Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32322d3234203d3e20323730303336.roa
File:                     3137392e36302e3232342e302f32322d3234203d3e20323730303336.roa (raw, json)
Hash identifier:          tHUK80GsIfGQqdxnWuG6bIWDHT4kn0KycBkbFcM+9rI=
Subject key identifier:   AD:AC:A8:14:6C:6C:F5:12:E8:EB:C5:A1:FB:7F:D9:C8:91:E6:71:D1
Certificate issuer:       /CN=D69B312653CC24109B409F98E62409733808DFE6
Certificate serial:       050A19428C409D3B10B45587F721259BB93CADEE
Authority key identifier: D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32322d3234203d3e20323730303336.roa
Signing time:             Fri 20 Dec 2024 01:40:00 +0000
ROA not before:           Fri 20 Dec 2024 01:35:00 +0000
ROA not after:            Fri 19 Dec 2025 01:40:00 +0000
asID:                     270036
IP address blocks:        179.60.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:19:42:8c:40:9d:3b:10:b4:55:87:f7:21:25:9b:b9:3c:ad:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B312653CC24109B409F98E62409733808DFE6
        Validity
            Not Before: Dec 20 01:35:00 2024 GMT
            Not After : Dec 19 01:40:00 2025 GMT
        Subject: CN=ADACA8146C6CF512E8EBC5A1FB7FD9C891E671D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:49:90:8c:f2:29:eb:e1:af:ab:cb:a4:56:
                    35:ef:9c:f1:2f:26:7a:45:23:79:49:5a:86:72:91:
                    e2:12:61:b3:65:b7:b9:cc:63:9f:3c:13:f9:be:05:
                    49:9d:4f:0b:d4:df:8e:05:94:2e:79:39:d1:38:f6:
                    2e:db:3a:a3:76:5a:aa:6e:7f:70:af:0b:3d:36:87:
                    9e:c1:59:c4:15:35:21:d7:2b:47:48:6c:59:85:87:
                    a7:d4:a6:62:60:45:da:30:0d:9e:71:8a:5e:25:5d:
                    17:5c:fa:9b:d7:25:db:23:94:41:9d:18:ea:72:40:
                    a5:0f:08:b5:61:5c:32:0d:a9:3e:52:86:fc:1d:7a:
                    de:72:91:c4:98:44:22:3c:45:27:c5:e6:96:00:9e:
                    6b:08:7b:c4:6c:2e:5c:7e:6c:c7:05:f8:7a:1e:74:
                    65:5c:10:40:f5:03:1b:b5:8b:a0:72:0f:be:7d:44:
                    3d:a8:a4:ea:99:f0:2d:3b:65:db:75:12:4a:5f:2f:
                    e1:73:db:a0:9d:95:52:e7:68:0c:4e:bb:74:81:10:
                    53:f4:47:d7:6d:8e:d9:aa:8a:4f:9f:be:4a:4b:c8:
                    41:34:9b:ec:65:74:60:15:28:68:6a:67:ab:ab:cc:
                    9c:d4:28:9c:7a:98:c3:b9:9b:06:bf:2e:4e:5c:82:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AC:A8:14:6C:6C:F5:12:E8:EB:C5:A1:FB:7F:D9:C8:91:E6:71:D1
            X509v3 Authority Key Identifier:
                keyid:D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32322d3234203d3e20323730303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:89:08:21:21:7a:14:9e:91:f7:77:5d:7d:e6:c6:30:8f:
