Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/3137392e36302e3139322e302f32322d3234203d3e203332393334.roa
File:                     3137392e36302e3139322e302f32322d3234203d3e203332393334.roa (raw, json)
Hash identifier:          n+/hpCRmUBX9HdqT2nXqNmT21b7toNfWFQwNSMTjKeQ=
Subject key identifier:   B8:0A:AE:16:35:9F:93:8D:4C:5E:B7:3D:0F:EA:B0:22:97:3E:B0:BB
Certificate issuer:       /CN=57EE4335FF7D52DB64468C8FA6B4173A9E2635AA
Certificate serial:       77F07EF9BAB0C188AC72F3C7BD0E7F63E84BBB50
Authority key identifier: 57:EE:43:35:FF:7D:52:DB:64:46:8C:8F:A6:B4:17:3A:9E:26:35:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/3137392e36302e3139322e302f32322d3234203d3e203332393334.roa
Signing time:             Tue 05 Mar 2024 17:46:06 +0000
ROA not before:           Tue 05 Mar 2024 17:41:06 +0000
ROA not after:            Tue 04 Mar 2025 17:46:06 +0000
asID:                     32934
IP address blocks:        179.60.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f0:7e:f9:ba:b0:c1:88:ac:72:f3:c7:bd:0e:7f:63:e8:4b:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57EE4335FF7D52DB64468C8FA6B4173A9E2635AA
        Validity
            Not Before: Mar  5 17:41:06 2024 GMT
            Not After : Mar  4 17:46:06 2025 GMT
        Subject: CN=B80AAE16359F938D4C5EB73D0FEAB022973EB0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:8c:a2:bf:b1:68:0e:ee:93:ac:a3:db:94:
                    72:4e:f9:32:70:33:75:fb:75:b0:7d:e6:16:2c:73:
                    1e:6c:35:76:2d:8b:be:93:33:37:a5:3e:9a:ee:33:
                    ea:49:51:36:2d:99:9e:e0:59:b4:bf:75:a1:69:14:
                    13:76:56:d8:26:65:e7:58:3e:91:5b:a2:c6:95:5c:
                    80:c1:7d:b7:67:9c:f0:01:64:5f:27:4f:66:85:35:
                    77:2e:aa:87:bb:c2:41:4d:fb:f7:c3:1e:8d:f2:7e:
                    97:fa:2f:5c:35:bf:76:e5:63:dc:94:99:71:5f:c1:
                    fd:38:2e:b3:be:47:46:d9:5e:a8:07:d9:ff:ef:37:
                    c3:c7:ec:03:21:47:b8:d4:bb:d3:99:d2:f6:7c:f6:
                    a4:97:d0:78:f0:48:43:d3:f3:b0:32:63:b4:db:4d:
                    02:51:70:62:1d:8f:6e:d2:52:74:b4:5e:12:5c:08:
                    78:b2:79:27:9c:25:d7:9d:51:4b:ac:a0:bb:d3:b8:
                    4b:7d:8b:19:1c:07:c6:0a:e7:92:60:36:b5:e2:52:
                    82:7a:69:f8:8e:c6:54:7b:6b:d0:6b:83:2c:4f:17:
                    84:41:41:dd:76:f1:04:91:ca:5a:c6:c6:e1:c2:bc:
                    ee:68:40:24:f9:51:53:3e:3c:bd:ad:ae:c2:44:fa:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:AE:16:35:9F:93:8D:4C:5E:B7:3D:0F:EA:B0:22:97:3E:B0:BB
            X509v3 Authority Key Identifier:
                keyid:57:EE:43:35:FF:7D:52:DB:64:46:8C:8F:A6:B4:17:3A:9E:26:35:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/3137392e36302e3139322e302f32322d3234203d3e203332393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:a4:8d:42:5a:18:18:9c:2a:c2:32:d2:30:ab:02:ea:23:
         58:6b:b8:35:35:31:a4:6f:31:97:c6:e5:e3:3e:e6:6f:7c:8b:
         d6:4f:1b:53:75:30:d7:e6:65:79:c2:8f:4b:3a:0c:98:e0:65:
         c4:9f:37:62:96:c9:6d:5e:a8:66:5e:3b:c6:50:cf:dd:c5:fa:
         27:5b:62:c7:77:0b:ee:e5:83:d4:4e:94:56:8f:4c:9f:64:50:
         49:49:1b:77:ab:f1:cb:1e:4c:cd:cf:2a:99:85:b9:d4:f5:65:
         50:d4:5c:03:fe:1e:3a:d1:d4:c1:78:bb:4c:66:cc:bd:88:18:
         e8:ae:50:86:78:9a:55:04:eb:c9:42:79:7c:b4:7b:23:5b:f9:
         bc:48:11:5a:b2:a2:a8:cd:21:89:f7:9b:11:bb:d2:9c:a6:79:
         98:54:e8:d5:11:af:76:bc:72:10:d5:61:1a:d0:2d:00:09:31:
         0a:90:dd:b9:40:14:a1:cd:23:2c:2c:d2:c1:50:6c:96:2d:14:
         72:80:8c:47:ee:bc:f9:c7:2d:2d:d2:97:81:09:34:31:f4:be:
         43:6d:f7:bb:12:6b:bc:04:a8:40:65:21:f9:85:ab:a6:3a:cb:
         6d:7a:a5:2b:d7:f9:88:95:8a:cd:15:e5:84:3c:ba:99:4d:22:
         21:51:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org