Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35332e302f32342d3234203d3e203532343638.roa
File:                     3137392e36302e35332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          iynE04/eEHh+jqjPhs+wRDKUSzaDOwkjCIxU/f06x9Q=
Subject key identifier:   51:A1:36:D5:60:C1:E7:AC:58:1C:3B:63:22:F3:7C:81:17:77:62:70
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       43757D8B4B6536B0AB7AC93920D59D745B40C9B2
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:54:52 +0000
ROA not before:           Tue 05 Mar 2024 17:49:52 +0000
ROA not after:            Tue 04 Mar 2025 17:54:52 +0000
asID:                     52468
IP address blocks:        179.60.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:75:7d:8b:4b:65:36:b0:ab:7a:c9:39:20:d5:9d:74:5b:40:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Mar  5 17:49:52 2024 GMT
            Not After : Mar  4 17:54:52 2025 GMT
        Subject: CN=51A136D560C1E7AC581C3B6322F37C8117776270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9a:26:a9:94:03:b3:2d:90:61:76:9e:ce:fa:
                    a2:13:9e:d0:36:a8:37:ed:1f:4c:a2:a7:b4:7f:fa:
                    d9:94:cb:3b:eb:bf:8e:98:60:61:96:ca:29:82:a7:
                    6f:dc:b9:da:c3:d3:da:40:80:27:cf:1f:03:74:4b:
                    34:26:72:59:28:83:92:5d:da:34:13:53:37:51:32:
                    fd:c0:8a:b9:96:64:6d:af:6d:19:dc:29:e7:6f:05:
                    b8:01:06:49:4e:a6:c2:0b:e5:58:59:47:4c:e0:96:
                    2c:52:de:87:65:6e:ca:6c:77:5d:ec:05:48:e3:8b:
                    fa:64:95:0a:1c:44:94:a4:d9:cd:12:69:c3:9e:48:
                    f2:f0:d4:32:46:0f:31:cf:08:a1:11:11:2d:1b:7f:
                    7b:d1:d2:ab:22:2d:45:69:eb:29:a7:cc:40:47:37:
                    4d:11:3d:b9:73:e1:ec:fa:b0:06:e1:a7:79:8a:e5:
                    e8:a7:e9:1b:57:43:0c:60:27:4a:fb:1b:81:9b:16:
                    66:74:4b:40:94:ce:29:8a:c5:6e:a8:6a:a5:76:43:
                    59:bb:57:bc:10:9b:37:f0:bc:bc:35:f5:b6:b2:68:
                    b0:e6:73:6d:f0:4a:2b:48:ef:42:c9:7b:cd:dc:78:
                    a5:f2:1c:7a:cf:c4:42:dd:39:cd:b2:32:de:0c:a1:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:36:D5:60:C1:E7:AC:58:1C:3B:63:22:F3:7C:81:17:77:62:70
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:a3:6d:44:f6:93:ab:55:7a:7c:a7:cc:ee:b5:50:02:13:
         c4:2b:f7:11:19:e3:ad:82:e1:e8:38:fa:08:cb:c2:f7:72:d9:
         3f:5a:5a:70:34:40:90:39:e9:0a:82:f1:b6:58:55:02:a1:d6:
         d8:30:6b:5f:2d:12:ad:55:00:df:42:7b:70:a4:f9:66:21:a9:
         01:26:09:b5:14:0a:c0:5c:e0:e4:d9:82:ea:52:50:3b:bc:d2:
         10:e2:08:c9:98:2f:74:b4:79:63:53:d1:45:99:90:30:60:0c:
         5c:87:47:09:5a:4f:ab:1e:0d:bc:31:49:b3:dc:46:67:18:ce:
         7a:7f:de:e1:48:86:95:a8:b1:10:67:52:5f:97:62:1e:ca:6e:
         fd:d9:2b:89:92:76:fa:d5:5e:be:a2:c7:75:f8:83:55:88:ce:
         a2:2e:70:36:ae:9c:02:ff:06:8d:da:3c:64:4b:eb:cd:9a:d2:
         d9:ef:bc:eb:c0:ff:db:ff:f7:78:48:6f:ff:db:31:3c:1a:1a:
         5f:b3:4b:d1:84:cc:ae:b1:5b:01:da:98:ff:64:9d:7d:cb:88:
         59:ea:ce:19:4c:40:e8:fd:21:0a:4d:a4:de:51:61:a7:34:16:
         3a:ab:19:e0:0e:4d:3c:59:95:18:3d:b1:fe:fa:7f:bb:6b:d9:
         20:f0:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org