Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e37302e302f32342d3234203d3e20323632313638.roa
File:                     3137392e34392e37302e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          ugPoENHfqZ9Y1GBSUi2sTxvJXXDmne/sJPSXpfvXai4=
Subject key identifier:   B6:A9:42:43:D6:3A:7E:57:6D:56:5C:A0:33:EF:1D:7E:58:DD:EF:7D
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       3F19A33273501453AD7C50F8E45526AFEECB1A18
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e37302e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     262168
IP address blocks:        179.49.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:a3:32:73:50:14:53:ad:7c:50:f8:e4:55:26:af:ee:cb:1a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=B6A94243D63A7E576D565CA033EF1D7E58DDEF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:79:fe:41:dc:b1:c7:90:4d:0f:6c:3a:97:
                    70:39:b0:d2:db:30:54:69:4f:15:bf:4b:5f:b9:4e:
                    53:15:2c:f4:55:60:92:e9:8e:62:ef:c2:48:f5:2b:
                    a0:21:8e:64:87:6a:80:9b:a5:85:e5:fa:9d:96:99:
                    a0:c0:59:df:59:94:c7:91:c7:d1:2d:e8:c2:e1:00:
                    fa:05:d8:2c:d6:eb:eb:02:70:ef:3b:38:2c:8b:57:
                    a0:98:d8:84:ac:32:c2:82:b6:b1:a6:74:2f:cd:4a:
                    b8:3d:15:e7:10:b8:42:ce:97:2d:55:ad:2e:61:f4:
                    af:c9:d3:05:22:5e:40:8e:c0:19:f2:16:86:0a:0f:
                    f7:e4:df:de:f0:8d:61:0f:dd:69:d2:b6:cc:81:3c:
                    7f:5c:b6:f6:47:77:a3:bf:ad:dd:47:37:76:be:79:
                    b9:aa:65:aa:d0:df:61:a4:a6:88:9b:b1:c0:ab:9c:
                    35:6b:36:8c:bf:26:81:b4:7b:73:2f:5f:b1:e8:0d:
                    62:74:77:6d:35:c8:31:4c:8a:1f:cc:3d:ce:ad:31:
                    b4:80:a5:d5:a7:93:13:35:17:02:eb:ee:21:82:23:
                    0e:b9:98:0d:4b:5d:f8:f0:d7:52:4f:00:6f:39:5d:
                    ab:b8:5b:2f:4a:5e:5d:bb:f3:e1:1a:dc:69:4d:c6:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A9:42:43:D6:3A:7E:57:6D:56:5C:A0:33:EF:1D:7E:58:DD:EF:7D
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e37302e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:d3:fc:00:c0:1b:0c:19:e3:a4:c4:55:18:a2:f3:6d:0d:
         47:d4:f3:5b:0f:69:51:71:a0:b8:a0:f0:55:dd:c2:7a:c8:7d:
         38:5d:58:17:33:b7:a4:f0:2e:08:fd:1c:fc:43:a9:de:96:42:
         fb:38:71:7e:a2:d1:a1:6a:27:02:8a:3d:43:ef:5f:9a:c9:f2:
         21:98:60:2e:12:7a:b4:ba:a4:59:46:8a:a8:4b:ee:e5:4e:4b:
         75:3c:62:a5:2c:19:8c:25:a1:07:d0:5f:4a:35:43:d8:bd:60:
         be:0a:8c:1a:ee:21:66:4a:47:f4:8a:01:b7:51:3d:b8:b9:0b:
         1b:ba:04:8a:73:33:ad:3a:da:c4:03:54:e9:90:91:49:63:45:
         42:37:e4:99:8c:35:c0:0d:41:a7:07:9e:80:18:37:4f:5c:97:
         f1:a8:7c:51:76:aa:6b:73:97:45:5a:b5:ab:ce:24:54:75:5c:
         b7:0f:02:ea:54:d7:bf:ec:2f:8b:e1:09:80:3b:da:14:c4:77:
         23:dd:22:dc:48:19:fe:ed:db:d1:d2:1a:2b:47:a2:b3:69:ec:
         8d:9d:6e:b5:9a:33:1e:4d:b2:ef:c1:63:e6:8e:ad:11:68:25:
         a9:d3:e5:2c:7f:86:c8:bb:fb:cf:02:5f:b6:cd:87:61:9c:78:
         af:ec:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:55 2024 by rpki-client on console-fra.rpki-client.org