        179.49.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/60FB600214084710F2CA54BE27F103025DED83EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/60FB600214084710F2CA54BE27F103025DED83EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60FB600214084710F2CA54BE27F103025DED83EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:bc:35:a7:7b:c7:fe:ea:92:49:12:d2:01:34:0a:be:c9:4a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60FB600214084710F2CA54BE27F103025DED83EE
        Validity
            Not Before: Mar  5 17:44:04 2024 GMT
            Not After : Mar  4 17:49:04 2025 GMT
        Subject: CN=78268E24D23DB3C5675F636A881F7E308D25964E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:68:0d:61:3d:98:6d:18:e6:5c:75:b3:8e:
                    58:7d:8a:0d:1b:fd:9c:83:b8:ec:ae:3b:a8:99:03:
                    98:56:ca:c9:c8:a9:ec:61:ae:90:3d:c6:8b:17:d3:
                    45:b3:f0:35:ea:be:f2:52:5d:65:bc:0c:52:29:c3:
                    e7:92:22:b7:2c:20:c2:14:d1:a7:fb:de:9f:39:9f:
                    c1:30:c8:0c:39:13:73:0c:ce:33:28:c7:1d:59:b2:
                    b6:1d:e2:7f:15:93:ab:52:c8:26:f9:12:36:de:7d:
                    4d:db:6c:b9:37:65:34:dc:48:cd:16:ce:e0:dd:cd:
                    0d:4c:9e:7d:3a:c2:3a:55:88:c7:79:83:75:db:c3:
                    65:f8:c0:f0:07:42:0e:2d:51:aa:ec:7a:ae:2e:8c:
                    58:92:b0:8b:5a:f7:c5:db:75:9c:a7:54:ad:46:d0:
                    cc:ea:6c:de:25:6d:12:27:94:2a:a9:ca:b9:67:cb:
                    21:66:b1:f7:65:fd:2a:ce:83:b1:0b:40:da:0e:d5:
                    23:e2:c1:81:eb:06:da:2d:87:24:4c:4d:48:0b:8d:
                    71:56:80:bd:94:0b:ec:57:60:9e:24:61:b8:65:c4:
                    f1:ed:01:48:28:38:6d:de:de:cc:9a:f7:31:1d:b8:
                    ff:40:88:92:b3:d8:a6:e7:2f:94:8f:35:bc:2b:9e:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:26:8E:24:D2:3D:B3:C5:67:5F:63:6A:88:1F:7E:30:8D:25:96:4E
            X509v3 Authority Key Identifier:
                keyid:60:FB:60:02:14:08:47:10:F2:CA:54:BE:27:F1:03:02:5D:ED:83:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/60FB600214084710F2CA54BE27F103025DED83EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60FB600214084710F2CA54BE27F103025DED83EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E21EECE2156B4E2EF29A2FF98A071D9A81DACEFFE7584014BFD95737837A992/0/3137392e34392e3136332e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:8d:33:77:42:4c:b2:b9:86:0e:70:e6:66:f1:79:19:8f:
         88:3e:72:8d:57:a0:e3:9c:ed:06:f6:9a:c0:d4:31:25:5f:3e:
         06:72:16:fb:90:94:a4:f0:e6:b2:4d:e3:92:d8:17:59:70:f3:
         14:91:00:3e:01:30:d4:3f:09:59:b0:6b:6f:0c:d9:88:53:f9:
         0a:f8:4b:ea:6c:38:88:05:fa:ab:97:52:d4:3b:92:c7:01:0e:
         4e:0e:8b:19:c7:d4:a5:1d:c2:10:a6:a9:82:d1:1c:90:04:31:
         f0:8a:40:c1:4b:85:50:3d:d6:94:53:d7:bb:4c:8c:c9:0e:bc:
         e8:38:e7:70:d7:46:5e:9d:5e:75:68:e4:d1:f0:51:76:c6:0e:
         c3:ef:25:e5:d7:04:c1:cf:f0:63:ca:58:c8:13:f7:0f:b3:3c:
         eb:8e:f7:a0:32:ab:44:3f:27:67:a7:27:4b:02:e5:57:8b:4c:
         58:24:53:14:7b:d6:b9:7c:9f:9c:c4:8f:35:f8:bd:57:db:82:
         88:f2:d0:30:fd:7b:73:de:8f:3c:71:33:be:48:dd:e2:65:a4:
         5a:a8:a1:d7:69:62:c9:75:03:47:6f:59:3d:4d:e5:d4:df:e2:
         9f:63:01:9e:c2:48:22:27:c7:d8:c5:bb:b6:23:d0:8b:b9:7f:
         11:67:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org