Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39392e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e39392e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          GnJg2naPf3KbH6Ez3FRvIYr91TbZFUg5kRr7nXaBJr4=
Subject key identifier:   A8:EB:CB:FC:91:FE:34:71:0B:63:2D:14:72:78:50:6D:F6:6F:EF:C0
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       665BF0971D77F09E0FAD456FC7E5F99B1B1C0F8D
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39392e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 05 Mar 2024 18:22:41 +0000
ROA not before:           Tue 05 Mar 2024 18:17:41 +0000
ROA not after:            Tue 04 Mar 2025 18:22:41 +0000
asID:                     264780
IP address blocks:        179.61.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5b:f0:97:1d:77:f0:9e:0f:ad:45:6f:c7:e5:f9:9b:1b:1c:0f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Mar  5 18:17:41 2024 GMT
            Not After : Mar  4 18:22:41 2025 GMT
        Subject: CN=A8EBCBFC91FE34710B632D147278506DF66FEFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:79:e9:5c:c5:34:3b:ff:7d:f5:30:17:45:
                    3f:7e:99:7c:d6:ee:58:36:8f:3b:a8:dc:83:f6:24:
                    b1:00:a9:fc:24:0f:19:3b:13:a0:0c:32:30:43:5e:
                    a0:9c:3d:d6:4c:ce:41:34:3d:2c:0d:92:04:c8:56:
                    07:1a:03:da:cd:a5:0a:a5:36:2a:dc:bb:3d:cd:3e:
                    cd:f6:e0:97:45:25:3d:8d:a2:c0:03:42:4d:bc:b9:
                    24:4a:43:b4:cc:99:6c:11:61:81:f7:de:e9:f5:2e:
                    97:5f:3f:e4:70:2b:4c:58:7f:a2:15:58:c7:84:e7:
                    2b:2a:09:5a:93:b6:23:dd:42:33:e2:54:49:11:2e:
                    17:24:b9:2b:ae:b4:28:26:c8:31:bb:38:1d:4a:17:
                    be:8a:a6:ef:d2:40:02:18:7d:8e:f6:9c:c5:80:f0:
                    be:19:ff:a7:4f:6a:db:ab:cf:a0:e0:7b:d0:84:fd:
                    ee:a1:03:ac:ff:3c:fb:20:57:ae:8d:cb:40:ac:2b:
                    e4:ed:3a:13:19:9b:48:5a:a7:9b:3a:cb:b4:7a:00:
                    da:96:8b:c9:f3:ad:09:41:da:a7:5a:03:30:d7:77:
                    02:00:7d:27:c1:3c:89:93:67:e0:4b:2d:f0:c5:34:
                    9d:57:12:74:a9:aa:80:7d:83:18:d0:cc:a2:66:ec:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:CB:FC:91:FE:34:71:0B:63:2D:14:72:78:50:6D:F6:6F:EF:C0
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39392e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b2:8b:a4:b4:7d:c5:f5:d2:98:7a:2c:b3:2c:47:be:8c:02:
         6e:bd:25:c8:bb:9b:17:02:3e:19:0b:c3:66:ef:40:3a:b3:3a:
