Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/3c78907604337f1eca3ff50f049bb386d5c05c9f.roa
File:                     3c78907604337f1eca3ff50f049bb386d5c05c9f.roa (raw, json)
Hash identifier:          rEd8iTUL8QBnHy7n4BLDCfEKxtSWvoXClZvmSD6OOYc=
Subject key identifier:   EF:CB:4A:1A:9D:AD:1E:2D:A3:42:F7:0D:1B:E3:67:DD:7C:85:E2:A1
Certificate issuer:       /CN=8b04d3acf5ada43465249ebebd2bc06630ef9fb9
Certificate serial:       0C4579
Authority key identifier: 29:D0:6D:B5:60:7B:0F:51:CA:9F:50:1C:C7:A2:98:E5:EE:BB:92:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/3c78907604337f1eca3ff50f049bb386d5c05c9f.roa
Signing time:             Wed 24 Mar 2021 14:34:20 +0000
ROA not before:           Wed 24 Mar 2021 14:34:20 +0000
ROA not after:            Tue 24 Mar 2026 14:34:20 +0000
asID:                     264780
IP address blocks:        179.61.98.0/24 maxlen: 24
                          179.61.99.0/24 maxlen: 24
                          179.61.102.0/24 maxlen: 24
                          179.61.107.0/24 maxlen: 24
                          179.61.108.0/24 maxlen: 24
                          179.61.109.0/24 maxlen: 24
                          179.61.110.0/24 maxlen: 24
                          179.61.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804217 (0xc4579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b04d3acf5ada43465249ebebd2bc06630ef9fb9
        Validity
            Not Before: Mar 24 14:34:20 2021 GMT
            Not After : Mar 24 14:34:20 2026 GMT
        Subject: CN=3c78907604337f1eca3ff50f049bb386d5c05c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:38:cd:50:25:e4:1a:a2:7b:e0:e7:d3:f9:e8:
                    99:f9:b8:0e:8b:44:c7:36:35:c7:3e:3f:50:a0:d9:
                    4e:a6:e7:e0:de:18:fb:34:94:5b:60:41:37:09:81:
                    16:17:73:80:f2:83:20:e1:da:53:99:df:98:f8:27:
                    d7:be:96:1a:0d:89:26:40:b3:e7:20:d8:71:53:7a:
                    72:cf:19:f9:18:55:68:c4:0f:7f:de:3d:e1:25:68:
                    9e:69:4a:a2:87:31:bd:09:90:61:22:7a:13:01:02:
                    91:b0:1c:99:de:3c:cf:da:c5:8d:a0:99:65:a4:54:
                    e1:5d:6e:12:2f:96:5e:35:89:39:39:88:a8:d5:ef:
                    4f:88:c6:48:a9:ae:bc:11:0e:f0:67:1e:61:0b:77:
                    f4:ab:42:37:e6:3b:77:55:65:05:4c:c8:b5:68:81:
                    47:5b:31:c9:52:ce:6b:84:29:a1:98:86:6b:33:0d:
                    0d:11:72:b6:e7:ee:ed:4a:9d:45:7f:39:83:a8:51:
                    82:d0:de:92:07:ac:c8:4b:2a:33:aa:16:80:74:64:
                    c3:a7:03:c7:08:27:63:ef:8d:b9:4f:93:ba:7e:42:
                    f4:7f:60:97:e3:4e:27:9b:ed:0a:ec:9f:bf:6f:6d:
                    b6:9f:45:fb:2e:6b:68:57:16:83:4b:bc:17:20:13:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:4A:1A:9D:AD:1E:2D:A3:42:F7:0D:1B:E3:67:DD:7C:85:E2:A1
            X509v3 Authority Key Identifier:
                keyid:29:D0:6D:B5:60:7B:0F:51:CA:9F:50:1C:C7:A2:98:E5:EE:BB:92:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/3c78907604337f1eca3ff50f049bb386d5c05c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b23597be-5373-4d66-a48a-fe3ddeccfe90/8b04d3acf5ada43465249ebebd2bc06630ef9fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.98.0/23
                  179.61.102.0/24
                  179.61.107.0-179.61.111.255

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:99:49:89:71:69:3c:3b:fb:bb:90:dc:4d:b7:92:56:54:
         11:00:2c:1b:69:93:94:a3:15:f9:8d:65:91:bc:37:28:43:22:
         e5:18:7c:29:a7:cb:b4:50:c7:83:fe:83:62:65:3c:95:a1:ea:
         a1:57:9d:50:a6:83:cf:14:6b:e2:dd:d1:29:c1:bd:02:24:71:
         57:da:d4:46:1f:d2:fe:36:77:b2:a5:5d:ab:41:56:d7:f0:a2:
         21:b2:76:45:5d:da:d1:5f:77:66:9f:0a:e6:7e:59:b6:4a:f0:
         c6:43:22:b9:78:dc:46:a7:9d:83:21:95:41:c9:54:bb:9b:38:
         50:0a:f0:87:c0:9f:fb:f6:e5:ae:45:05:4c:eb:51:de:88:6f:
         af:17:2d:e4:b3:8b:f9:1d:cf:d4:59:84:da:85:5d:62:f9:4e:
         e7:4d:92:78:ab:99:b6:ef:7b:87:77:c4:b4:9b:36:0e:c6:f8:
         44:21:f1:f4:ae:26:24:0f:85:6f:53:b2:69:b3:73:f6:96:e5:
         bb:f3:48:ff:25:b1:2c:26:d5:75:a6:cd:5d:c8:09:44:df:83:
         da:3c:8f:ea:78:3f:81:19:fc:db:aa:a5:b6:97:23:91:7f:9d:
         18:ba:12:71:42:33:93:69:d9:43:3f:a6:8a:e5:6d:32:0d:fb:
         40:08:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:40:40 2024 by rpki-client on console-fra.rpki-client.org