         a0:e4:60:d0:7c:78:0f:01:ce:7c:7a:34:27:82:d0:18:c2:3d:
         f9:ee:83:a0:7b:ea:39:2b:c6:e3:60:f4:b5:a3:8f:84:97:51:
         9c:d2:46:d0:c7:f9:96:af:bf:fd:c8:a0:25:84:ee:7d:f0:03:
         0b:4e:2a:46:ae:ce:fb:52:74:8c:4d:12:65:3c:68:0a:83:3b:
         84:44:9d:a0:25:cf:f2:e6:c4:1b:bb:d4:bf:c4:f3:1a:8f:0a:
         97:b6:c7:57:f9:32:74:b1:49:8f:ce:c5:5d:82:0e:4d:06:fa:
         81:da:82:b2:c5:bf:a0:7b:61:36:3e:0a:7b:11:c0:17:90:91:
         06:3f:c9:86:7f:a3:fe:2f:47:34:7a:4b:56:44:fb:2a:11:f2:
         98:4e:45:a0:40:e6:e0:82:7f:4e:c0:31:55:8a:17:b0:2d:f8:
         1c:c0:71:04:9f:4a:35:42:39:5e:98:6e:e7:90:6e:71:a7:15:
         45:c2:b3:05:e0:aa:75:87:ae:0b:0f:ab:21:88:39:34:87:b3:
         40:c7:49:f9:4c:ba:43:92:52:76:9f:c8:db:c8:16:9f:86:44:
         21:e1:f2:a8:fb:e7:08:09:2a:bf:21:54:0f:8f:0a:9b:a2:49:
         5d:e3:b7:7e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBQoZQoxAnTsQtFWH9yElm7k8re4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY5QjMxMjY1M0NDMjQxMDlCNDA5Rjk4RTYyNDA5NzMz
ODA4REZFNjAeFw0yNDEyMjAwMTM1MDBaFw0yNTEyMTkwMTQwMDBaMDMxMTAvBgNV
BAMTKEFEQUNBODE0NkM2Q0Y1MTJFOEVCQzVBMUZCN0ZEOUM4OTFFNjcxRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rEmQjPIp6+Gvq8ukVjXvnPEv
JnpFI3lJWoZykeISYbNlt7nMY588E/m+BUmdTwvU344FlC55OdE49i7bOqN2Wqpu
f3CvCz02h57BWcQVNSHXK0dIbFmFh6fUpmJgRdowDZ5xil4lXRdc+pvXJdsjlEGd
GOpyQKUPCLVhXDINqT5Shvwdet5ykcSYRCI8RSfF5pYAnmsIe8RsLlx+bMcF+Hoe
dGVcEED1Axu1i6ByD759RD2opOqZ8C07Zdt1EkpfL+Fz26CdlVLnaAxOu3SBEFP0
R9dtjtmqik+fvkpLyEE0m+xldGAVKGhqZ6urzJzUKJx6mMO5mwa/Lk5cgjsXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrayoFGxs9RLo68Wh+3/ZyJHmcdEwHwYDVR0j
BBgwFoAU1psxJlPMJBCbQJ+Y5iQJczgI3+YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkE3NjM5NDFEMEUyRTJDMkMwMUZBODE0QzExRDg2MzhC
MTk2RTc2OTY5NDNDQzVBNEQ4NDI1ODY0QkU2N0NDLzAvRDY5QjMxMjY1M0NDMjQx
MDlCNDA5Rjk4RTYyNDA5NzMzODA4REZFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjlCMzEyNjUzQ0MyNDEwOUI0
MDlGOThFNjI0MDk3MzM4MDhERkU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJBNzYzOTQxRDBFMkUyQzJDMDFGQTgxNEMxMUQ4NjM4QjE5NkU3Njk2
OTQzQ0M1QTREODQyNTg2NEJFNjdDQy8wLzMxMzczOTJlMzYzMDJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCszzg
MA0GCSqGSIb3DQEBCwUAA4IBAQAaQokIISF6FJ6R93ddfebGMI+g5GDQfHgPAc58
ejQngtAYwj357oOge+o5K8bjYPS1o4+El1Gc0kbQx/mWr7/9yKAlhO598AMLTipG
rs77UnSMTRJlPGgKgzuERJ2gJc/y5sQbu9S/xPMajwqXtsdX+TJ0sUmPzsVdgg5N
BvqB2oKyxb+ge2E2Pgp7EcAXkJEGP8mGf6P+L0c0ektWRPsqEfKYTkWgQObggn9O
wDFVihewLfgcwHEEn0o1QjlemG7nkG5xpxVFwrMF4Kp1h64LD6shiDk0h7NAx0n5
TLpDklJ2n8jbyBafhkQh4fKo++cICSq/IVQPjwqbokld47d+
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:09 2025 by rpki-client