Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32342d3234203d3e20323730303831.roa
File:                     3137392e34392e3135382e302f32342d3234203d3e20323730303831.roa (raw, json)
Hash identifier:          F5Byc6oy6XUmAu9rzaQRbt4Mo8Gt0AVeiP24fqdnU3I=
Subject key identifier:   A8:61:00:5D:FB:14:AE:35:E6:33:1E:CA:6D:D7:C2:08:7E:C8:82:EB
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       6ACC0AC95A4C4C58FC1F925F9CBE7B3A5F6C2FF4
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32342d3234203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:17 +0000
ROA not before:           Tue 05 Mar 2024 17:42:17 +0000
ROA not after:            Tue 04 Mar 2025 17:47:17 +0000
asID:                     270081
IP address blocks:        179.49.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cc:0a:c9:5a:4c:4c:58:fc:1f:92:5f:9c:be:7b:3a:5f:6c:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:17 2024 GMT
            Not After : Mar  4 17:47:17 2025 GMT
        Subject: CN=A861005DFB14AE35E6331ECA6DD7C2087EC882EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:e2:b6:d5:3a:16:3f:46:30:20:b5:07:1d:
                    05:e9:58:52:7c:57:3d:40:63:8b:aa:0e:d9:b0:7b:
                    55:2d:c1:7d:28:e5:ec:7a:43:63:98:79:63:b5:47:
                    e5:68:75:f4:ad:2b:e7:aa:06:69:42:1f:86:de:6c:
                    81:e5:8d:b7:10:27:77:0f:19:c7:a0:a9:af:f1:4a:
                    5a:02:04:89:55:3c:21:e3:2d:8e:a4:2b:de:de:4a:
                    f3:d7:36:08:ee:7c:2d:44:9d:e6:53:dc:0c:c7:a6:
                    14:1e:9e:a8:db:8d:21:bb:17:c4:26:48:a7:5d:ce:
                    9a:b3:a5:cc:63:d6:3a:4c:b7:4c:2d:7d:3c:2e:8e:
                    da:73:b1:c9:39:68:8c:84:90:0f:19:a7:1b:4a:6c:
                    75:b7:3a:40:5f:5f:49:ca:56:00:ec:bd:4b:e2:b8:
                    8f:e2:32:8f:83:b1:cb:99:d4:ea:24:4b:11:e0:24:
                    c5:8e:75:62:67:92:a8:48:e5:67:22:45:7e:7a:be:
                    54:af:00:82:6d:24:5e:fb:dc:ea:e8:57:bf:f0:f2:
                    e4:62:3f:cd:6f:03:3a:ab:69:10:17:e7:a7:7b:65:
                    4d:47:20:91:df:01:6e:74:20:db:d5:4a:42:57:52:
                    7c:2d:c2:03:69:7a:50:86:78:7c:0f:81:04:11:5e:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:61:00:5D:FB:14:AE:35:E6:33:1E:CA:6D:D7:C2:08:7E:C8:82:EB
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32342d3234203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:20:2d:68:fd:95:76:bd:27:6d:b9:86:44:ed:a2:2c:97:
         03:86:e0:e1:e7:2f:88:a3:cc:b9:b7:b9:c8:db:9d:ec:7c:ec:
         31:8c:4f:77:7c:dd:1d:51:15:b9:44:9f:5a:da:bb:05:d0:6e:
         87:36:de:31:dc:1f:aa:13:26:a7:b0:3c:75:dc:3e:c8:55:16:
         3a:a9:01:98:1b:4e:2c:6e:2e:18:c9:b2:75:51:da:88:47:c8:
         c6:ee:a3:80:aa:f7:67:ec:a9:59:32:68:03:23:4b:ff:3b:29:
         76:e3:9b:cb:7e:3f:2a:3c:8d:05:f3:4a:94:14:9f:a9:07:c3:
         8a:80:82:28:59:d3:5e:9f:5a:06:ff:9b:b3:aa:d2:e8:5a:6e:
         7a:05:f4:0e:f9:a4:b5:4e:74:fc:18:d7:d8:64:69:ad:72:7d:
         01:d3:eb:65:0a:9c:d0:e0:39:4b:1f:b5:cb:ee:ee:69:32:17:
         a7:a8:4f:55:78:93:5d:60:e9:13:d3:20:e0:7f:32:db:7b:8c:
         3d:66:ab:10:73:99:56:80:f0:92:96:5a:57:ab:94:ad:5b:4d:
         0b:7c:5b:70:b2:dd:d4:41:e0:28:1a:c8:51:58:bb:64:a0:38:
         3d:c5:f8:1c:24:7c:07:e3:68:34:03:3b:82:5b:44:19:aa:5d:
         b0:33:82:c5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaswKyVpMTFj8H5JfnL57Ol9sL/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy
RTM5MDhDMzAeFw0yNDAzMDUxNzQyMTdaFw0yNTAzMDQxNzQ3MTdaMDMxMTAvBgNV
BAMTKEE4NjEwMDVERkIxNEFFMzVFNjMzMUVDQTZERDdDMjA4N0VDODgyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyheK21ToWP0YwILUHHQXpWFJ8
Vz1AY4uqDtmwe1UtwX0o5ex6Q2OYeWO1R+VodfStK+eqBmlCH4bebIHljbcQJ3cP
Gcegqa/xSloCBIlVPCHjLY6kK97eSvPXNgjufC1EneZT3AzHphQenqjbjSG7F8Qm
SKddzpqzpcxj1jpMt0wtfTwujtpzsck5aIyEkA8ZpxtKbHW3OkBfX0nKVgDsvUvi
uI/iMo+DscuZ1OokSxHgJMWOdWJnkqhI5WciRX56vlSvAIJtJF773OroV7/w8uRi
P81vAzqraRAX56d7ZU1HIJHfAW50INvVSkJXUnwtwgNpelCGeHwPgQQRXjxdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqGEAXfsUrjXmMx7KbdfCCH7IguswHwYDVR0j
BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC
M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF
ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2
M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx
OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMxMzczOTJlMzQzOTJlMzEzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAszGe
MA0GCSqGSIb3DQEBCwUAA4IBAQA9aCAtaP2Vdr0nbbmGRO2iLJcDhuDh5y+Io8y5
t7nI253sfOwxjE93fN0dURW5RJ9a2rsF0G6HNt4x3B+qEyansDx13D7IVRY6qQGY
G04sbi4YybJ1UdqIR8jG7qOAqvdn7KlZMmgDI0v/Oyl245vLfj8qPI0F80qUFJ+p
B8OKgIIoWdNen1oG/5uzqtLoWm56BfQO+aS1TnT8GNfYZGmtcn0B0+tlCpzQ4DlL
H7XL7u5pMhenqE9VeJNdYOkT0yDgfzLbe4w9ZqsQc5lWgPCSllpXq5StW00LfFtw
st3UQeAoGshRWLtkoDg9xfgcJHwH42g0AzuCW0QZql2wM4LF
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org