Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3137392e35312e36342e302f32302d3234203d3e203532343731.roa
File:                     3137392e35312e36342e302f32302d3234203d3e203532343731.roa (raw, json)
Hash identifier:          kg2vHV0lxQG+xwYdV/nm/3mrxBsInhg9B7N5JssL4lE=
Subject key identifier:   0B:08:49:32:92:49:7B:32:2E:4B:68:FB:3F:84:6A:8A:A3:82:15:A8
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       23CBBF01724DD11C23837E81F6E762A177E4AF71
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3137392e35312e36342e302f32302d3234203d3e203532343731.roa
Signing time:             Tue 05 Mar 2024 17:44:45 +0000
ROA not before:           Tue 05 Mar 2024 17:39:45 +0000
ROA not after:            Tue 04 Mar 2025 17:44:45 +0000
asID:                     52471
IP address blocks:        179.51.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:bf:01:72:4d:d1:1c:23:83:7e:81:f6:e7:62:a1:77:e4:af:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Mar  5 17:39:45 2024 GMT
            Not After : Mar  4 17:44:45 2025 GMT
        Subject: CN=0B08493292497B322E4B68FB3F846A8AA38215A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:a9:6a:90:77:4b:d6:26:1e:c2:31:d6:c7:
                    f9:cd:ad:4a:99:6e:3b:bf:11:33:7a:a7:d0:e8:a0:
                    73:56:0e:47:7e:c7:3d:15:48:36:f3:c1:44:9a:1a:
                    79:7d:b4:59:ed:eb:64:0f:da:8f:d3:64:a1:a2:3c:
                    df:cb:5a:32:84:9c:16:d7:5e:85:00:77:25:65:c9:
                    24:b5:a0:e2:89:a2:be:35:12:15:d4:0d:8f:4a:3f:
                    81:2e:64:47:30:13:b6:87:0b:2f:2f:0e:b1:d1:ae:
                    98:ff:7d:69:e8:14:d8:2f:68:ec:10:2f:98:54:28:
                    bc:36:87:6f:f4:46:f9:c6:45:30:0c:fe:f5:00:eb:
                    1e:80:0b:7f:18:fd:e4:49:97:ea:61:73:eb:0d:b3:
                    f4:e3:d4:62:fd:1e:5c:f2:b1:ce:9f:69:31:19:47:
                    5f:4c:58:71:15:6f:c4:eb:b5:9b:81:d3:f6:b6:ca:
                    ad:71:69:be:9c:a5:53:ae:28:4b:eb:2b:4c:ad:bf:
                    34:a3:e5:ab:13:d3:b9:5a:51:bf:43:8c:21:22:37:
                    15:78:0c:e6:9c:c5:57:87:25:05:4d:42:96:1d:be:
                    85:2d:92:28:ab:c8:9e:80:30:df:10:7c:34:df:ed:
                    c8:78:f6:26:f6:48:6b:0e:52:6c:7f:ef:69:0a:d5:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:08:49:32:92:49:7B:32:2E:4B:68:FB:3F:84:6A:8A:A3:82:15:A8
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3137392e35312e36342e302f32302d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:d7:42:57:fb:9b:25:fb:bc:a5:9b:95:77:35:2a:36:53:
         28:7a:ad:84:e7:38:2f:63:1f:de:7b:39:03:84:11:65:67:72:
