Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3135302e302f32342d3234203d3e203335303432.roa
File:                     3137392e36302e3135302e302f32342d3234203d3e203335303432.roa (raw, json)
Hash identifier:          QBJgbuxJ4waCXAfyv0K6N5oaDo+L5nZ+7DZZpB10aYU=
Subject key identifier:   13:20:BC:06:48:02:D3:17:6F:C6:1D:71:AD:7A:52:59:26:93:AC:AA
Certificate issuer:       /CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
Certificate serial:       0B87C5708EEF1A642E7878AB34610E26CF8BBB34
Authority key identifier: 09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3135302e302f32342d3234203d3e203335303432.roa
Signing time:             Thu 10 Oct 2024 15:30:00 +0000
ROA not before:           Thu 10 Oct 2024 15:25:00 +0000
ROA not after:            Thu 09 Oct 2025 15:30:00 +0000
asID:                     35042
IP address blocks:        179.60.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:c5:70:8e:ef:1a:64:2e:78:78:ab:34:61:0e:26:cf:8b:bb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
        Validity
            Not Before: Oct 10 15:25:00 2024 GMT
            Not After : Oct  9 15:30:00 2025 GMT
        Subject: CN=1320BC064802D3176FC61D71AD7A52592693ACAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:1e:d8:f2:a0:17:93:5e:a8:57:0d:c0:dd:
                    66:6b:a2:16:13:80:f8:fb:f3:7f:5d:50:53:5c:49:
                    b6:07:5f:48:76:33:85:75:c2:c9:bf:97:f8:0c:56:
                    43:77:65:97:24:04:4b:2c:bb:53:95:fa:25:a5:41:
                    55:bc:78:61:c8:de:c8:9e:7f:09:a7:ed:07:45:64:
                    0d:63:24:28:54:4a:7d:97:6b:83:b5:40:69:f0:ba:
                    83:84:aa:56:39:33:45:11:97:c5:19:7b:a9:19:16:
                    27:24:13:6d:e4:d4:bf:3d:49:e7:d3:74:2f:fc:3b:
                    43:dc:0e:0f:96:1d:a2:19:6a:60:7f:c9:c0:a5:ea:
                    93:8e:33:39:27:04:bf:a0:32:05:5b:cd:28:00:a9:
                    0f:07:7e:45:90:b8:db:64:72:c3:32:00:9e:66:01:
                    df:aa:05:33:30:7b:a0:82:16:91:55:36:ef:e6:44:
                    67:b0:98:b8:25:35:e5:f1:28:b2:b2:46:22:8d:79:
                    bd:a4:f5:4c:e4:e0:1c:a4:0e:39:6e:f8:cb:5f:db:
                    4d:e8:c3:1e:38:b8:53:dd:69:be:80:49:54:1e:f0:
                    90:c3:9b:38:a0:b1:cf:3e:ce:dd:de:9d:dd:58:28:
                    4b:9f:ed:42:1f:fb:61:18:8e:33:ad:25:db:29:43:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:BC:06:48:02:D3:17:6F:C6:1D:71:AD:7A:52:59:26:93:AC:AA
            X509v3 Authority Key Identifier:
                keyid:09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3135302e302f32342d3234203d3e203335303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:c1:f8:05:9b:2e:ef:50:e2:6e:5d:3e:91:84:c3:98:7a:
         b5:0f:12:31:9e:a7:c2:94:b9:f7:15:79:34:77:1d:57:d6:3b:
         28:72:dc:fe:63:f9:b7:2b:04:cc:38:88:9a:f7:5d:17:64:90:
         ee:65:20:94:9d:32:32:43:11:bf:4f:8d:db:d0:6f:c8:95:64:
         ea:a4:43:a1:47:c2:97:40:53:f4:79:55:68:24:a3:00:e6:38:
         3e:16:eb:81:d5:4f:91:e9:69:4e:ef:88:63:9b:b7:d2:75:2f:
         22:13:4e:c0:95:c8:69:72:0a:d1:02:22:87:e3:9c:34:58:b8:
         c6:81:ea:6b:77:c0:8c:8e:a6:d3:ec:d6:f1:dd:81:ab:ba:55:
         9a:19:61:d4:f7:7c:58:e2:5f:f4:b0:bc:32:e2:84:85:28:ee:
         6b:ef:72:c8:50:ea:40:e1:74:1c:1d:c5:92:56:ea:b7:d7:03:
         24:96:50:73:a9:3a:b7:5f:76:56:75:81:3d:73:80:a0:9b:0d:
         4b:80:59:68:a4:b8:90:c4:19:08:2b:a0:a2:69:81:a4:80:ce:
         f9:de:a3:5c:af:89:c8:2c:45:5c:42:f0:be:fe:03:87:6b:ea:
         4e:a4:24:4a:c5:e2:29:3a:9c:f0:8d:ba:d2:80:fe:39:17:58:
         be:5b:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org