Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f31372d3234203d3e203236363139.roa
File:                     3137392e35302e302e302f31372d3234203d3e203236363139.roa (raw, json)
Hash identifier:          VFF48LYvj4WITQSqi537ydMQ1OMyWi0IpxAevpGq8VY=
Subject key identifier:   85:70:96:CD:8E:4C:C2:68:6A:7E:1F:11:66:B7:86:2F:D7:E7:39:19
Certificate issuer:       /CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9
Certificate serial:       54957E839935CD174D27AE831E949A1BCAA0BF7F
Authority key identifier: AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f31372d3234203d3e203236363139.roa
Signing time:             Mon 09 Dec 2024 20:00:00 +0000
ROA not before:           Mon 09 Dec 2024 19:55:00 +0000
ROA not after:            Mon 08 Dec 2025 20:00:00 +0000
asID:                     26619
IP address blocks:        179.50.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 31 Dec 2024 23:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:95:7e:83:99:35:cd:17:4d:27:ae:83:1e:94:9a:1b:ca:a0:bf:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9
        Validity
            Not Before: Dec  9 19:55:00 2024 GMT
            Not After : Dec  8 20:00:00 2025 GMT
        Subject: CN=857096CD8E4CC2686A7E1F1166B7862FD7E73919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:54:77:39:8b:8f:72:d2:ab:93:5e:e5:4a:
                    d4:8b:95:aa:ba:40:6d:38:79:32:6c:e7:86:a3:1a:
                    2a:b0:73:54:54:af:e5:74:dc:3a:dd:e1:a3:e1:e0:
                    08:03:87:5f:ac:1a:d5:83:d1:1b:f5:e1:e4:a9:6a:
                    bc:94:91:f1:cf:31:28:39:99:1a:12:cc:83:c6:79:
                    20:b6:95:f1:43:07:3c:09:1d:09:35:0c:5f:9a:f0:
                    a2:54:d5:58:19:a2:9b:7f:18:2f:6e:78:1b:26:37:
                    0c:fe:3d:81:0f:f9:74:c8:8e:21:09:5b:f8:39:00:
                    a4:18:52:cb:9d:19:c7:ba:91:97:35:ee:51:c8:38:
                    e0:6b:7f:8d:8b:c5:b2:fb:83:2f:98:f5:8a:d3:fd:
                    27:dd:4b:12:e4:3b:de:81:ad:ac:71:a0:01:01:03:
                    53:c5:67:5b:ff:a2:fd:8d:1f:4b:5b:45:44:65:4d:
                    33:bd:ba:62:3b:af:6e:0b:e3:cf:46:f4:64:8a:ef:
                    f7:b7:72:33:21:44:01:35:65:0b:36:08:3d:bc:a0:
                    b7:46:16:f3:a9:e0:c3:83:2b:a4:de:27:6b:98:b1:
                    fe:f7:8a:3b:2a:eb:c2:43:5e:75:8c:b5:25:4a:15:
                    25:64:59:b6:08:1d:8f:a0:2d:e3:92:e1:47:de:a1:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:70:96:CD:8E:4C:C2:68:6A:7E:1F:11:66:B7:86:2F:D7:E7:39:19
            X509v3 Authority Key Identifier:
                keyid:AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f31372d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         23:58:85:e2:4e:23:e8:2d:b5:22:a8:d8:64:40:9e:f3:53:0f:
         98:4f:cc:72:f2:b4:ef:76:46:42:0f:11:6d:53:f5:9c:55:bf:
         52:6f:be:68:67:9e:1c:50:1c:56:eb:2c:0c:cb:42:22:c6:04:
         eb:60:0c:a2:0a:15:8f:a0:36:96:84:ed:ea:a5:1e:3a:d8:9c:
         31:0e:f1:f3:c3:aa:c2:12:f3:29:65:c9:35:b1:51:a6:af:ab:
         1d:7c:ff:a7:88:d2:c0:16:00:9e:15:42:6e:5b:5c:d1:96:1a:
         63:e9:84:00:8e:15:88:1f:2a:0e:b7:19:3d:ef:86:e7:51:f7:
         7a:8d:27:4e:41:a4:3d:e6:5e:57:d9:b0:7a:52:0b:74:7e:0e:
         70:92:2f:51:75:89:8a:18:e7:3e:d1:66:c9:28:6c:db:bb:fc:
         c0:60:a2:10:71:fd:ea:6a:d0:94:66:be:5b:71:e4:24:ca:02:
         bb:ce:71:8f:1d:74:02:9f:9d:9a:4f:a1:fb:b3:61:e6:14:02:
         fc:ba:d7:85:c7:3d:fc:33:a8:8e:ea:cf:f8:d4:ed:d9:42:0c:
         76:be:f7:b5:19:6c:62:09:19:4c:73:61:20:73:b4:53:e9:98:
         7a:a8:a1:84:09:43:a2:cd:cc:38:2f:7b:00:e4:10:7c:99:74:
         9a:31:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 04:17:43 2024 by rpki-client on console-fra.rpki-client.org