         0b:74:66:10:60:ca:de:46:12:26:e6:78:91:90:a4:70:6c:06:
         c1:6b:7f:c9:3b:2b:02:d7:32:06:51:43:a0:1d:23:ee:f3:fc:
         d4:3b:d1:ad:ef:76:0a:80:f5:45:e1:32:5f:b0:98:de:f4:61:
         11:91:a8:13:13:56:ad:0e:c2:64:85:33:0b:27:75:ca:ae:c1:
         fd:1c:cd:7c:83:29:5d:16:03:c4:8c:3e:7c:e4:48:f3:1d:6f:
         e9:ec:34:1e:61:93:62:73:27:07:18:8b:dd:ff:6e:01:9d:27:
         bf:fe:c6:f9:b5:33:17:eb:66:b5:1a:b5:82:37:8a:d6:cb:53:
         c8:e4:23:68:a2:bd:05:b8:76:6c:1b:19:b1:e1:c0:b3:b1:0f:
         8f:3b:8d:19:26:a2:b1:9c:a7:3c:9b:2c:ca:b9:6a:61:d2:c2:
         8a:5a:92:f5:f4:88:3d:ca:50:7f:68:e8:13:39:22:48:68:2f:
         e7:6a:21:c9:85:95:79:cb:3a:ee:14:30:f0:fc:15:97:0d:0c:
         72:73:93:53:80:09:60:78:f8:74:ee:c8:d2:b0:e4:c2:8a:f6:
         ec:0a:d0:3d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUI8u/AXJN0Rwjg36B9udioXfkr3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI5RDk2NjYxRUM4NTYyN0ExRjQ5OTRFODkzRjI2RkZD
NDA4QUZBQzAeFw0yNDAzMDUxNzM5NDVaFw0yNTAzMDQxNzQ0NDVaMDMxMTAvBgNV
BAMTKDBCMDg0OTMyOTI0OTdCMzIyRTRCNjhGQjNGODQ2QThBQTM4MjE1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu96lqkHdL1iYewjHWx/nNrUqZ
bju/ETN6p9DooHNWDkd+xz0VSDbzwUSaGnl9tFnt62QP2o/TZKGiPN/LWjKEnBbX
XoUAdyVlySS1oOKJor41EhXUDY9KP4EuZEcwE7aHCy8vDrHRrpj/fWnoFNgvaOwQ
L5hUKLw2h2/0RvnGRTAM/vUA6x6AC38Y/eRJl+phc+sNs/Tj1GL9Hlzysc6faTEZ
R19MWHEVb8TrtZuB0/a2yq1xab6cpVOuKEvrK0ytvzSj5asT07laUb9DjCEiNxV4
DOacxVeHJQVNQpYdvoUtkiiryJ6AMN8QfDTf7ch49ib2SGsOUmx/72kK1X8FAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUCwhJMpJJezIuS2j7P4RqiqOCFagwHwYDVR0j
BBgwFoAUW52WZh7IVieh9JlOiT8m/8QIr6wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTAzMUZBQzc2OTE0MzUyQzk1MjgwMzBGOTgzRjA3ODE2
OTY0QjIyRjZENjQ5NkIzMENCQjRFNjM2OTBGODY5LzAvNUI5RDk2NjYxRUM4NTYy
N0ExRjQ5OTRFODkzRjI2RkZDNDA4QUZBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjlEOTY2NjFFQzg1NjI3QTFG
NDk5NEU4OTNGMjZGRkM0MDhBRkFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzUwMzFGQUM3NjkxNDM1MkM5NTI4MDMwRjk4M0YwNzgxNjk2NEIyMkY2
RDY0OTZCMzBDQkI0RTYzNjkwRjg2OS8wLzMxMzczOTJlMzUzMTJlMzYzNDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASzM0AwDQYJ
KoZIhvcNAQELBQADggEBAHzA10JX+5sl+7ylm5V3NSo2Uyh6rYTnOC9jH957OQOE
EWVncgt0ZhBgyt5GEibmeJGQpHBsBsFrf8k7KwLXMgZRQ6AdI+7z/NQ70a3vdgqA
9UXhMl+wmN70YRGRqBMTVq0OwmSFMwsndcquwf0czXyDKV0WA8SMPnzkSPMdb+ns
NB5hk2JzJwcYi93/bgGdJ7/+xvm1MxfrZrUatYI3itbLU8jkI2iivQW4dmwbGbHh
wLOxD487jRkmorGcpzybLMq5amHSwopakvX0iD3KUH9o6BM5IkhoL+dqIcmFlXnL
Ou4UMPD8FZcNDHJzk1OACWB4+HTuyNKw5MKK9uwK0D0=
-----END CERTIFICATE-----
Generated at Fri May 3 17:52:34 2024 by rpki-client on console-fra.rpki-client.org