Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38352e302f32342d3234203d3e203238343332.roa
File:                     3137372e3132342e38352e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          QlRldh0PVpTloyJXtcUBVGpBxCLd3DHj6HfZGGkX/gA=
Subject key identifier:   DE:4F:82:F0:01:71:F9:83:E4:0E:DD:33:E5:F7:CD:56:BC:CA:C0:7D
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       16A3F03185B9C3403593980E056A868A3532E5E2
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38352e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 18:23:42 +0000
ROA not before:           Tue 05 Mar 2024 18:18:42 +0000
ROA not after:            Tue 04 Mar 2025 18:23:42 +0000
asID:                     28432
IP address blocks:        177.124.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a3:f0:31:85:b9:c3:40:35:93:98:0e:05:6a:86:8a:35:32:e5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Mar  5 18:18:42 2024 GMT
            Not After : Mar  4 18:23:42 2025 GMT
        Subject: CN=DE4F82F00171F983E40EDD33E5F7CD56BCCAC07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:d6:9d:ad:f3:ce:1c:6b:ad:3c:be:8a:13:
                    64:9b:93:70:46:da:e7:ca:2f:53:c5:2b:fb:2e:d5:
                    49:a1:33:85:bf:db:f5:f6:b9:7f:2e:b5:63:dd:87:
                    65:b2:90:cf:77:10:46:f5:e0:bb:e2:f8:c2:2c:da:
                    1a:a2:1c:e9:d0:4d:28:10:e7:03:79:e4:0d:a7:a4:
                    ca:e7:d4:7f:2c:25:da:5e:d2:9c:6c:ad:20:64:62:
                    66:9a:d0:39:15:f9:eb:87:70:5b:f3:2e:4e:5e:6e:
                    5c:b2:08:a0:23:25:94:97:6f:75:02:79:83:da:63:
                    5e:17:dc:b0:11:85:af:a5:57:c5:6b:73:49:fc:ff:
                    23:ad:5b:6d:d4:2f:36:b6:9b:9c:fd:4b:86:e2:2b:
                    8c:13:9f:59:b1:16:eb:90:76:07:89:c9:28:12:fb:
                    d3:04:23:f6:6a:46:99:54:fb:38:66:ea:4b:e5:a8:
                    27:84:d9:77:ce:27:59:f3:4c:29:b9:ca:c6:9d:d5:
                    02:5f:dc:fa:71:23:f8:cb:5c:d0:a9:fd:cf:34:c3:
                    20:a7:52:d1:b0:e4:b9:29:c9:b0:7e:aa:e9:a9:d5:
                    86:d2:6f:c3:fe:7e:6a:6a:84:f9:68:07:6a:e0:22:
                    70:6d:82:1f:e7:2c:c6:9e:67:bf:8c:6b:1a:49:f9:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:82:F0:01:71:F9:83:E4:0E:DD:33:E5:F7:CD:56:BC:CA:C0:7D
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38352e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:95:d4:cd:54:b5:7e:82:40:b6:93:ec:0d:b3:d4:87:67:f4:
         d2:3d:35:fe:ad:2f:10:a4:01:9d:03:d5:5a:8a:45:2f:3e:76:
         89:dd:16:20:46:2b:d3:e6:85:34:94:59:6e:f0:ae:8e:4f:ed:
         f0:e3:af:25:a9:3b:30:6d:5a:ec:42:73:88:2f:9a:bc:3c:2d:
         65:63:22:a0:1e:ac:a6:b5:6a:f9:e1:79:af:d5:b8:74:3c:51:
         30:fc:db:54:72:be:0e:f1:bd:c8:55:ef:11:b8:b1:8b:a7:0d:
         c8:ae:30:2e:af:8b:8d:71:1e:cb:c7:a4:5e:41:56:e2:18:d8:
         3f:d7:9e:38:ac:35:24:95:16:0d:db:d8:f5:02:96:a4:bb:ec:
         4c:8c:bb:81:ca:ca:60:e9:80:7f:2d:a6:ff:80:59:37:5d:3e:
         09:36:67:e8:22:bf:b3:e2:bd:32:a7:71:48:bf:36:55:a9:a2:
         af:5f:6f:ac:a8:1a:b6:45:76:a9:98:97:9f:f2:58:53:1d:a4:
         97:a7:f2:80:26:6c:fb:b9:a0:35:2c:c5:57:f4:e3:88:5e:6c:
         54:bb:bb:e4:0b:12:8a:69:05:85:ec:88:54:ae:28:3c:7d:59:
         c4:f6:16:c1:4c:10:ee:d3:b3:00:0b:c8:5d:27:05:3c:a5:62:
         fc:f0:07:72
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFqPwMYW5w0A1k5gOBWqGijUy5eIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0OUI1QTVFQUU3NzU1N0JCMTUwQTUwNDQ2MDFFMTJG
QkIzOUNFOTAeFw0yNDAzMDUxODE4NDJaFw0yNTAzMDQxODIzNDJaMDMxMTAvBgNV
BAMTKERFNEY4MkYwMDE3MUY5ODNFNDBFREQzM0U1RjdDRDU2QkNDQUMwN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyLtadrfPOHGutPL6KE2Sbk3BG
2ufKL1PFK/su1UmhM4W/2/X2uX8utWPdh2WykM93EEb14Lvi+MIs2hqiHOnQTSgQ
5wN55A2npMrn1H8sJdpe0pxsrSBkYmaa0DkV+euHcFvzLk5eblyyCKAjJZSXb3UC
eYPaY14X3LARha+lV8Vrc0n8/yOtW23ULza2m5z9S4biK4wTn1mxFuuQdgeJySgS
+9MEI/ZqRplU+zhm6kvlqCeE2XfOJ1nzTCm5ysad1QJf3PpxI/jLXNCp/c80wyCn
UtGw5LkpybB+qump1YbSb8P+fmpqhPloB2rgInBtgh/nLMaeZ7+MaxpJ+aMvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3k+C8AFx+YPkDt0z5ffNVrzKwH0wHwYDVR0j
BBgwFoAUaEm1perndVe7FQpQRGAeEvuznOkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTIzNDM3REM2MEJBNjlGODg0NzY0RDI5MEI1OUQzQzVD
NDE0MDMxODZGQzk5RTJCRkJCQzVDMTVCNjEyMzVELzAvNjg0OUI1QTVFQUU3NzU1
N0JCMTUwQTUwNDQ2MDFFMTJGQkIzOUNFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODQ5QjVBNUVBRTc3NTU3QkIx
NTBBNTA0NDYwMUUxMkZCQjM5Q0U5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEyMzQzN0RDNjBCQTY5Rjg4NDc2NEQyOTBCNTlEM0M1QzQxNDAzMTg2
RkM5OUUyQkZCQkM1QzE1QjYxMjM1RC8wLzMxMzczNzJlMzEzMjM0MmUzODM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALF8VTAN
BgkqhkiG9w0BAQsFAAOCAQEAIZXUzVS1foJAtpPsDbPUh2f00j01/q0vEKQBnQPV
WopFLz52id0WIEYr0+aFNJRZbvCujk/t8OOvJak7MG1a7EJziC+avDwtZWMioB6s
prVq+eF5r9W4dDxRMPzbVHK+DvG9yFXvEbixi6cNyK4wLq+LjXEey8ekXkFW4hjY
P9eeOKw1JJUWDdvY9QKWpLvsTIy7gcrKYOmAfy2m/4BZN10+CTZn6CK/s+K9Mqdx
SL82Vamir19vrKgatkV2qZiXn/JYUx2kl6fygCZs+7mgNSzFV/TjiF5sVLu75AsS
imkFheyIVK4oPH1ZxPYWwUwQ7tOzAAvIXScFPKVi/PAHcg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org