Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2033313332.roa
File:                     3137392e302e31342e302f32342d3234203d3e2033313332.roa (raw, json)
Hash identifier:          V3drUhsHVaF1EkIF8DmXhgfwQPq3hyUsglO2zFLDayY=
Subject key identifier:   AC:E7:08:AF:1B:61:71:89:7E:0E:F8:42:58:3F:C0:A9:71:76:B0:75
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       4EFF0F1CAB6606BD7145ACFF3E4A2DA2F3D860FD
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2033313332.roa
Signing time:             Tue 05 Mar 2024 17:41:27 +0000
ROA not before:           Tue 05 Mar 2024 17:36:27 +0000
ROA not after:            Tue 04 Mar 2025 17:41:27 +0000
asID:                     3132
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ff:0f:1c:ab:66:06:bd:71:45:ac:ff:3e:4a:2d:a2:f3:d8:60:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:27 2024 GMT
            Not After : Mar  4 17:41:27 2025 GMT
        Subject: CN=ACE708AF1B6171897E0EF842583FC0A97176B075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:c4:a0:de:4c:a7:7f:ce:61:7b:b0:06:1f:
                    6d:fd:3e:08:b1:6b:97:4a:c5:72:b9:45:78:a6:07:
                    d6:9f:1f:d0:be:6c:d9:a0:ce:b0:38:8d:83:34:ce:
                    75:77:aa:a3:6a:e7:18:1b:e5:7e:9a:43:ed:3b:e1:
                    92:79:75:d3:0f:73:de:00:c7:46:42:2e:47:1c:a0:
                    e2:d9:ee:c4:d5:a5:1c:00:0b:8f:82:94:ec:0d:9a:
                    82:ad:49:28:4e:6c:0a:1b:0c:38:b5:aa:73:35:59:
                    cc:13:2f:c9:1b:3e:31:e1:7c:7b:f2:51:25:52:f6:
                    e3:84:60:13:5b:d0:e5:be:c8:da:c9:23:5c:21:8c:
                    40:d1:ce:51:e8:12:2b:27:14:4c:31:61:6e:99:d6:
                    16:79:2b:7d:f7:9c:89:0b:b5:9f:db:87:4d:8a:bf:
                    15:18:59:d6:77:e3:fe:eb:e4:f7:79:22:9f:60:89:
                    c6:fb:78:e2:56:60:ae:ba:79:1d:25:e7:3f:31:89:
                    f5:61:38:5e:96:e2:6f:79:18:c6:dc:00:1e:2e:73:
                    17:c0:e0:e6:b5:66:0a:7d:30:52:8f:eb:b0:7c:07:
                    a9:41:db:41:a7:f9:ef:8f:7f:f4:66:cb:32:8f:40:
                    65:82:f0:6f:5e:0e:94:b7:38:d3:6b:51:80:6f:51:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E7:08:AF:1B:61:71:89:7E:0E:F8:42:58:3F:C0:A9:71:76:B0:75
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2033313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1c:c8:93:95:45:e1:9c:8b:51:24:8b:65:50:27:8d:ce:ec:
         cc:29:d0:b9:9e:d1:b4:04:4c:b9:69:ca:0c:ee:cc:e7:07:7a:
         48:b6:75:56:8f:67:01:23:20:ca:2c:8a:af:27:28:bd:f7:e3:
         6e:86:5d:51:d3:a8:bb:54:e4:1f:1b:22:27:05:f2:cd:f6:06:
         6f:f6:7b:cf:29:c9:20:75:d6:f8:f2:cb:6b:fc:6f:c1:1e:63:
         44:55:94:4c:4d:2a:a9:d7:75:32:9b:ee:61:6c:19:b9:67:ba:
         94:79:22:92:57:4e:10:15:08:85:e1:6a:97:36:49:db:e1:39:
         1f:74:c7:2e:71:2e:f0:7e:9f:9c:be:f5:13:b6:3c:a7:a2:6f:
         0f:dc:ee:fd:70:10:66:5c:77:75:18:57:e5:f0:2c:2a:94:0f:
         45:7a:d7:b0:44:28:2d:12:83:55:2f:73:63:fd:75:0c:fd:b9:
         ee:89:22:28:32:51:32:47:16:ba:57:a4:4c:a2:fa:89:49:d8:
         8f:3b:d6:5a:99:cd:1b:0d:f8:14:10:35:58:5c:61:8d:95:fe:
         2a:0f:f8:c6:64:1f:5c:e4:31:3f:c0:93:08:ad:89:a6:14:1b:
         3b:e6:27:80:97:07:29:e9:17:2b:7e:03:c2:ed:d7:2e:7d:98:
         d7:8c:d7:f1
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUTv8PHKtmBr1xRaz/PkotovPYYP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNDAzMDUxNzM2MjdaFw0yNTAzMDQxNzQxMjdaMDMxMTAvBgNV
BAMTKEFDRTcwOEFGMUI2MTcxODk3RTBFRjg0MjU4M0ZDMEE5NzE3NkIwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHsSg3kynf85he7AGH239Pgix
a5dKxXK5RXimB9afH9C+bNmgzrA4jYM0znV3qqNq5xgb5X6aQ+074ZJ5ddMPc94A
x0ZCLkccoOLZ7sTVpRwAC4+ClOwNmoKtSShObAobDDi1qnM1WcwTL8kbPjHhfHvy
USVS9uOEYBNb0OW+yNrJI1whjEDRzlHoEisnFEwxYW6Z1hZ5K333nIkLtZ/bh02K
vxUYWdZ34/7r5Pd5Ip9gicb7eOJWYK66eR0l5z8xifVhOF6W4m95GMbcAB4ucxfA
4Oa1Zgp9MFKP67B8B6lB20Gn+e+Pf/RmyzKPQGWC8G9eDpS3ONNrUYBvUU5BAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUrOcIrxthcYl+DvhCWD/AqXF2sHUwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMxMzczOTJlMzAyZTMxMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMxMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMADjANBgkqhkiG
9w0BAQsFAAOCAQEAQhzIk5VF4ZyLUSSLZVAnjc7szCnQuZ7RtARMuWnKDO7M5wd6
SLZ1Vo9nASMgyiyKrycovffjboZdUdOou1TkHxsiJwXyzfYGb/Z7zynJIHXW+PLL
a/xvwR5jRFWUTE0qqdd1MpvuYWwZuWe6lHkikldOEBUIheFqlzZJ2+E5H3THLnEu
8H6fnL71E7Y8p6JvD9zu/XAQZlx3dRhX5fAsKpQPRXrXsEQoLRKDVS9zY/11DP25
7okiKDJRMkcWulekTKL6iUnYjzvWWpnNGw34FBA1WFxhjZX+Kg/4xmQfXOQxP8CT
CK2JphQbO+YngJcHKekXK34Dwu3XLn2Y14zX8Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org