Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/3137392e302e3132392e302f32342d3234203d3e20323637393037.roa
File:                     3137392e302e3132392e302f32342d3234203d3e20323637393037.roa (raw, json)
Hash identifier:          yWAE1vGSCVqK5YCZoPQxhQdnr6PzX7Fg98j/gCvHiS8=
Subject key identifier:   69:1E:FF:77:50:47:6E:91:32:33:E0:94:43:1F:28:73:74:DE:E9:82
Certificate issuer:       /CN=C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4
Certificate serial:       7622875077B199713A97803996FD3D04241D32DD
Authority key identifier: C3:BA:DC:D0:C2:8F:DB:7B:45:4B:04:DB:1C:F6:F6:7A:91:AD:C9:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/3137392e302e3132392e302f32342d3234203d3e20323637393037.roa
Signing time:             Tue 05 Mar 2024 18:05:36 +0000
ROA not before:           Tue 05 Mar 2024 18:00:36 +0000
ROA not after:            Tue 04 Mar 2025 18:05:36 +0000
asID:                     267907
IP address blocks:        179.0.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:22:87:50:77:b1:99:71:3a:97:80:39:96:fd:3d:04:24:1d:32:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4
        Validity
            Not Before: Mar  5 18:00:36 2024 GMT
            Not After : Mar  4 18:05:36 2025 GMT
        Subject: CN=691EFF7750476E913233E094431F287374DEE982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:f6:d8:c8:ed:1e:55:b1:a0:85:00:6c:bf:
                    40:b1:8c:aa:67:47:25:02:f6:1c:14:80:88:f9:e4:
                    a9:04:7f:85:5a:12:27:2c:80:6f:dc:4f:90:cd:f0:
                    59:ed:bb:2a:9d:60:9b:b2:08:03:29:a2:73:cb:13:
                    16:2c:10:90:b5:26:dc:02:79:0f:7c:6c:24:3d:96:
                    4d:2e:9c:7d:e0:0b:56:69:32:44:b4:42:14:35:86:
                    a7:68:35:e6:d5:31:8c:eb:be:bf:d3:2f:af:70:76:
                    3b:6d:02:33:c9:13:c0:c0:0f:f2:8d:58:57:a7:90:
                    3a:77:87:a5:ae:ee:9b:09:bc:c7:f6:53:00:27:92:
                    37:51:d9:d1:8b:d2:9a:da:84:b9:af:50:ed:cd:7e:
                    25:a3:c0:5d:2e:7f:0d:dd:a8:e2:7f:14:63:fe:ed:
                    57:66:ea:cd:52:7a:43:ed:48:4f:f4:6d:e9:75:fe:
                    0b:ad:79:e5:40:20:2f:66:74:3d:ed:ec:db:a2:8f:
                    dc:f3:41:a2:e2:4a:c3:df:9a:4d:6c:c7:94:ab:7a:
                    40:af:ea:72:c1:c1:39:ba:65:fe:fa:75:6f:12:ed:
                    2d:c3:57:ff:14:0c:25:c0:15:0e:1c:13:1b:5e:1a:
                    c3:21:6f:f7:de:63:04:b7:82:45:8c:67:12:0b:72:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1E:FF:77:50:47:6E:91:32:33:E0:94:43:1F:28:73:74:DE:E9:82
            X509v3 Authority Key Identifier:
                keyid:C3:BA:DC:D0:C2:8F:DB:7B:45:4B:04:DB:1C:F6:F6:7A:91:AD:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3BADCD0C28FDB7B454B04DB1CF6F67A91ADC9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27EE46F9F0FD2064D51925CC1EAB1BD31C3DF0C90BC9485EEF7571F1D65BC4A8/0/3137392e302e3132392e302f32342d3234203d3e20323637393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:da:0f:c4:35:a5:0a:96:07:48:64:b8:70:a4:a8:81:6f:5b:
