Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3137392e34392e31392e302f32342d3234203d3e203631343638.roa
File:                     3137392e34392e31392e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          uRDADtwyi4mtmwTa1IyGMTLR2RgcJpLAgvCHJQyZsGA=
Subject key identifier:   B0:51:26:B2:9E:29:D5:A0:67:ED:C6:BF:17:E5:B8:68:4B:61:10:DC
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       5763C9B6166E4B367BCF0B3C3C6ED423B52D0632
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3137392e34392e31392e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:16:33 +0000
ROA not before:           Tue 05 Mar 2024 18:11:33 +0000
ROA not after:            Tue 04 Mar 2025 18:16:33 +0000
asID:                     61468
IP address blocks:        179.49.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:63:c9:b6:16:6e:4b:36:7b:cf:0b:3c:3c:6e:d4:23:b5:2d:06:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Mar  5 18:11:33 2024 GMT
            Not After : Mar  4 18:16:33 2025 GMT
        Subject: CN=B05126B29E29D5A067EDC6BF17E5B8684B6110DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:a7:12:bf:5c:12:0b:1f:bd:80:ff:4e:43:
                    75:41:c6:56:8e:64:8f:2e:08:17:ba:6c:0a:c4:3f:
                    7c:fa:4a:05:30:d2:aa:7a:19:71:42:1a:dc:6a:a4:
                    41:64:8e:38:d5:7a:4c:be:5e:91:b4:6f:fb:6c:93:
                    ec:4a:58:bf:53:6f:f3:c7:8f:d9:97:58:46:88:93:
                    b9:35:1f:0c:ff:c5:14:a1:b5:74:af:da:94:00:7e:
                    7c:3a:7f:cb:83:33:36:78:ff:72:c5:aa:37:90:60:
                    36:d5:05:e0:61:8e:d8:d4:7a:dd:08:62:3c:49:3a:
                    34:c1:2a:1f:e2:26:05:61:24:90:6b:80:74:dd:5e:
                    ba:b5:6e:98:28:32:e3:6e:15:a2:d8:14:bd:71:31:
                    38:de:0f:aa:c7:9f:88:31:35:1d:e4:ea:43:91:0d:
                    ac:b3:41:60:fd:25:c6:4f:1a:70:53:df:86:03:69:
                    de:d8:9e:7b:8f:fa:d2:d3:20:30:f1:88:85:80:59:
                    57:54:10:eb:9f:af:e3:8b:e3:70:d6:72:3f:ac:e5:
                    be:d8:7e:39:21:35:ba:f7:0c:5f:36:6d:05:72:2c:
                    dc:69:fa:34:58:b0:89:90:e9:2a:f6:50:98:cb:63:
                    98:51:d8:83:0e:60:f5:ed:c9:55:e8:e8:d3:6a:d5:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:26:B2:9E:29:D5:A0:67:ED:C6:BF:17:E5:B8:68:4B:61:10:DC
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3137392e34392e31392e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ff:61:a9:33:44:c5:96:6f:36:52:8e:1a:0a:b7:63:3b:c2:
         9a:ff:3e:d0:c2:8a:c1:85:03:3a:1a:80:ec:ba:27:df:c1:5b:
         31:64:9e:be:4a:9a:7b:33:a4:7c:2d:c8:79:bc:42:b8:f2:2c:
         c9:25:37:fc:b6:44:0f:54:55:a8:88:41:c0:7a:33:3c:7b:e2:
         f0:c0:cd:c2:0f:e8:8f:fd:95:62:de:98:70:7b:53:37:1c:11:
         13:e7:b8:1b:20:54:02:5d:98:1b:cb:24:bd:51:50:2f:4d:bd:
         98:bb:9f:60:cf:e9:a3:f4:d4:09:4a:74:69:85:82:a1:a2:5c:
         58:1f:38:9d:f4:cf:81:19:1f:53:29:69:d8:84:8b:a8:03:54:
         f3:74:dd:c1:fb:1c:af:fa:9b:a0:44:25:8a:dd:cf:0f:0f:d4:
         0d:66:69:97:1d:23:1f:8e:f1:82:72:54:db:fc:57:6f:d1:e7:
         44:8d:78:fb:58:29:99:d0:4c:d1:ac:7a:ce:a5:0a:7e:67:47:
         e0:6b:ec:1b:e9:43:2a:ac:24:09:17:77:48:45:89:ef:3d:7b:
         bb:48:75:65:8a:3a:d4:d1:c3:d2:8c:19:4d:63:d5:56:ae:07:
         1d:aa:5a:b5:78:13:ee:90:1a:71:41:d7:aa:ad:3f:92:10:de:
         a6:36:c1:43
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUV2PJthZuSzZ7zws8PG7UI7UtBjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNDAzMDUxODExMzNaFw0yNTAzMDQxODE2MzNaMDMxMTAvBgNV
BAMTKEIwNTEyNkIyOUUyOUQ1QTA2N0VEQzZCRjE3RTVCODY4NEI2MTEwREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4acSv1wSCx+9gP9OQ3VBxlaO
ZI8uCBe6bArEP3z6SgUw0qp6GXFCGtxqpEFkjjjVeky+XpG0b/tsk+xKWL9Tb/PH
j9mXWEaIk7k1Hwz/xRShtXSv2pQAfnw6f8uDMzZ4/3LFqjeQYDbVBeBhjtjUet0I
YjxJOjTBKh/iJgVhJJBrgHTdXrq1bpgoMuNuFaLYFL1xMTjeD6rHn4gxNR3k6kOR
DayzQWD9JcZPGnBT34YDad7YnnuP+tLTIDDxiIWAWVdUEOufr+OL43DWcj+s5b7Y
fjkhNbr3DF82bQVyLNxp+jRYsImQ6Sr2UJjLY5hR2IMOYPXtyVXo6NNq1awtAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUsFEmsp4p1aBn7ca/F+W4aEthENwwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMxMzczOTJlMzQzOTJlMzEzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzMRMwDQYJ
KoZIhvcNAQELBQADggEBAE3/YakzRMWWbzZSjhoKt2M7wpr/PtDCisGFAzoagOy6
J9/BWzFknr5KmnszpHwtyHm8QrjyLMklN/y2RA9UVaiIQcB6Mzx74vDAzcIP6I/9
lWLemHB7UzccERPnuBsgVAJdmBvLJL1RUC9NvZi7n2DP6aP01AlKdGmFgqGiXFgf
OJ30z4EZH1MpadiEi6gDVPN03cH7HK/6m6BEJYrdzw8P1A1maZcdIx+O8YJyVNv8
V2/R50SNePtYKZnQTNGses6lCn5nR+Br7BvpQyqsJAkXd0hFie89e7tIdWWKOtTR
w9KMGU1j1VauBx2qWrV4E+6QGnFB16qtP5IQ3qY2wUM=
-----END CERTIFICATE-----
Generated at Sat Sep 7 09:44:55 2024 by rpki-client on console-ams.rpki-client.org