Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36342e302f32342d3234203d3e20323632313638.roa
File:                     3137392e34392e36342e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          hf0ClkQfxt6rmme6aJ8eGasNNJUlGFKsqHiln6G1GUA=
Subject key identifier:   41:A0:7A:F4:24:4E:56:93:4D:46:DD:E9:34:22:C4:93:AF:3A:5C:42
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       3C6CADB2BFB9D23A5D68EE05FE0068B666D65951
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36342e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:30 +0000
ROA not before:           Tue 05 Mar 2024 17:55:30 +0000
ROA not after:            Tue 04 Mar 2025 18:00:30 +0000
asID:                     262168
IP address blocks:        179.49.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:ad:b2:bf:b9:d2:3a:5d:68:ee:05:fe:00:68:b6:66:d6:59:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:30 2024 GMT
            Not After : Mar  4 18:00:30 2025 GMT
        Subject: CN=41A07AF4244E56934D46DDE93422C493AF3A5C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:8d:ff:25:c6:a6:52:02:f3:d2:7e:35:5d:
                    c1:9c:a3:1e:0d:1b:03:ca:3b:a8:8f:a0:2d:c3:b5:
                    eb:cf:41:57:99:3d:aa:24:7f:36:3b:9a:f4:89:96:
                    40:dd:f6:22:3a:d4:79:cf:92:36:96:09:12:eb:d3:
                    29:fe:47:55:3d:7f:b4:65:c0:c6:9d:67:f8:4c:c5:
                    3b:78:0d:48:02:3f:74:b5:48:62:94:5b:39:e9:c6:
                    af:d7:ce:a6:8d:fd:81:cb:54:db:1a:d8:e3:9d:d2:
                    f4:4b:6b:37:b7:64:81:72:34:75:cb:df:5a:92:2a:
                    a3:f2:9d:a7:57:3c:6f:b4:4a:85:0c:a4:48:24:5f:
                    2f:de:c5:c4:25:98:eb:41:95:8a:37:e9:92:4c:99:
                    a3:db:cd:49:4a:66:61:5f:87:73:db:18:91:d3:1f:
                    29:bf:4d:ae:84:f8:31:6c:4d:da:cc:81:33:ff:99:
                    d8:bb:aa:91:9e:3a:c8:a0:18:74:41:5c:bd:03:97:
                    42:07:bf:4a:c8:b1:4d:15:b6:b3:8b:96:c7:e2:5d:
                    13:04:28:29:89:c8:65:f6:c5:a1:e7:8b:43:8a:13:
                    a1:05:c3:9f:62:af:28:5a:15:84:7a:84:cc:24:e8:
                    b6:e7:ce:aa:41:82:ef:e5:f8:26:45:26:21:08:07:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A0:7A:F4:24:4E:56:93:4D:46:DD:E9:34:22:C4:93:AF:3A:5C:42
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36342e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:01:ff:a5:a3:8c:21:cb:0a:39:99:12:28:7f:a9:29:d6:
         22:6b:79:34:8d:ee:7d:e2:3a:41:fe:64:ea:33:6d:5c:83:6e:
         ae:da:c6:cb:80:2d:2f:65:02:59:72:08:02:22:b1:3c:ea:e2:
         9a:83:09:c7:66:76:82:47:87:7f:d5:f5:1a:dc:ea:36:fb:5a:
         0e:ef:33:79:b5:3c:68:f4:6c:4f:be:20:b9:01:8b:3d:63:19:
         75:82:44:f1:db:5c:f2:0d:d7:a8:2e:66:d9:8c:9b:3b:c6:f6:
         a0:a3:85:0a:7d:a8:8f:57:cc:2c:88:30:51:15:ea:7c:24:2c:
         68:0f:29:59:0e:07:49:a2:1e:8b:ff:0b:8a:93:a7:61:cd:a0:
         59:31:52:b0:5c:e5:b3:43:c0:1b:20:ea:19:2c:12:1f:14:45:
         f5:1a:49:b1:75:9b:d8:65:40:b9:0e:cf:95:1f:05:81:c3:5a:
         54:bb:82:5d:53:5c:7d:35:ed:8e:79:98:59:a4:a9:6f:68:dc:
         13:bb:2b:47:ae:ae:9a:bb:a4:dc:47:ba:73:a3:1d:26:ce:18:
         e9:2b:a4:b5:40:29:a3:2b:50:89:13:cd:30:86:fe:11:7e:81:
         05:7e:90:b5:72:ed:45:81:f1:f5:aa:d3:f2:c1:14:bf:f6:13:
         e9:0d:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org