Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa
File:                     3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa (raw, json)
Hash identifier:          rTSGhzQ+LioACDhs2p8HlopEUSAcFXxFkC7M1iBeVGM=
Subject key identifier:   C9:60:CB:F2:1B:D5:C6:CE:21:33:E6:AD:5A:EF:E4:E8:30:E1:22:8B
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       089373A57150055790A1BE593D531B56B6ED18C2
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa
Signing time:             Tue 05 Mar 2024 17:46:17 +0000
ROA not before:           Tue 05 Mar 2024 17:41:17 +0000
ROA not after:            Tue 04 Mar 2025 17:46:17 +0000
asID:                     271903
IP address blocks:        179.49.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:93:73:a5:71:50:05:57:90:a1:be:59:3d:53:1b:56:b6:ed:18:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Mar  5 17:41:17 2024 GMT
            Not After : Mar  4 17:46:17 2025 GMT
        Subject: CN=C960CBF21BD5C6CE2133E6AD5AEFE4E830E1228B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:a5:75:83:2f:29:e2:4a:2f:28:3d:e1:56:
                    04:9d:22:04:4d:4d:4e:21:4f:b2:c3:d2:33:e7:1f:
                    95:a6:97:73:19:fd:3c:78:b2:06:71:15:be:de:48:
                    f9:4b:59:99:99:5b:76:b9:1b:c0:7c:10:65:fc:ef:
                    9f:df:6b:e1:d6:b9:7d:05:ed:72:af:f6:0c:e6:70:
                    8a:67:67:c5:8e:7f:19:6a:fd:aa:08:49:ac:09:c8:
                    b1:fe:04:5f:78:31:4e:36:65:89:fb:3c:c6:e7:7d:
                    d2:02:db:e2:46:e1:60:e8:8e:5f:0f:38:96:91:62:
                    ff:50:0a:a4:87:ec:42:7d:e7:7d:35:6e:4a:19:65:
                    b6:48:36:bd:27:97:3f:6e:d5:b9:46:76:27:da:95:
                    11:a2:3d:e0:f3:7a:63:bf:f3:5f:41:94:ce:b9:e0:
                    f7:35:a8:48:42:70:7d:ee:e3:c2:bc:42:07:0f:68:
                    a5:18:3a:a4:81:75:3b:3f:e9:2f:6e:5f:d6:cc:4b:
                    03:7d:7c:a7:11:e2:60:a4:d7:2b:53:1d:48:6c:8e:
                    80:e4:d3:f8:f0:27:81:b3:9b:86:43:7c:2b:29:6b:
                    86:a2:3b:74:14:d1:07:95:0f:d0:5e:57:b1:e8:48:
                    7b:99:b2:b8:36:af:59:b4:07:56:05:7d:84:04:de:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:CB:F2:1B:D5:C6:CE:21:33:E6:AD:5A:EF:E4:E8:30:E1:22:8B
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:7d:7c:ba:04:1c:c0:11:7c:7f:75:3c:ed:29:28:10:8d:
         e4:f1:82:d8:7d:d0:97:d6:49:2b:d8:5a:0b:4e:07:55:c9:a4:
         a2:c2:fd:d5:27:05:01:cf:eb:e5:0d:f0:38:cf:5c:eb:0e:be:
