Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3137392e302e3133362e302f32312d3234203d3e203237383735.roa
File:                     3137392e302e3133362e302f32312d3234203d3e203237383735.roa (raw, json)
Hash identifier:          rdN2uJSb3prDwXP2hR1U/Q1yEXu8EC7YE7sjiL7rOvQ=
Subject key identifier:   56:27:78:00:7B:3B:FC:8A:5D:C0:8E:CF:C3:A1:17:E8:B6:F5:DB:EB
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       6FB530EA0B92144623CE466566CDCDE1C150B6FE
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3137392e302e3133362e302f32312d3234203d3e203237383735.roa
Signing time:             Tue 04 Feb 2025 18:05:26 +0000
ROA not before:           Tue 04 Feb 2025 18:00:26 +0000
ROA not after:            Tue 03 Feb 2026 18:05:26 +0000
asID:                     27875
IP address blocks:        179.0.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 20:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b5:30:ea:0b:92:14:46:23:ce:46:65:66:cd:cd:e1:c1:50:b6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Feb  4 18:00:26 2025 GMT
            Not After : Feb  3 18:05:26 2026 GMT
        Subject: CN=562778007B3BFC8A5DC08ECFC3A117E8B6F5DBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:d8:c8:c1:8c:f4:ee:45:b3:b7:78:6d:73:
                    d7:7e:2f:7b:96:0f:91:a0:8f:83:d5:fb:ba:a8:e7:
                    3a:98:37:65:82:57:3b:74:93:cd:a7:12:6b:1b:6f:
                    5f:46:42:bd:7d:cd:72:5e:95:ac:fc:cf:e4:d5:a6:
                    e5:ab:5a:2b:6d:1a:93:28:84:69:31:de:08:6f:27:
                    7a:01:f1:89:75:98:3d:5d:b4:ed:ee:64:a6:b7:f5:
                    d4:e3:65:d1:7f:32:23:4a:2e:27:b0:69:97:e1:a4:
                    60:81:f9:68:5e:41:18:67:7d:55:a0:64:97:d0:11:
                    90:e6:8f:83:f1:a7:70:cc:d5:1c:93:64:42:0f:fe:
                    5a:54:46:c4:75:fa:f2:c2:7c:56:f5:4f:34:b3:66:
                    4d:5c:62:a2:19:92:9c:a1:53:1f:f6:ce:be:a5:7d:
                    ed:ff:25:7a:b0:a6:33:90:8f:2b:8a:d5:40:0f:fc:
                    81:8a:8b:6d:3d:d2:4f:69:1f:3f:36:f3:9e:8a:7e:
                    a3:f7:41:76:d6:a7:58:3b:70:19:4b:42:29:e2:4c:
                    5d:73:37:66:c7:48:b4:74:fc:cf:53:cf:f3:0a:c5:
                    78:12:06:97:fb:d2:70:5d:8d:4b:26:17:ab:e9:50:
                    67:ed:7f:e0:ca:87:08:24:6f:e6:49:a1:6b:47:3f:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:78:00:7B:3B:FC:8A:5D:C0:8E:CF:C3:A1:17:E8:B6:F5:DB:EB
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3137392e302e3133362e302f32312d3234203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:79:29:02:6d:68:27:f4:4f:1c:cf:74:ee:ac:20:af:e6:
         54:6d:d7:3a:fd:9f:02:90:6b:7d:d9:ee:ce:04:8a:32:62:c2:
