Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20207.roa
File:                     AS20207.roa (raw, json)
Hash identifier:          hUtThBu6KB+nhXD+1D/7o4Y6djmf+dRsy9VZ5+EHkV8=
Subject key identifier:   25:89:B2:13:23:86:C9:DF:AA:3E:91:A9:5E:D3:12:54:D3:79:9D:A3
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       0D0A4E9E868A2735235AC4BFD77360843321EA86
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20207.roa
Signing time:             Tue 05 Mar 2024 18:08:00 +0000
ROA not before:           Tue 05 Mar 2024 18:03:00 +0000
ROA not after:            Tue 04 Mar 2025 18:08:00 +0000
asID:                     20207
IP address blocks:        179.40.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0a:4e:9e:86:8a:27:35:23:5a:c4:bf:d7:73:60:84:33:21:ea:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:03:00 2024 GMT
            Not After : Mar  4 18:08:00 2025 GMT
        Subject: CN=2589B2132386C9DFAA3E91A95ED31254D3799DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:9e:f2:43:93:f7:31:60:f2:6d:44:60:92:
                    24:1a:d3:00:ec:5a:4d:0c:51:d2:3c:a1:e3:6d:2b:
                    7c:e2:c8:ee:e4:80:96:a5:13:5e:a6:0e:9c:e1:fb:
                    f5:12:3d:c8:f0:81:25:6f:19:4b:f5:f2:44:8b:97:
                    4c:c9:f6:86:65:8b:da:e6:4c:c5:fb:06:0b:f6:6b:
                    08:4f:cc:a8:c8:c3:3e:88:71:29:a8:c6:5b:1d:4b:
                    32:b8:e7:06:be:ce:75:9a:57:41:eb:8f:17:9d:c8:
                    8e:eb:93:73:3c:3b:0c:6c:25:d6:77:42:05:ce:71:
                    f3:27:5c:de:2c:42:37:22:f9:8c:bd:b4:b8:f2:c3:
                    1f:33:23:6b:72:66:57:7d:be:22:81:84:99:2e:12:
                    73:e6:68:a7:83:b6:83:bf:58:e6:2f:70:70:da:d6:
                    a4:5e:d0:e9:a1:cd:01:2d:ef:c0:7f:5a:bc:f8:cb:
                    6d:2c:66:7a:b5:af:16:45:52:1c:c5:47:0f:45:83:
                    ef:65:67:a4:4a:42:d3:c8:fc:2c:fb:fa:97:e6:23:
                    1d:bd:94:c4:53:2b:f5:10:58:94:d0:ad:1c:b6:8d:
                    01:72:38:0a:51:7b:31:b4:16:d1:40:2a:98:05:d4:
                    4d:cb:9e:ea:f5:30:8f:17:04:c4:74:50:ee:84:e0:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:89:B2:13:23:86:C9:DF:AA:3E:91:A9:5E:D3:12:54:D3:79:9D:A3
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20207.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:93:58:2c:3a:c8:99:08:fd:0b:ca:75:35:9c:22:8a:40:89:
         63:86:24:45:39:49:fd:31:9a:45:b2:eb:e0:42:0a:57:ca:99:
         58:f5:18:b4:26:fe:fa:f5:fb:af:74:16:1e:c4:87:fa:08:bb:
         93:a7:44:e9:ec:1e:99:2e:83:40:34:14:3e:8c:7e:9b:46:18:
         69:70:93:30:8d:06:6e:21:46:42:79:3e:c3:d9:33:f1:49:13:
         92:4a:3c:e1:54:6f:32:bc:5d:e3:bc:38:ab:e2:4b:ac:05:70:
         19:bb:07:e6:5b:b8:12:c9:9a:8b:5d:26:59:9c:1b:34:29:eb:
         b1:7b:ba:25:41:9e:4c:36:20:1d:0b:bc:88:1d:b1:dd:f0:fd:
         55:b6:2c:a1:8c:da:91:30:ce:1c:90:0f:fc:fd:60:e2:a9:a0:
         a7:70:ab:6c:e9:84:30:87:80:bb:61:39:ac:b1:f7:99:a1:43:
         3f:c9:bf:30:d2:11:e8:0b:32:64:2c:45:e0:45:0c:2f:03:21:
         a7:2e:0d:a2:28:4b:a6:e6:1a:e6:88:7a:73:b6:85:ec:5e:24:
         23:42:39:cd:9f:9b:93:10:fc:73:e5:6a:d3:d0:eb:dd:18:3e:
         6b:ff:eb:88:f4:d5:79:eb:03:f5:1e:65:75:de:10:bf:c7:eb:
         17:aa:8e:67
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUDQpOnoaKJzUjWsS/13NghDMh6oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNDAzMDUxODAzMDBaFw0yNTAzMDQxODA4MDBaMDMxMTAvBgNV
BAMTKDI1ODlCMjEzMjM4NkM5REZBQTNFOTFBOTVFRDMxMjU0RDM3OTlEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFjZ7yQ5P3MWDybURgkiQa0wDs
Wk0MUdI8oeNtK3ziyO7kgJalE16mDpzh+/USPcjwgSVvGUv18kSLl0zJ9oZli9rm
TMX7Bgv2awhPzKjIwz6IcSmoxlsdSzK45wa+znWaV0HrjxedyI7rk3M8OwxsJdZ3
QgXOcfMnXN4sQjci+Yy9tLjywx8zI2tyZld9viKBhJkuEnPmaKeDtoO/WOYvcHDa
1qRe0OmhzQEt78B/Wrz4y20sZnq1rxZFUhzFRw9Fg+9lZ6RKQtPI/Cz7+pfmIx29
lMRTK/UQWJTQrRy2jQFyOApRezG0FtFAKpgF1E3Lnur1MI8XBMR0UO6E4EjbAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUJYmyEyOGyd+qPpGpXtMSVNN5naMwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyMDIwNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArMoCDAN
BgkqhkiG9w0BAQsFAAOCAQEAxJNYLDrImQj9C8p1NZwiikCJY4YkRTlJ/TGaRbLr
4EIKV8qZWPUYtCb++vX7r3QWHsSH+gi7k6dE6ewemS6DQDQUPox+m0YYaXCTMI0G
biFGQnk+w9kz8UkTkko84VRvMrxd47w4q+JLrAVwGbsH5lu4Esmai10mWZwbNCnr
sXu6JUGeTDYgHQu8iB2x3fD9VbYsoYzakTDOHJAP/P1g4qmgp3CrbOmEMIeAu2E5
rLH3maFDP8m/MNIR6AsyZCxF4EUMLwMhpy4NoihLpuYa5oh6c7aF7F4kI0I5zZ+b
kxD8c+Vq09Dr3Rg+a//riPTVeesD9R5ldd4Qv8frF6qOZw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org