Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36362e302f32342d3234203d3e20323632313638.roa
File:                     3137392e34392e36362e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          X4VNbGneTpX77zEnYg0g6WHN1TpnhzYQPha+vMXhWEc=
Subject key identifier:   2C:8A:2E:BA:1B:37:42:4A:9B:0B:FC:75:6A:7D:D9:98:E3:29:56:3C
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       300CC3A3328A6867FE61B115AD139A2A7B60E07C
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36362e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:29 +0000
ROA not before:           Tue 05 Mar 2024 17:55:29 +0000
ROA not after:            Tue 04 Mar 2025 18:00:29 +0000
asID:                     262168
IP address blocks:        179.49.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:c3:a3:32:8a:68:67:fe:61:b1:15:ad:13:9a:2a:7b:60:e0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:29 2024 GMT
            Not After : Mar  4 18:00:29 2025 GMT
        Subject: CN=2C8A2EBA1B37424A9B0BFC756A7DD998E329563C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:25:2e:53:1a:14:de:b7:93:d4:11:36:9d:
                    8b:63:6f:94:3f:5c:c6:e2:64:23:63:df:a7:90:9a:
                    a4:8e:ae:0d:bb:55:cc:b2:ff:6a:40:35:ba:e6:f8:
                    b1:59:7d:b4:3d:d3:01:0f:64:b1:bb:44:f3:63:cb:
                    16:b7:e3:2f:55:63:51:90:38:aa:6a:a5:de:cc:f7:
                    67:b8:9f:e3:7d:f0:fb:e1:3b:5e:26:50:0d:34:a2:
                    9b:b1:7e:9d:81:de:4c:ec:fa:53:5a:01:b2:bc:89:
                    97:20:4b:0f:fc:80:79:ae:0e:07:d9:3c:73:81:26:
                    07:92:9b:ad:6c:1a:76:47:2d:fc:13:c3:3e:a1:7f:
                    45:42:64:e1:8e:e5:db:d6:c9:db:b6:96:65:a8:a8:
                    43:51:0a:8f:8f:4e:45:92:6c:35:26:ab:f2:90:0e:
                    4f:88:39:f8:5a:8a:0e:87:2d:d9:10:6c:8c:ec:73:
                    2b:39:28:e1:a6:c0:06:49:f5:8f:17:58:49:66:6e:
                    2f:4d:1a:ea:98:27:a4:90:06:bf:e7:67:67:42:16:
                    41:af:6c:ea:03:a7:ee:5c:12:6c:00:50:ae:aa:c1:
                    c6:e3:54:ce:e9:89:3d:7d:42:ff:dd:ac:5b:44:0c:
                    63:02:8e:5c:5d:bd:5f:76:5a:76:f9:7b:c0:2a:b6:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:2E:BA:1B:37:42:4A:9B:0B:FC:75:6A:7D:D9:98:E3:29:56:3C
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36362e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ea:99:4c:90:7b:df:24:cb:a4:8b:80:aa:df:1f:99:27:fa:
         2b:1b:a0:39:25:ff:44:87:77:ba:4b:95:5f:8b:57:fe:a0:c1:
         75:25:55:5a:07:8a:2d:11:36:0f:ec:33:7b:8b:10:50:eb:02:
         ba:23:36:68:79:21:bd:7f:9e:fe:b7:a3:df:4f:68:32:ad:47:
         4b:cb:c4:8e:d7:4e:50:21:91:9d:1e:36:fb:7c:85:7e:a0:19:
         7c:5b:c7:dc:87:b4:ea:25:31:3d:38:95:49:72:9c:89:77:de:
         2d:2c:d4:4e:6e:53:65:b7:b8:0b:0d:f2:fb:79:f4:24:dc:6c:
         9c:2f:ee:e7:3e:a4:dd:37:72:40:58:d8:60:c3:30:67:bc:a1:
         12:56:73:89:a1:ed:71:9c:2a:de:d0:90:ec:4b:b2:ff:d8:86:
         fd:5c:29:0c:35:64:fe:09:87:01:01:f2:b9:3d:d4:b1:85:2b:
         0e:bb:79:43:42:65:c7:21:6c:8a:c4:39:66:03:a6:28:18:86:
         7d:13:5d:59:4f:d2:6e:64:42:9e:85:76:0b:1b:ba:10:af:bf:
         d4:5f:51:04:bc:5e:ac:28:d3:e2:ec:33:31:91:cc:1c:e0:03:
         81:9e:bc:42:35:74:87:be:a3:5f:6b:d4:2e:0f:97:e4:1d:52:
         1e:4c:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org