         7d:0e:34:33:9d:5f:08:a4:76:f0:23:98:7b:e4:d7:99:9d:96:
         21:7b:4e:2d:79:5a:7d:89:b3:0e:cc:9f:f3:51:83:66:8f:7d:
         f6:7a:db:5c:87:3c:ce:d7:59:ab:aa:9e:5b:e3:cb:53:61:bc:
         0b:75:e8:76:f4:b7:4d:a6:10:a9:df:f5:8c:35:a5:39:d9:9e:
         f5:b3:19:b0:55:b4:82:86:c2:b9:33:d2:29:41:fd:60:38:fe:
         f7:c5:ea:e5:a2:81:09:ea:cc:54:b4:a9:c6:fe:c5:dc:c7:d9:
         77:2e:5d:68:71:f8:d7:90:6f:81:59:55:53:d3:ec:8d:47:a2:
         6c:95:f5:c2:36:20:94:a5:ba:c0:74:25:85:0a:3c:01:8c:04:
         89:f0:ea:d7:3d:5d:12:b3:e2:a1:03:20:a0:ee:58:6e:d8:34:
         31:94:15:86:16:e6:5b:a2:86:a5:c4:25:50:8e:8c:be:ff:0f:
         f1:bf:5d:9c:0c:28:8e:57:aa:09:15:51:e0:cb:01:f7:a2:18:
         8c:fc:25:7c:c3:72:ab:ac:2d:f9:da:1e:54:8f:65:ce:da:07:
         1b:24:8b:d0:58:42:7d:ab:43:2f:82:34:63:59:52:fd:ee:b6:
         e7:e1:21:d2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdiKHUHexmXE6l4A5lv09BCQdMt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNCQURDRDBDMjhGREI3QjQ1NEIwNERCMUNGNkY2N0E5
MUFEQzlCNDAeFw0yNDAzMDUxODAwMzZaFw0yNTAzMDQxODA1MzZaMDMxMTAvBgNV
BAMTKDY5MUVGRjc3NTA0NzZFOTEzMjMzRTA5NDQzMUYyODczNzRERUU5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOb/bYyO0eVbGghQBsv0CxjKpn
RyUC9hwUgIj55KkEf4VaEicsgG/cT5DN8FntuyqdYJuyCAMponPLExYsEJC1JtwC
eQ98bCQ9lk0unH3gC1ZpMkS0QhQ1hqdoNebVMYzrvr/TL69wdjttAjPJE8DAD/KN
WFenkDp3h6Wu7psJvMf2UwAnkjdR2dGL0prahLmvUO3NfiWjwF0ufw3dqOJ/FGP+
7Vdm6s1SekPtSE/0bel1/guteeVAIC9mdD3t7Nuij9zzQaLiSsPfmk1sx5SrekCv
6nLBwTm6Zf76dW8S7S3DV/8UDCXAFQ4cExteGsMhb/feYwS3gkWMZxILcvxXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaR7/d1BHbpEyM+CUQx8oc3Te6YIwHwYDVR0j
BBgwFoAUw7rc0MKP23tFSwTbHPb2epGtybQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yN0VFNDZGOUYwRkQyMDY0RDUxOTI1Q0MxRUFCMUJEMzFD
M0RGMEM5MEJDOTQ4NUVFRjc1NzFGMUQ2NUJDNEE4LzAvQzNCQURDRDBDMjhGREI3
QjQ1NEIwNERCMUNGNkY2N0E5MUFEQzlCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0JBRENEMEMyOEZEQjdCNDU0
QjA0REIxQ0Y2RjY3QTkxQURDOUI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjdFRTQ2RjlGMEZEMjA2NEQ1MTkyNUNDMUVBQjFCRDMxQzNERjBDOTBC
Qzk0ODVFRUY3NTcxRjFENjVCQzRBOC8wLzMxMzczOTJlMzAyZTMxMzIzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMAgTAN
BgkqhkiG9w0BAQsFAAOCAQEAMtoPxDWlCpYHSGS4cKSogW9bfQ40M51fCKR28COY
e+TXmZ2WIXtOLXlafYmzDsyf81GDZo999nrbXIc8ztdZq6qeW+PLU2G8C3XodvS3
TaYQqd/1jDWlOdme9bMZsFW0gobCuTPSKUH9YDj+98Xq5aKBCerMVLSpxv7F3MfZ
dy5daHH415BvgVlVU9PsjUeibJX1wjYglKW6wHQlhQo8AYwEifDq1z1dErPioQMg
oO5Ybtg0MZQVhhbmW6KGpcQlUI6Mvv8P8b9dnAwojleqCRVR4MsB96IYjPwlfMNy
q6wt+doeVI9lztoHGySL0FhCfatDL4I0Y1lS/e625+Eh0g==
-----END CERTIFICATE-----
Generated at Tue Nov 19 01:52:46 2024 by rpki-client on console-fra.rpki-client.org