         6c:10:63:a8:cf:4d:8d:a3:41:c5:b4:2d:56:a9:6e:7f:2c:d8:
         ef:fa:4a:c5:86:3c:b1:e7:23:6d:31:8d:21:ca:55:b2:60:69:
         7e:43:9d:ca:19:0d:ce:3e:84:30:53:59:26:f5:82:69:53:b0:
         3f:ca:fd:78:ee:ee:a5:88:ef:20:3c:5b:9b:56:3b:4c:9b:df:
         01:ed:0a:db:60:71:27:1d:a4:ae:ec:ab:67:9f:61:c8:24:01:
         92:3a:38:03:70:46:69:ec:2e:1f:15:47:8a:9e:c7:3d:15:87:
         f8:da:b2:2f:ec:ce:a8:a8:64:bb:a6:02:15:85:7b:e0:aa:2f:
         07:c1:c0:d5:d3:a7:e7:b5:0a:95:f0:eb:64:94:8c:6f:f5:59:
         9f:90:ce:27:61:b3:aa:9a:5f:13:dc:92:c0:71:12:87:99:0e:
         18:5e:49:df:ba:20:af:ad:7e:98:7a:7d:27:42:29:82:c2:bd:
         4c:22:bc:85:f6:3e:f8:91:45:3d:90:a4:20:fd:82:f9:04:42:
         19:20:fe:23
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCJNzpXFQBVeQob5ZPVMbVrbtGMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVBNzU3MjczMDU3MEUwRDYyNzcwODA1MTgyOEM4NEM4
MTExQTUzRTAeFw0yNDAzMDUxNzQxMTdaFw0yNTAzMDQxNzQ2MTdaMDMxMTAvBgNV
BAMTKEM5NjBDQkYyMUJENUM2Q0UyMTMzRTZBRDVBRUZFNEU4MzBFMTIyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzR6V1gy8p4kovKD3hVgSdIgRN
TU4hT7LD0jPnH5Wml3MZ/Tx4sgZxFb7eSPlLWZmZW3a5G8B8EGX875/fa+HWuX0F
7XKv9gzmcIpnZ8WOfxlq/aoISawJyLH+BF94MU42ZYn7PMbnfdIC2+JG4WDojl8P
OJaRYv9QCqSH7EJ95301bkoZZbZINr0nlz9u1blGdifalRGiPeDzemO/819BlM65
4Pc1qEhCcH3u48K8QgcPaKUYOqSBdTs/6S9uX9bMSwN9fKcR4mCk1ytTHUhsjoDk
0/jwJ4Gzm4ZDfCspa4aiO3QU0QeVD9BeV7HoSHuZsrg2r1m0B1YFfYQE3kpJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyWDL8hvVxs4hM+atWu/k6DDhIoswHwYDVR0j
BBgwFoAUHqdXJzBXDg1idwgFGCjITIERpT4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OEY2MDVEREE4NjNFQTBDNUIyRkQ5NjQwMDA2QkFENDE4
RTg5OEM2QkI2NEY2MkMyREY2RjdBMkJBRTY5QzU4LzAvMUVBNzU3MjczMDU3MEUw
RDYyNzcwODA1MTgyOEM4NEM4MTExQTUzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUE3NTcyNzMwNTcwRTBENjI3
NzA4MDUxODI4Qzg0QzgxMTFBNTNFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNThGNjA1RERBODYzRUEwQzVCMkZEOTY0MDAwNkJBRDQxOEU4OThDNkJC
NjRGNjJDMkRGNkY3QTJCQUU2OUM1OC8wLzMxMzczOTJlMzQzOTJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCszHg
MA0GCSqGSIb3DQEBCwUAA4IBAQACrX18ugQcwBF8f3U87SkoEI3k8YLYfdCX1kkr
2FoLTgdVyaSiwv3VJwUBz+vlDfA4z1zrDr5sEGOoz02No0HFtC1WqW5/LNjv+krF
hjyx5yNtMY0hylWyYGl+Q53KGQ3OPoQwU1km9YJpU7A/yv147u6liO8gPFubVjtM
m98B7QrbYHEnHaSu7Ktnn2HIJAGSOjgDcEZp7C4fFUeKnsc9FYf42rIv7M6oqGS7
pgIVhXvgqi8HwcDV06fntQqV8OtklIxv9VmfkM4nYbOqml8T3JLAcRKHmQ4YXknf
uiCvrX6Yen0nQimCwr1MIryF9j74kUU9kKQg/YL5BEIZIP4j
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org