Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3136372e3234392e34302e302f32322d3234203d3e203237383137.roa
File:                     3136372e3234392e34302e302f32322d3234203d3e203237383137.roa (raw, json)
Hash identifier:          ojLGKxifn6XGXQDfcqQTfWjk7l1LvP5I6aRZsWOswOg=
Subject key identifier:   57:B4:9B:BC:4F:2C:A3:50:AF:9F:47:77:F5:60:18:14:9E:2B:3C:6A
Certificate issuer:       /CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Certificate serial:       6EEE178B1B1D7B16D5FC6FFC2586694DC6EEC071
Authority key identifier: F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3136372e3234392e34302e302f32322d3234203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 18:16:57 +0000
ROA not before:           Tue 05 Mar 2024 18:11:57 +0000
ROA not after:            Tue 04 Mar 2025 18:16:57 +0000
asID:                     27817
IP address blocks:        167.249.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ee:17:8b:1b:1d:7b:16:d5:fc:6f:fc:25:86:69:4d:c6:ee:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
        Validity
            Not Before: Mar  5 18:11:57 2024 GMT
            Not After : Mar  4 18:16:57 2025 GMT
        Subject: CN=57B49BBC4F2CA350AF9F4777F56018149E2B3C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:de:30:e9:6d:3f:51:05:25:f4:15:e6:8e:
                    cb:b2:65:9b:33:52:5d:fe:88:16:1e:98:97:d7:fc:
                    28:9f:21:70:13:e2:7e:62:5c:12:62:d1:61:83:a4:
                    dc:c2:cc:dc:1a:c9:08:d5:fe:06:b1:d1:30:ee:04:
                    b7:b4:21:ff:e5:e6:69:25:01:0a:d6:0d:a7:e0:bc:
                    45:03:4f:79:d4:2b:d3:a3:1d:c5:db:03:e1:a1:d1:
                    01:80:38:df:73:35:4b:fb:67:0c:0b:c3:9b:02:e8:
                    2c:80:cd:8d:32:55:b3:ab:3a:47:20:19:84:e6:ff:
                    fd:bc:a7:a5:ab:9b:f6:ee:93:78:d7:5c:5b:49:a0:
                    d1:c7:56:b2:d4:7d:b4:59:81:bf:e2:f5:f1:4e:87:
                    a7:1d:95:37:6b:7e:46:6b:9c:29:92:f7:15:76:ba:
                    87:ed:fd:5a:e8:4e:80:58:5c:f0:da:ba:8a:f8:a2:
                    bf:4b:06:44:02:dc:33:92:1d:22:e2:d7:c5:66:91:
                    bd:e5:90:6c:be:d0:e3:67:d0:96:02:4a:ea:98:e8:
                    98:92:fc:3f:2d:d1:d2:1e:e1:68:f1:75:ec:4b:3b:
                    52:ab:5e:2e:8d:47:c5:2d:dc:65:d5:ad:43:b6:f2:
                    8e:90:02:c0:80:04:93:00:1b:2a:85:ee:73:a9:6a:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B4:9B:BC:4F:2C:A3:50:AF:9F:47:77:F5:60:18:14:9E:2B:3C:6A
            X509v3 Authority Key Identifier:
                keyid:F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3136372e3234392e34302e302f32322d3234203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:5f:4d:90:6c:cc:d0:f3:80:e9:13:6a:4b:b6:aa:a5:bc:0f:
