Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3234203d3e20323731393239.roa
File:                     3137392e302e34322e302f32332d3234203d3e20323731393239.roa (raw, json)
Hash identifier:          LnAgIaMr/nz5JPARYfWZJT2WqENFHjD27Kcf1UAWxnk=
Subject key identifier:   75:95:E1:53:62:D9:56:83:A4:7D:FE:48:71:61:29:00:B4:90:3D:EF
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       7ADA3D0967DDD9F0D0D7454EBE754B8B8EB3972B
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3234203d3e20323731393239.roa
Signing time:             Tue 05 Mar 2024 17:54:53 +0000
ROA not before:           Tue 05 Mar 2024 17:49:53 +0000
ROA not after:            Tue 04 Mar 2025 17:54:53 +0000
asID:                     271929
IP address blocks:        179.0.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:da:3d:09:67:dd:d9:f0:d0:d7:45:4e:be:75:4b:8b:8e:b3:97:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Mar  5 17:49:53 2024 GMT
            Not After : Mar  4 17:54:53 2025 GMT
        Subject: CN=7595E15362D95683A47DFE4871612900B4903DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:34:92:45:e9:a7:84:84:10:7a:60:5f:74:
                    fd:88:92:1c:48:28:c0:66:08:19:ba:5d:5b:ff:18:
                    d3:aa:3c:1e:e9:64:19:4e:3e:4f:5e:7b:95:e7:e3:
                    6f:8c:4a:7f:a7:5d:87:09:59:24:8a:49:2e:4a:b7:
                    38:47:98:55:4f:40:c0:28:4d:6e:ae:9a:c2:7f:c5:
                    95:cf:34:a9:9c:63:98:2c:80:3a:75:4a:19:2b:4e:
                    04:2e:d9:7a:0e:ba:46:d0:4c:b0:2e:a5:7f:d3:c0:
                    08:d5:73:8b:c5:f8:39:dc:61:e4:e5:b5:ce:57:2f:
                    ee:ad:51:cd:88:e5:14:0b:71:2f:5e:ad:06:61:96:
                    20:c7:7c:5b:8e:93:bd:4b:16:99:1e:f6:63:54:c2:
                    66:ce:e8:fe:15:46:5f:4e:b6:2d:33:b8:ac:3e:37:
                    33:22:63:d8:d2:2b:ea:4b:d3:0d:f8:cd:bf:76:7b:
                    45:34:1c:8c:50:a5:7b:c5:df:97:62:35:83:99:09:
                    79:cd:58:f9:1e:2d:c6:98:1e:a7:73:35:92:bc:3d:
                    f9:15:e7:04:40:cc:06:8f:d6:d6:55:4a:8b:8e:ec:
                    c0:74:35:dd:ba:26:dc:14:49:a8:03:ab:42:45:67:
                    6b:97:5d:fd:fb:0d:30:d3:92:95:61:e1:9c:d5:b5:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:95:E1:53:62:D9:56:83:A4:7D:FE:48:71:61:29:00:B4:90:3D:EF
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3234203d3e20323731393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:10:2a:9e:9c:c0:3e:99:e1:0f:22:97:d8:b4:5d:e4:56:
         ed:68:d1:49:89:38:b0:6c:4e:68:9f:87:be:a8:c1:1f:37:f9:
         85:fa:45:a6:36:58:34:5c:74:23:2b:ec:c5:c1:82:3d:21:de:
         60:2e:f6:22:98:cd:cb:2c:25:a3:29:d8:6b:39:43:2d:a7:43:
         95:b3:e6:c3:b0:8a:b5:33:b8:b0:19:43:cb:33:b1:c7:f0:c4:
         95:87:de:f8:ec:85:20:93:3c:98:54:c2:7d:52:25:4c:cd:91:
         15:d4:3c:59:21:7a:44:05:f7:3a:c8:ae:13:a2:ee:12:4a:30:
         9b:c9:c3:01:45:2f:8d:4d:6e:00:6c:a7:1b:2d:89:f0:c3:94:
         8f:14:52:ab:24:81:7c:4e:0e:c6:fa:37:da:9a:53:cf:70:fb:
         cc:c4:ff:fa:16:01:0b:b3:95:4c:ac:4d:a4:5d:29:c1:22:8f:
         7c:e4:27:31:42:e6:7e:4f:8d:93:86:df:93:8c:4e:7d:84:09:
         b3:d9:df:66:13:58:56:a7:5a:37:02:7d:49:4d:b5:1c:85:3d:
         75:85:2b:ed:01:85:12:6b:67:c2:f0:73:15:ee:50:53:0a:87:
         46:e6:ab:6a:42:63:75:f1:14:fc:8e:e5:3b:aa:cf:40:46:05:
         f4:5d:93:7f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeto9CWfd2fDQ10VOvnVLi46zlyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2QzQxQTY4RTM0NzUxMzhBRjUzQTVCNTU2MjdFREUz
NTQzMjA2ODAeFw0yNDAzMDUxNzQ5NTNaFw0yNTAzMDQxNzU0NTNaMDMxMTAvBgNV
BAMTKDc1OTVFMTUzNjJEOTU2ODNBNDdERkU0ODcxNjEyOTAwQjQ5MDNERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4zSSRemnhIQQemBfdP2IkhxI
KMBmCBm6XVv/GNOqPB7pZBlOPk9ee5Xn42+MSn+nXYcJWSSKSS5KtzhHmFVPQMAo
TW6umsJ/xZXPNKmcY5gsgDp1ShkrTgQu2XoOukbQTLAupX/TwAjVc4vF+DncYeTl
tc5XL+6tUc2I5RQLcS9erQZhliDHfFuOk71LFpke9mNUwmbO6P4VRl9Oti0zuKw+
NzMiY9jSK+pL0w34zb92e0U0HIxQpXvF35diNYOZCXnNWPkeLcaYHqdzNZK8PfkV
5wRAzAaP1tZVSouO7MB0Nd26JtwUSagDq0JFZ2uXXf37DTDTkpVh4ZzVtYipAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUdZXhU2LZVoOkff5IcWEpALSQPe8wHwYDVR0j
BBgwFoAUkGxBpo40dROK9TpbVWJ+3jVDIGgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjIwMDdCOEQ0QUEyNjE0NDA4N0Y5QzNFNUY5RDM5RUNF
NTZCRDRFRDA5Nzg2REUxNTE0N0M5NTU3MTc1NDA2LzAvOTA2QzQxQTY4RTM0NzUx
MzhBRjUzQTVCNTU2MjdFREUzNTQzMjA2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDZDNDFBNjhFMzQ3NTEzOEFG
NTNBNUI1NTYyN0VERTM1NDMyMDY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYyMDA3QjhENEFBMjYxNDQwODdGOUMzRTVGOUQzOUVDRTU2QkQ0RUQw
OTc4NkRFMTUxNDdDOTU1NzE3NTQwNi8wLzMxMzczOTJlMzAyZTM0MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM3MzEzOTMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGzACowDQYJ
KoZIhvcNAQELBQADggEBAH6cECqenMA+meEPIpfYtF3kVu1o0UmJOLBsTmifh76o
wR83+YX6RaY2WDRcdCMr7MXBgj0h3mAu9iKYzcssJaMp2Gs5Qy2nQ5Wz5sOwirUz
uLAZQ8szscfwxJWH3vjshSCTPJhUwn1SJUzNkRXUPFkhekQF9zrIrhOi7hJKMJvJ
wwFFL41NbgBspxstifDDlI8UUqskgXxODsb6N9qaU89w+8zE//oWAQuzlUysTaRd
KcEij3zkJzFC5n5PjZOG35OMTn2ECbPZ32YTWFanWjcCfUlNtRyFPXWFK+0BhRJr
Z8LwcxXuUFMKh0bmq2pCY3XxFPyO5Tuqz0BGBfRdk38=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org