Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/3137392e36302e3234302e302f32322d3234203d3e20323632323135.roa
File:                     3137392e36302e3234302e302f32322d3234203d3e20323632323135.roa (raw, json)
Hash identifier:          p+LMk90YDuQJorGz5mhJWtOhVtzq/kB90RMZ6Jsyb9I=
Subject key identifier:   0B:4B:15:F1:F9:55:21:2A:75:98:11:EC:F1:D7:5B:41:66:68:CC:B3
Certificate issuer:       /CN=55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1
Certificate serial:       5197BDCD69AE41E3CB7996126D445E5C788169DC
Authority key identifier: 55:F4:0A:25:E3:77:7E:2A:DF:96:31:D6:D1:AA:DF:52:B7:5E:CB:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/3137392e36302e3234302e302f32322d3234203d3e20323632323135.roa
Signing time:             Tue 05 Mar 2024 18:19:48 +0000
ROA not before:           Tue 05 Mar 2024 18:14:48 +0000
ROA not after:            Tue 04 Mar 2025 18:19:48 +0000
asID:                     262215
IP address blocks:        179.60.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:97:bd:cd:69:ae:41:e3:cb:79:96:12:6d:44:5e:5c:78:81:69:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1
        Validity
            Not Before: Mar  5 18:14:48 2024 GMT
            Not After : Mar  4 18:19:48 2025 GMT
        Subject: CN=0B4B15F1F955212A759811ECF1D75B416668CCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:8f:9c:0b:6f:e4:5f:c6:2c:db:4b:8c:3f:
                    89:e5:4a:bd:17:6d:61:dc:84:37:0d:c6:79:a0:55:
                    ba:39:c3:3d:fe:69:b7:d1:87:3c:eb:73:d1:3f:bf:
                    c9:ff:e6:43:b1:e4:ba:b9:b2:fa:5d:83:29:4a:b9:
                    61:fa:6e:ec:3e:5c:75:d0:b4:1f:01:53:9e:3e:42:
                    7d:f3:6a:2e:40:5a:cd:4d:1f:ad:92:c0:44:d9:e1:
                    d0:f8:d2:d0:56:c1:e4:68:b4:41:d5:63:0b:94:b7:
                    d5:19:50:f1:68:85:22:b8:e5:ae:7a:4e:89:65:a2:
                    7b:f1:dd:88:94:e5:23:b9:24:41:cd:ca:30:8b:40:
                    bd:9d:3d:ee:4c:8b:8c:56:b9:20:44:3e:73:f2:1c:
                    45:25:14:3f:c8:3f:a0:7b:fb:96:8e:3c:62:e5:25:
                    c3:e5:cb:5b:65:6d:7c:3e:f9:35:fc:0b:a8:cd:4a:
                    9f:4c:59:7e:4a:8d:64:60:5b:1d:67:e5:b3:43:fc:
                    1e:6c:4a:6f:69:6a:26:a8:9e:19:23:4a:f6:98:dc:
                    41:6b:6a:88:24:d5:1c:96:9a:96:e6:b2:f3:70:d3:
                    23:89:14:4b:5c:78:c4:e7:0b:44:d1:f1:66:4b:fa:
                    4b:85:8c:ec:27:52:d2:5c:e8:a6:94:82:ab:11:b1:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:15:F1:F9:55:21:2A:75:98:11:EC:F1:D7:5B:41:66:68:CC:B3
            X509v3 Authority Key Identifier:
                keyid:55:F4:0A:25:E3:77:7E:2A:DF:96:31:D6:D1:AA:DF:52:B7:5E:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F40A25E3777E2ADF9631D6D1AADF52B75ECBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F012CDAF7EE22741FCB33C4F6AEEE8D10E172AECA4355AF5EF16420634D4119/0/3137392e36302e3234302e302f32322d3234203d3e20323632323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:83:d6:3b:f0:88:f3:ff:d2:00:43:61:e1:0b:6c:1f:d4:b1:
         c2:8c:a8:3a:34:55:7d:1c:b8:d8:b4:42:3c:5e:d8:8f:e2:fc:
         94:a6:79:48:01:de:1b:3e:14:9a:95:1f:44:4f:c1:c5:21:a5:
         53:b0:dc:12:7b:f8:23:1d:c3:cb:68:31:23:ae:8a:37:04:0d:
         e0:0e:dd:58:64:ef:03:3c:ec:24:21:4e:aa:15:58:45:6c:0a:
         23:f9:f4:ba:54:74:1b:a5:49:b7:aa:d4:da:9b:b4:5c:2d:e2:
         bd:20:af:f7:55:5b:37:a5:0b:43:a6:41:77:0f:7f:e8:f7:bc:
         ac:d9:e0:22:49:cd:17:eb:70:be:ba:d2:70:47:88:d5:e3:8a:
         0b:1f:02:8f:77:2f:2d:66:df:e1:8e:f4:ef:ce:dd:75:fb:b8:
         52:f2:62:10:2a:ea:5e:05:c9:a0:b4:58:17:53:9b:48:e4:25:
         9b:a8:bb:3f:a0:94:de:ee:1a:23:d0:fd:dc:b7:41:27:ae:63:
         26:8f:c2:19:8c:55:ee:eb:cc:81:59:fd:b3:15:6a:a8:48:28:
         ad:0c:7f:9b:ac:4a:9d:0d:76:d1:29:00:69:4b:a9:73:63:ae:
         19:82:4c:09:de:c2:95:97:f8:99:72:25:c8:2b:0c:40:0d:9f:
         b7:f2:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:06:02 2024 by rpki-client on console-fra.rpki-client.org