         79:7d:1d:1d:5c:48:da:61:8d:cb:3e:97:75:56:b2:fc:ec:00:
         f5:f5:b2:37:20:dc:b4:08:9c:53:52:17:21:45:9e:21:1c:2a:
         d2:f1:06:82:77:64:8f:15:9f:90:6d:06:1f:b5:48:0c:3b:d7:
         5f:6e:b1:84:ac:af:31:d7:8c:d9:da:2e:27:09:2f:91:cf:8d:
         cb:cc:e9:42:3b:ff:60:d3:22:1c:5a:05:7b:e9:d1:14:d0:b9:
         5a:10:90:be:2a:1d:82:15:90:97:18:c9:9a:99:07:0c:b3:c3:
         a4:24:31:2c:86:3f:e6:1e:53:7c:53:5f:54:ae:dc:91:f5:68:
         cb:bf:37:95:7a:38:3e:59:29:e3:2f:45:cd:6c:e3:70:de:31:
         1c:48:52:3f:14:38:70:49:bd:b2:2c:86:08:ef:df:53:fb:e2:
         70:fc:1e:31:14:08:aa:d7:e5:5a:e0:3c:8e:70:33:31:f2:2e:
         9b:03:a0:2a:42:2c:48:e8:29:b1:67:dc:59:56:6b:17:e4:8b:
         b0:4e:e0:29:72:b9:c6:24:04:ba:10:59:0f:ea:9a:fc:d5:20:
         0c:06:cf:77:9b:a2:0f:d2:e2:5c:7a:e9:ec:3b:c2:ab:0f:ae:
         6f:30:b5:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbu4XixsdexbV/G/8JYZpTcbuwHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgwOTdBODBGNjVDQUQwMTFFMzE2RjYxMEZEMkE3MTg5
QjZGOUQ4MDAeFw0yNDAzMDUxODExNTdaFw0yNTAzMDQxODE2NTdaMDMxMTAvBgNV
BAMTKDU3QjQ5QkJDNEYyQ0EzNTBBRjlGNDc3N0Y1NjAxODE0OUUyQjNDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zN4w6W0/UQUl9BXmjsuyZZsz
Ul3+iBYemJfX/CifIXAT4n5iXBJi0WGDpNzCzNwayQjV/gax0TDuBLe0If/l5mkl
AQrWDafgvEUDT3nUK9OjHcXbA+Gh0QGAON9zNUv7ZwwLw5sC6CyAzY0yVbOrOkcg
GYTm//28p6Wrm/buk3jXXFtJoNHHVrLUfbRZgb/i9fFOh6cdlTdrfkZrnCmS9xV2
uoft/VroToBYXPDauor4or9LBkQC3DOSHSLi18Vmkb3lkGy+0ONn0JYCSuqY6JiS
/D8t0dIe4WjxdexLO1KrXi6NR8Ut3GXVrUO28o6QAsCABJMAGyqF7nOpauM9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUV7SbvE8so1Cvn0d39WAYFJ4rPGowHwYDVR0j
BBgwFoAU+Al6gPZcrQEeMW9hD9KnGJtvnYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OUFCOTlDMTA1RUQxMDg3RTJBMUJEMjFFQUU0MDJBNjk3
MThBOUJBRTREOUYyRUYzOTFDMDgzMzY4RjM4MTQ3LzAvRjgwOTdBODBGNjVDQUQw
MTFFMzE2RjYxMEZEMkE3MTg5QjZGOUQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODA5N0E4MEY2NUNBRDAxMUUz
MTZGNjEwRkQyQTcxODlCNkY5RDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlBQjk5QzEwNUVEMTA4N0UyQTFCRDIxRUFFNDAyQTY5NzE4QTlCQUU0
RDlGMkVGMzkxQzA4MzM2OEYzODE0Ny8wLzMxMzYzNzJlMzIzNDM5MmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf5KDAN
BgkqhkiG9w0BAQsFAAOCAQEAx19NkGzM0POA6RNqS7aqpbwPeX0dHVxI2mGNyz6X
dVay/OwA9fWyNyDctAicU1IXIUWeIRwq0vEGgndkjxWfkG0GH7VIDDvXX26xhKyv
MdeM2douJwkvkc+Ny8zpQjv/YNMiHFoFe+nRFNC5WhCQviodghWQlxjJmpkHDLPD
pCQxLIY/5h5TfFNfVK7ckfVoy783lXo4Plkp4y9FzWzjcN4xHEhSPxQ4cEm9siyG
CO/fU/vicPweMRQIqtflWuA8jnAzMfIumwOgKkIsSOgpsWfcWVZrF+SLsE7gKXK5
xiQEuhBZD+qa/NUgDAbPd5uiD9LiXHrp7DvCqw+ubzC1rw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org