Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa
File:                     3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (raw, json)
Hash identifier:          hZMxA0Lu0JC79tLM8f1GTcNdcHZs1iihwCqgL+i+JuE=
Subject key identifier:   35:53:74:D3:51:52:13:E7:11:D8:C8:A7:CB:58:B9:11:86:38:95:A7
Certificate issuer:       /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
Certificate serial:       6491DA89E934A2BF1FDA290138262060C02E7215
Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa
Signing time:             Tue 05 Mar 2024 17:58:01 +0000
ROA not before:           Tue 05 Mar 2024 17:53:01 +0000
ROA not after:            Tue 04 Mar 2025 17:58:01 +0000
asID:                     52491
IP address blocks:        179.60.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:da:89:e9:34:a2:bf:1f:da:29:01:38:26:20:60:c0:2e:72:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
        Validity
            Not Before: Mar  5 17:53:01 2024 GMT
            Not After : Mar  4 17:58:01 2025 GMT
        Subject: CN=355374D3515213E711D8C8A7CB58B911863895A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:4e:ae:23:3f:85:d6:8b:9a:fd:b9:04:a2:
                    d6:57:d0:40:26:b1:99:d8:2e:1a:19:c0:72:ee:ae:
                    38:5c:b1:b6:de:41:14:b9:ee:4b:57:bf:99:7b:c2:
                    50:92:0c:89:fa:6b:ee:3c:c1:d8:24:7a:00:44:ac:
                    a5:81:e6:92:55:fb:a0:b7:57:9f:f6:6e:00:fc:de:
                    8f:33:6b:ab:ea:de:7e:f7:15:91:fa:a1:a8:e8:25:
                    9e:2a:6c:f5:3d:ce:dd:fe:47:68:a4:4c:40:14:d3:
                    91:63:b9:2d:6d:b3:9a:b2:88:06:8b:b0:41:27:2c:
                    75:17:de:d0:23:f4:e4:e4:12:5a:56:3c:88:c3:26:
                    5a:05:be:fd:3d:7f:12:ad:1c:9c:61:12:7f:89:d1:
                    2d:26:b8:42:ae:d3:71:4f:1e:1b:d8:85:cb:af:dc:
                    7c:87:f5:74:4c:81:2d:6c:e5:68:43:53:92:fb:23:
                    52:d0:16:48:6b:70:b6:6c:98:96:f1:e8:63:10:f6:
                    03:ec:97:c4:05:8d:f3:37:4d:d0:c0:db:92:a8:b1:
                    a1:ca:d4:f3:fb:04:f9:47:52:9b:b8:00:46:e2:19:
                    2d:be:6c:32:d8:14:35:c4:a4:13:50:f2:de:7d:c7:
                    56:30:e4:e5:c2:65:3a:4f:94:05:80:4d:67:3e:42:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:74:D3:51:52:13:E7:11:D8:C8:A7:CB:58:B9:11:86:38:95:A7
            X509v3 Authority Key Identifier:
                keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:96:66:48:2e:69:ae:92:a2:89:4b:d0:ab:61:f5:0d:d0:8a:
         a7:30:7c:c7:71:b8:85:fe:70:87:3d:34:e1:4f:0a:3f:04:24:
         45:f5:8f:51:23:ab:2a:d7:5b:82:9e:c2:42:00:d2:dc:de:f1:
         70:94:22:11:44:aa:cb:d4:bb:92:0f:28:2d:98:1c:e1:7c:2b:
         4a:f2:05:16:56:d2:cf:3a:ff:7c:76:2d:25:2b:d8:6d:48:78:
         54:b5:69:45:13:d8:be:f2:53:6a:ef:9e:f9:bf:6f:b5:5f:dd:
         d2:3a:d5:41:a9:03:f5:9b:f4:83:44:ee:c1:95:b3:fe:d0:9e:
         5d:e9:8f:aa:ec:ed:f5:04:5e:51:e7:c2:6f:8b:c4:31:a8:dc:
         1f:41:fe:d4:03:c0:a4:e5:59:d5:69:11:a6:ea:d0:f6:22:10:
         c4:e1:3f:d5:a1:03:93:cb:43:27:7a:83:a4:97:f5:f4:b3:37:
         d3:22:f9:72:2d:27:4e:ec:5e:4f:ab:83:ad:b4:f5:84:57:e5:
         d3:51:cf:c4:e4:77:03:62:ac:a8:dc:4b:3b:bf:dd:8d:5b:93:
         37:23:d8:3c:ec:84:3c:57:0d:be:3a:2c:a6:48:11:af:b6:ed:
         73:25:a3:ec:61:3e:7e:34:1a:22:58:d9:00:20:b7:09:c0:5c:
         31:9c:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org