Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2036313437.roa
File:                     3137392e302e31342e302f32342d3234203d3e2036313437.roa (raw, json)
Hash identifier:          Bvq/VBgLpsETLhFqmmsK/ZEB3D1jOnLzhGGwkgEOBZw=
Subject key identifier:   4F:55:D4:60:77:02:73:97:69:C5:97:F6:77:66:A3:9D:99:1A:9D:E9
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       17D1C85561BAF42410F375378D913C9AFCA126F6
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     6147
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d1:c8:55:61:ba:f4:24:10:f3:75:37:8d:91:3c:9a:fc:a1:26:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=4F55D4607702739769C597F67766A39D991A9DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:71:e6:e6:98:ab:c1:23:f9:ec:74:c3:d8:
                    28:be:d3:66:05:08:4f:0f:96:2e:c8:78:06:4d:21:
                    33:ee:bf:67:1d:43:8e:19:e9:24:11:b4:48:6b:9a:
                    07:d0:7f:6a:f5:90:2b:b9:bd:97:13:9b:8f:e2:19:
                    2d:d2:e9:9b:f7:cb:0c:25:7d:1a:15:b7:06:3b:65:
                    69:bf:f2:9e:d4:4e:5d:79:26:88:24:ce:ad:fa:4e:
                    0c:14:72:30:ad:ec:6f:51:d7:ed:b3:2f:b6:4a:87:
                    14:82:f5:ea:19:be:21:f3:04:20:b2:fd:57:8e:48:
                    9f:fd:2b:2b:9c:c0:e4:ea:a5:30:13:ce:f8:75:fe:
                    c6:6d:6c:f1:1f:f5:e7:65:9a:16:96:df:e9:ad:ad:
                    ca:95:e0:fc:b0:26:50:29:eb:73:14:cb:71:32:da:
                    06:74:4f:cd:c4:27:2a:67:4b:c9:66:44:5c:38:84:
                    ab:7a:d8:a3:a6:b0:9d:01:01:90:c0:f5:34:9d:25:
                    1c:6f:5c:80:eb:00:e4:2a:0e:40:bc:9a:ba:ef:c1:
                    63:0a:4a:fb:08:ca:91:03:57:e8:42:5b:f7:40:19:
                    d8:da:3f:22:56:c9:74:b5:1b:a6:b1:61:10:c2:fe:
                    e5:b6:8a:a5:2b:a9:ae:11:ce:7b:fa:68:11:67:31:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:D4:60:77:02:73:97:69:C5:97:F6:77:66:A3:9D:99:1A:9D:E9
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:48:d2:ac:77:73:16:dd:90:2c:89:79:c8:a0:5f:59:c2:
         5a:e0:ca:fa:d4:11:56:77:6e:6b:7b:0e:9c:32:2c:ad:42:9a:
         22:0f:dc:0a:23:e4:59:38:13:9e:df:f6:21:5d:b9:1d:9a:2b:
         8c:4b:8e:08:c9:ef:e6:86:00:42:0d:21:cd:8a:c6:bf:7c:0d:
         ab:62:00:d2:17:31:87:f6:12:35:44:37:46:bf:a1:73:3b:0e:
         d7:8b:50:8a:9f:8c:a9:d7:b6:5d:e9:75:82:0e:35:9a:07:8b:
         5e:50:7e:5d:72:69:59:e4:b9:f2:a8:dc:e4:ec:33:8c:05:58:
         00:9e:ff:68:a1:a9:3f:3f:81:c0:50:95:c3:ab:99:0f:5b:ea:
         dd:57:b1:05:e5:81:4d:d3:4b:68:3d:a5:90:05:9c:a7:fc:da:
         91:36:f4:d5:41:44:ae:29:12:5b:77:fe:34:ee:28:bc:4d:98:
         b0:58:92:17:5d:60:d0:e0:04:3e:b7:33:5a:57:28:a5:57:b6:
         87:b6:03:f8:b0:fb:c3:8f:5d:cb:ab:38:89:72:20:02:b3:43:
         8a:7a:09:13:12:f3:0d:03:fb:83:e2:39:ad:69:c8:53:86:c9:
         8b:36:a5:21:ef:a4:cd:5c:62:de:c3:2c:0e:5c:5a:59:fb:8f:
         eb:4c:c5:c9
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUF9HIVWG69CQQ83U3jZE8mvyhJvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNDAzMDUxNzM2MzFaFw0yNTAzMDQxNzQxMzFaMDMxMTAvBgNV
BAMTKDRGNTVENDYwNzcwMjczOTc2OUM1OTdGNjc3NjZBMzlEOTkxQTlERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQHHm5pirwSP57HTD2Ci+02YF
CE8Pli7IeAZNITPuv2cdQ44Z6SQRtEhrmgfQf2r1kCu5vZcTm4/iGS3S6Zv3ywwl
fRoVtwY7ZWm/8p7UTl15Jogkzq36TgwUcjCt7G9R1+2zL7ZKhxSC9eoZviHzBCCy
/VeOSJ/9KyucwOTqpTATzvh1/sZtbPEf9edlmhaW3+mtrcqV4PywJlAp63MUy3Ey
2gZ0T83EJypnS8lmRFw4hKt62KOmsJ0BAZDA9TSdJRxvXIDrAOQqDkC8mrrvwWMK
SvsIypEDV+hCW/dAGdjaPyJWyXS1G6axYRDC/uW2iqUrqa4Rznv6aBFnMfN5AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUT1XUYHcCc5dpxZf2d2ajnZkanekwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMxMzczOTJlMzAyZTMxMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMADjANBgkqhkiG
9w0BAQsFAAOCAQEAVthI0qx3cxbdkCyJecigX1nCWuDK+tQRVndua3sOnDIsrUKa
Ig/cCiPkWTgTnt/2IV25HZorjEuOCMnv5oYAQg0hzYrGv3wNq2IA0hcxh/YSNUQ3
Rr+hczsO14tQip+Mqde2Xel1gg41mgeLXlB+XXJpWeS58qjc5OwzjAVYAJ7/aKGp
Pz+BwFCVw6uZD1vq3VexBeWBTdNLaD2lkAWcp/zakTb01UFErikSW3f+NO4ovE2Y
sFiSF11g0OAEPrczWlcopVe2h7YD+LD7w49dy6s4iXIgArNDinoJExLzDQP7g+I5
rWnIU4bJizalIe+kzVxi3sMsDlxaWfuP60zFyQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org