         d5:ae:5b:6d:43:77:9b:bc:b6:fa:1c:14:4a:f2:4f:f8:4f:4a:
         76:f5:4c:7c:25:29:ef:45:a2:1b:a9:76:c3:e3:cd:3c:3f:1d:
         3b:b6:92:8a:37:bf:c3:12:d0:0d:28:e1:a4:fc:c8:76:1a:af:
         e5:69:83:78:ae:92:33:34:e3:7e:cd:1a:62:b5:0f:00:cb:48:
         83:4b:24:f6:b5:bf:d9:e3:f4:15:4c:bc:20:e3:dd:db:24:c0:
         d5:79:6d:95:11:65:df:31:88:08:4b:b3:8b:76:37:b9:76:d7:
         37:75:dc:e6:a9:45:31:67:74:a2:e0:67:e3:9c:c3:e0:f8:d6:
         dc:fc:71:20:a3:61:2f:e2:60:ea:19:98:f3:b3:a1:b9:82:6b:
         db:8d:bd:7f:54:32:44:4a:5e:d9:54:95:7f:2a:7f:72:90:c4:
         b5:b5:8d:aa:74:04:87:7e:ae:83:75:0f:75:22:99:a5:10:36:
         40:6a:d1:6b:87:ef:78:ac:09:b4:2c:9d:9c:42:82:ac:bf:d4:
         48:bc:b8:c6:76:25:33:c8:22:22:1e:36:a7:e5:97:ad:f8:9c:
         21:17:5f:05
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZlvwlx138J4PrUVvx+X5mxscD40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNThBQzgzMENDQzQzNkIwMTYxMkM5NkI5RDY1RjZB
REEzOEYxODAeFw0yNDAzMDUxODE3NDFaFw0yNTAzMDQxODIyNDFaMDMxMTAvBgNV
BAMTKEE4RUJDQkZDOTFGRTM0NzEwQjYzMkQxNDcyNzg1MDZERjY2RkVGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvnnpXMU0O/999TAXRT9+mXzW
7lg2jzuo3IP2JLEAqfwkDxk7E6AMMjBDXqCcPdZMzkE0PSwNkgTIVgcaA9rNpQql
Nircuz3NPs324JdFJT2NosADQk28uSRKQ7TMmWwRYYH33un1LpdfP+RwK0xYf6IV
WMeE5ysqCVqTtiPdQjPiVEkRLhckuSuutCgmyDG7OB1KF76Kpu/SQAIYfY72nMWA
8L4Z/6dPaturz6Dge9CE/e6hA6z/PPsgV66Ny0CsK+TtOhMZm0hap5s6y7R6ANqW
i8nzrQlB2qdaAzDXdwIAfSfBPImTZ+BLLfDFNJ1XEnSpqoB9gxjQzKJm7GCxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqOvL/JH+NHELYy0UcnhQbfZv78AwHwYDVR0j
BBgwFoAUxRWKyDDMxDawFhLJa51l9q2jjxgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0I2ODg0NTI1MjRGMjk3OUFBRTU3RTBFQjVBQkY5NjQ3
MDRCMDgwMEIwM0JDNkFCODc1ODJCQjNCQTFCMUEyLzAvQzUxNThBQzgzMENDQzQz
NkIwMTYxMkM5NkI5RDY1RjZBREEzOEYxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTE1OEFDODMwQ0NDNDM2QjAx
NjEyQzk2QjlENjVGNkFEQTM4RjE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNCNjg4NDUyNTI0RjI5NzlBQUU1N0UwRUI1QUJGOTY0NzA0QjA4MDBC
MDNCQzZBQjg3NTgyQkIzQkExQjFBMi8wLzMxMzczOTJlMzYzMTJlMzkzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM9YzAN
BgkqhkiG9w0BAQsFAAOCAQEAnrKLpLR9xfXSmHossyxHvowCbr0lyLubFwI+GQvD
Zu9AOrM61a5bbUN3m7y2+hwUSvJP+E9KdvVMfCUp70WiG6l2w+PNPD8dO7aSije/
wxLQDSjhpPzIdhqv5WmDeK6SMzTjfs0aYrUPAMtIg0sk9rW/2eP0FUy8IOPd2yTA
1XltlRFl3zGICEuzi3Y3uXbXN3Xc5qlFMWd0ouBn45zD4PjW3PxxIKNhL+Jg6hmY
87OhuYJr2429f1QyREpe2VSVfyp/cpDEtbWNqnQEh36ug3UPdSKZpRA2QGrRa4fv
eKwJtCydnEKCrL/USLy4xnYlM8giIh42p+WXrficIRdfBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org