Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137392e34392e39362e302f32302d3234203d3e203237393535.roa
File:                     3137392e34392e39362e302f32302d3234203d3e203237393535.roa (raw, json)
Hash identifier:          NpgV3LSibiOBJeVG8ACNF9ZqMIsDmPFO1sdYJTwehKE=
Subject key identifier:   9B:C2:59:C0:66:FB:FE:C6:1A:25:4B:A8:C4:0F:7A:98:E1:6C:D2:DF
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       6A5A58A2955930EE1F71CC5E9BA10D5DDAE48541
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137392e34392e39362e302f32302d3234203d3e203237393535.roa
Signing time:             Tue 05 Mar 2024 17:45:08 +0000
ROA not before:           Tue 05 Mar 2024 17:40:08 +0000
ROA not after:            Tue 04 Mar 2025 17:45:08 +0000
asID:                     27955
IP address blocks:        179.49.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5a:58:a2:95:59:30:ee:1f:71:cc:5e:9b:a1:0d:5d:da:e4:85:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Mar  5 17:40:08 2024 GMT
            Not After : Mar  4 17:45:08 2025 GMT
        Subject: CN=9BC259C066FBFEC61A254BA8C40F7A98E16CD2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:e6:9d:e7:63:f7:0f:79:18:97:46:0c:65:
                    d8:f0:ef:b2:09:0a:71:d9:5c:97:03:3f:2d:58:25:
                    50:71:b8:f6:cf:ce:d2:f9:b1:13:2d:ba:39:e1:27:
                    4a:c1:5b:09:36:a8:1c:a1:7e:b3:cd:d8:ef:5e:3e:
                    2a:ae:b5:4a:e2:2b:98:ae:39:44:14:01:59:62:c5:
                    88:82:73:e7:a7:d9:53:84:5e:98:b0:f6:b9:cd:63:
                    f5:33:29:bc:bc:7c:61:3a:7d:b4:8a:5c:f2:c6:27:
                    ec:68:0c:3a:26:eb:ea:d3:7a:ef:89:83:5b:74:ed:
                    62:93:25:dd:3a:56:9f:97:db:05:eb:32:4f:dc:ed:
                    87:c6:0d:00:62:91:01:5d:18:c0:bb:26:00:bb:22:
                    df:b7:f4:9f:67:6d:c0:9f:25:c9:28:15:b7:05:e0:
                    b5:2a:7c:94:d9:a1:fd:8f:65:ad:48:05:ac:27:7e:
                    ef:fa:68:9b:39:16:cb:e5:a0:89:8b:6e:16:63:4d:
                    ef:09:fd:7f:61:9d:c1:a4:d8:12:ae:8a:c9:4b:ab:
                    22:c2:9e:94:1d:46:99:27:a1:f0:bc:a7:18:30:14:
                    06:a8:1f:bc:04:f6:46:bd:af:cf:38:dc:24:91:db:
                    78:bf:bd:19:12:47:90:36:c6:09:82:6c:bc:8a:d4:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:59:C0:66:FB:FE:C6:1A:25:4B:A8:C4:0F:7A:98:E1:6C:D2:DF
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137392e34392e39362e302f32302d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:cb:b0:38:96:0c:d7:a7:79:88:57:89:58:62:83:65:64:
         1e:50:02:11:76:69:ab:0b:4a:3b:7b:a5:c3:aa:4c:75:db:d8:
         cf:bc:ac:eb:7d:2e:cc:24:7d:11:24:96:ca:d8:8a:ea:50:1c:
         eb:c6:b4:63:70:2a:e1:90:8f:6b:f4:af:a6:9f:13:9f:90:90:
         a0:c6:f8:ae:16:71:37:39:78:9c:07:49:48:ff:da:9e:fd:8c:
         43:35:75:a4:09:48:47:7e:a0:66:25:4c:3d:20:3e:77:18:d2:
         34:d9:ac:39:12:af:6a:fc:77:cd:a3:59:37:cd:7d:ed:2c:02:
         9f:75:76:3f:13:69:56:9b:b4:26:ff:71:85:f6:de:0e:bb:d5:
         c8:68:a0:11:80:0f:e6:79:20:7d:ba:cc:6d:cb:c5:b9:3d:7a:
         ba:5b:4a:e5:23:7e:78:eb:b6:85:b0:dd:c2:87:a3:e9:2c:89:
         21:43:ba:b9:e3:29:e7:56:8d:04:19:d0:17:c4:4a:8c:d6:94:
         52:a6:ff:0b:e4:74:16:f6:52:2b:6e:5f:f7:ed:cf:2d:82:f8:
         07:18:ee:12:7b:fc:84:4d:79:4f:4e:46:54:e5:33:d7:10:7c:
         a8:14:3d:26:bc:00:f3:8e:e8:d5:91:09:43:f2:de:0c:95:36:
         ec:44:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 05:21:03 2024 by rpki-client on console-fra.rpki-client.org