Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e34382e302f32302d3234203d3e203238303538.roa
File:                     3137392e36302e34382e302f32302d3234203d3e203238303538.roa (raw, json)
Hash identifier:          s3Z5/FiQ5bSG7JP6NHcAHXURFdLyNPUwVlSSD46bdCg=
Subject key identifier:   26:9F:B4:25:EE:65:42:2D:2C:05:67:27:07:B0:30:2B:8B:61:56:FD
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       49EC81A42280BB0F7437DDF7FD22862424532111
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e34382e302f32302d3234203d3e203238303538.roa
Signing time:             Tue 05 Mar 2024 17:54:52 +0000
ROA not before:           Tue 05 Mar 2024 17:49:52 +0000
ROA not after:            Tue 04 Mar 2025 17:54:52 +0000
asID:                     28058
IP address blocks:        179.60.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ec:81:a4:22:80:bb:0f:74:37:dd:f7:fd:22:86:24:24:53:21:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Mar  5 17:49:52 2024 GMT
            Not After : Mar  4 17:54:52 2025 GMT
        Subject: CN=269FB425EE65422D2C05672707B0302B8B6156FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:2b:7e:96:91:0c:b4:a7:ac:b6:50:23:15:
                    da:e6:80:02:24:5a:b3:6b:9d:38:d7:cc:e0:6f:17:
                    14:f4:cd:c0:d3:2f:da:f5:5d:13:7c:8a:00:3a:e2:
                    36:58:b6:92:7b:19:71:22:37:ad:8a:06:cc:b7:17:
                    62:54:27:d5:8e:8f:7d:cf:5b:47:09:89:a2:b1:5f:
                    e6:6c:63:db:ba:fc:00:8b:03:27:fe:67:aa:c2:d8:
                    d2:36:c8:85:cc:e3:fa:39:2f:2b:32:32:bf:df:5f:
                    97:42:cd:9d:ed:92:a3:be:0d:c4:84:53:e8:30:af:
                    00:56:33:a7:c4:b3:50:06:26:73:3e:3b:ad:ae:8c:
                    ae:70:56:3a:21:63:67:b9:0e:91:cc:e0:50:7d:27:
                    6d:db:94:4f:80:e5:0d:ff:e4:a8:fb:f4:e3:2f:d9:
                    46:ee:30:73:0e:a6:a5:c2:af:d3:3e:68:11:ad:6e:
                    4a:7d:ce:b8:6f:23:ca:61:38:b8:82:24:c3:b3:d7:
                    f9:4c:30:aa:32:ae:ec:41:92:14:7c:ce:36:4d:f8:
                    22:f0:73:29:36:ee:be:70:b5:1a:09:5c:75:86:d9:
                    ec:01:37:45:7b:c5:40:48:b8:be:04:0d:68:12:fc:
                    cd:5a:3b:ae:5c:eb:4f:e7:2d:15:c6:d4:1f:72:6e:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9F:B4:25:EE:65:42:2D:2C:05:67:27:07:B0:30:2B:8B:61:56:FD
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e34382e302f32302d3234203d3e203238303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:7d:6d:12:0d:56:d6:64:12:0c:b3:2c:18:a3:14:62:bc:
         25:62:9f:80:2f:6f:ce:37:9c:aa:7b:3d:c1:9a:7c:c0:6a:50:
         70:1e:13:5f:1d:ed:53:cf:89:50:a3:ce:77:9d:75:f6:29:5e:
         5c:4d:b7:16:d2:5c:cc:da:87:71:c0:17:ce:bb:70:02:31:67:
         69:3c:cf:d9:f1:cf:d4:b3:b4:fb:7c:d9:3d:20:30:d4:7c:43:
         ab:19:29:4d:b7:44:28:03:fa:41:6e:9e:0f:67:8a:42:cd:d2:
         68:28:67:41:3c:af:69:3b:4b:e0:5e:db:83:29:0c:0d:39:de:
         06:b8:f9:8d:f0:8f:4d:2b:66:e9:06:38:2a:42:6d:96:42:64:
         da:dd:1b:bf:ee:7a:d6:df:54:21:5e:be:36:cc:3d:9f:ed:8b:
         fe:54:65:fe:10:be:e5:9c:f0:18:b9:83:80:73:4f:8b:9b:81:
         b8:51:23:10:c8:ea:7d:ca:67:e1:c9:b1:be:92:42:2c:a2:8b:
         62:50:a8:2c:4a:a4:0f:3b:65:54:c5:a8:b3:af:92:5d:a9:26:
         f3:46:f3:7c:11:5e:c4:34:f2:00:fd:cf:4b:19:b6:27:87:35:
         22:2f:29:0b:d7:75:40:db:4a:4b:ec:cd:47:bf:00:a6:70:10:
         f0:e5:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org