         db:e5:3c:19:45:86:6e:bf:05:dc:a4:75:f3:c7:e5:0c:28:96:
         de:3a:73:f6:a5:54:b3:66:a6:6d:21:1e:65:74:2b:39:10:91:
         2f:ca:5b:c4:24:df:10:53:62:44:cf:8a:b4:bb:c5:08:f8:5b:
         83:07:0d:85:05:a4:40:fb:e8:ca:a4:ef:2d:8f:c3:e9:2b:06:
         4c:6d:7c:b4:59:db:cf:3d:f2:b3:d1:0d:cc:4d:57:1f:ef:10:
         76:ea:7c:97:8e:01:fd:ab:68:ad:27:92:0f:0c:f0:e3:71:8f:
         c8:cd:56:ff:02:48:a0:60:19:d9:b9:df:0a:1c:1f:83:7a:ff:
         e2:57:cd:55:6f:04:69:1c:5e:fd:90:99:aa:dd:a3:7d:92:24:
         48:f0:03:ac:9c:ec:05:e0:1d:cb:f6:60:7d:3e:d8:13:73:e2:
         72:be:98:85:35:c4:a0:78:73:59:97:a7:f5:19:9c:4e:df:d3:
         77:29:80:83:00:75:98:dc:0a:a7:cb:de:6d:8f:7b:12:fd:3e:
         73:d4:f0:29:33:7e:65:f2:1b:e2:5e:bf:5c:2d:0b:97:27:7a:
         67:6e:60:cc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUb7Uw6guSFEYjzkZlZs3N4cFQtv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1M0Y3RDQyRkM5RkQwMzU1NkE5RjNEMkFGOUUzRDIy
MjFCQURGQzAeFw0yNTAyMDQxODAwMjZaFw0yNjAyMDMxODA1MjZaMDMxMTAvBgNV
BAMTKDU2Mjc3ODAwN0IzQkZDOEE1REMwOEVDRkMzQTExN0U4QjZGNURCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jtjIwYz07kWzt3htc9d+L3uW
D5Ggj4PV+7qo5zqYN2WCVzt0k82nEmsbb19GQr19zXJelaz8z+TVpuWrWittGpMo
hGkx3ghvJ3oB8Yl1mD1dtO3uZKa39dTjZdF/MiNKLiewaZfhpGCB+WheQRhnfVWg
ZJfQEZDmj4Pxp3DM1RyTZEIP/lpURsR1+vLCfFb1TzSzZk1cYqIZkpyhUx/2zr6l
fe3/JXqwpjOQjyuK1UAP/IGKi2090k9pHz82856KfqP3QXbWp1g7cBlLQiniTF1z
N2bHSLR0/M9Tz/MKxXgSBpf70nBdjUsmF6vpUGftf+DKhwgkb+ZJoWtHP6r1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUVid4AHs7/IpdwI7Pw6EX6Lb12+swHwYDVR0j
BBgwFoAU0FP31C/J/QNVap89Kvnj0iIbrfwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MUY5ODlGOEM1RkY5RTlFMTI2QzVGOTBGRUY5Rjk1QTEz
RjJGN0U4MTBGNjhEMEU0NDE2NjRCRTNGQTlDMDI0LzAvRDA1M0Y3RDQyRkM5RkQw
MzU1NkE5RjNEMkFGOUUzRDIyMjFCQURGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDUzRjdENDJGQzlGRDAzNTU2
QTlGM0QyQUY5RTNEMjIyMUJBREZDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzFGOTg5RjhDNUZGOUU5RTEyNkM1RjkwRkVGOUY5NUExM0YyRjdFODEw
RjY4RDBFNDQxNjY0QkUzRkE5QzAyNC8wLzMxMzczOTJlMzAyZTMxMzMzNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczODM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOzAIgwDQYJ
KoZIhvcNAQELBQADggEBACbqeSkCbWgn9E8cz3TurCCv5lRt1zr9nwKQa33Z7s4E
ijJiwtvlPBlFhm6/BdykdfPH5Qwolt46c/alVLNmpm0hHmV0KzkQkS/KW8Qk3xBT
YkTPirS7xQj4W4MHDYUFpED76Mqk7y2Pw+krBkxtfLRZ28898rPRDcxNVx/vEHbq
fJeOAf2raK0nkg8M8ONxj8jNVv8CSKBgGdm53wocH4N6/+JXzVVvBGkcXv2Qmard
o32SJEjwA6yc7AXgHcv2YH0+2BNz4nK+mIU1xKB4c1mXp/UZnE7f03cpgIMAdZjc
CqfL3m2PexL9PnPU8CkzfmXyG+Jev1wtC5cnemduYMw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:36 2025 by rpki-client