Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36342e302f32312d3231203d3e20323632313638.roa
File:                     3137392e34392e36342e302f32312d3231203d3e20323632313638.roa (raw, json)
Hash identifier:          1Rcn+lRHakcbcNtoFzJHSNBB/2hbrtLR9lOfVhUWMhk=
Subject key identifier:   27:F6:B1:71:5C:04:A8:B4:75:72:BD:8A:51:94:C3:54:86:EF:D0:95
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       4CD1FAE1985905A503F4637768CBF0FF2365494B
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36342e302f32312d3231203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:31 +0000
ROA not before:           Tue 05 Mar 2024 17:55:31 +0000
ROA not after:            Tue 04 Mar 2025 18:00:31 +0000
asID:                     262168
IP address blocks:        179.49.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d1:fa:e1:98:59:05:a5:03:f4:63:77:68:cb:f0:ff:23:65:49:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:31 2024 GMT
            Not After : Mar  4 18:00:31 2025 GMT
        Subject: CN=27F6B1715C04A8B47572BD8A5194C35486EFD095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cd:f7:2f:be:8d:f3:18:44:2a:de:61:c2:a1:
                    67:e3:cb:1c:2f:83:fb:71:a4:4f:4e:4a:25:41:a1:
                    b9:c2:e2:d5:40:ba:b1:07:3e:e5:b6:45:9a:a8:13:
                    78:dc:d1:7b:77:e2:75:37:e8:4a:63:d4:70:75:6d:
                    db:fd:b0:ff:50:50:d0:0b:de:5f:ec:1c:89:a2:20:
                    8c:82:e8:90:53:bb:63:e4:af:e4:5d:ca:fe:90:0f:
                    a5:a4:e9:20:af:8b:95:0d:9f:e7:43:6a:e1:23:f2:
                    87:eb:39:21:9c:de:29:8f:e8:bf:d2:d9:fc:6d:17:
                    8c:37:17:a3:ab:29:4a:cd:3e:1e:1d:88:66:b5:f7:
                    2a:88:bf:a8:09:2f:c6:ee:be:67:9b:a5:9f:19:7a:
                    3c:37:7a:02:7d:08:ae:57:92:79:bd:8b:91:19:4b:
                    17:c4:a1:80:00:37:0a:39:9b:5b:44:61:ce:8f:ab:
                    14:55:02:3d:d1:61:da:5f:66:67:83:3d:68:a9:84:
                    63:5b:55:8e:e2:cb:66:ca:61:53:f7:1c:7c:10:1a:
                    ef:13:12:47:ac:df:fb:68:ed:f8:d5:41:14:ad:40:
                    d1:c8:74:ef:ad:a9:a5:da:3a:1d:b8:ab:7f:30:89:
                    65:c0:cb:bf:f7:9a:9a:1b:d7:53:8b:6a:9f:94:c3:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F6:B1:71:5C:04:A8:B4:75:72:BD:8A:51:94:C3:54:86:EF:D0:95
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36342e302f32312d3231203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:32:64:55:ae:9e:4b:29:37:64:55:cf:90:3e:2b:a8:5a:45:
         e9:06:88:06:9f:89:56:f5:67:8c:64:1a:05:70:6b:84:b6:f1:
         ec:69:a0:42:8e:58:31:41:30:02:69:67:e6:7c:56:1a:b5:c7:
         58:31:a9:c0:9d:d3:5c:50:38:92:d3:db:e1:19:60:ef:dc:38:
         98:f8:a0:42:d9:a6:b1:9e:be:d4:3c:13:87:7f:5a:aa:ee:63:
         89:89:fb:c4:fc:76:7e:74:20:08:da:a0:e1:56:e2:c1:e8:65:
         6b:89:a5:aa:be:fe:30:96:25:8e:38:92:98:cf:51:51:2e:d7:
         f4:88:74:9b:fa:a2:a5:35:34:28:13:25:36:71:b6:6e:d6:f6:
         cb:8c:be:a5:17:47:5d:47:48:74:11:4b:5f:5c:8a:46:df:2d:
         f3:3e:f7:d1:18:98:ee:85:d4:4b:ef:70:0a:e8:f5:58:1c:a4:
         ae:a6:96:c8:d2:90:8b:2c:bd:36:da:49:3a:29:99:2d:f9:2e:
         60:f6:24:2f:37:fd:d1:10:36:1b:c2:b2:b7:06:87:89:f2:4a:
         85:73:43:10:cd:6f:5f:06:db:2a:ca:e8:ae:7a:c9:36:9f:3c:
         5f:4f:26:a9:12:7a:e6:62:bf:53:7b:c9:cd:43:22:c8:b4:11:
         36:59:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:04 2024 by rpki-client on console-fra.rpki-client.org