Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e203139313639.roa
File:                     3137392e36332e32302e302f32322d3234203d3e203139313639.roa (raw, json)
Hash identifier:          mg1gUZwRT25/YcvT3do7s5Lm5UEje4RVoi55yV6sSGg=
Subject key identifier:   3B:3A:A2:00:30:7D:A7:C1:30:68:59:9E:61:C8:2A:32:FE:2C:D3:D8
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       0AAFE2BE91C22881189A90AA14B9B0FDC168EAEF
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:11:02 +0000
ROA not before:           Tue 05 Mar 2024 18:06:02 +0000
ROA not after:            Tue 04 Mar 2025 18:11:02 +0000
asID:                     19169
IP address blocks:        179.63.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:af:e2:be:91:c2:28:81:18:9a:90:aa:14:b9:b0:fd:c1:68:ea:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Mar  5 18:06:02 2024 GMT
            Not After : Mar  4 18:11:02 2025 GMT
        Subject: CN=3B3AA200307DA7C13068599E61C82A32FE2CD3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:3d:37:18:cb:38:71:d1:61:e3:4b:e2:f8:
                    cd:dc:0a:5a:93:a7:08:f8:b9:ac:74:8e:de:71:9c:
                    7a:55:c1:f1:be:f0:28:9b:eb:04:d6:6a:39:59:59:
                    95:39:cb:bb:4c:55:1e:8a:a9:73:74:e9:28:ed:a4:
                    86:26:4d:13:f7:b1:57:1c:df:23:94:56:7d:42:31:
                    7b:e6:39:93:97:94:49:b7:fd:6a:9e:27:40:95:3f:
                    d8:8f:3c:31:ab:2e:3a:86:cf:16:85:dc:ab:d3:d7:
                    2d:24:99:0c:96:2e:e9:f4:2b:e6:bd:ab:1a:96:52:
                    e7:8d:52:88:a9:d8:f2:00:ff:c9:59:ce:56:73:1f:
                    fa:54:d3:86:61:d6:95:b0:c9:2d:8f:9d:5b:be:83:
                    45:18:9b:ec:cf:c1:37:b8:92:97:ab:b4:94:45:64:
                    4e:44:03:39:11:90:99:a0:f9:d8:c2:85:22:26:9b:
                    5d:48:f9:8b:2a:62:2a:98:a4:43:80:68:a1:12:9d:
                    1e:9d:55:67:03:23:17:e8:87:d3:f3:78:80:bc:94:
                    54:f8:31:dd:ba:98:4a:d9:7b:2c:14:eb:5d:b7:4f:
                    f6:8b:ff:3b:2d:10:d9:57:ce:c5:81:a5:67:36:14:
                    b3:4c:b0:a3:b6:c1:1e:e3:13:10:4d:71:90:53:37:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3A:A2:00:30:7D:A7:C1:30:68:59:9E:61:C8:2A:32:FE:2C:D3:D8
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:b6:49:78:d2:dc:30:9c:c6:f3:08:f8:81:99:19:c9:44:81:
         0f:53:b3:a3:b9:bd:b4:8b:a5:3c:a6:4c:95:37:ce:d9:19:8d:
         2e:07:a3:cc:c4:5e:62:13:85:2a:77:3b:b3:ad:1c:66:a9:c0:
         6c:92:65:77:1b:64:33:b8:2f:dc:7a:64:d2:06:37:05:2c:a5:
         a8:f2:7e:03:36:7a:86:35:b0:47:9d:d8:56:c2:53:b0:87:02:
         41:be:0d:60:0c:2d:f1:db:8d:56:4a:d6:66:90:71:c2:1f:ea:
         4a:8b:62:f2:4c:2b:49:ff:30:f3:eb:31:98:a6:8f:1e:08:c5:
         76:a3:55:70:e3:09:48:5f:76:03:48:c1:ba:9f:74:64:e8:f3:
         5e:3a:45:21:a3:7b:74:eb:e0:8f:dc:06:2c:c5:0d:65:06:3d:
         88:3d:50:75:b0:dd:37:d4:94:f2:c4:fe:ac:2d:8c:6a:d6:6e:
         40:7d:71:fa:11:1c:bb:38:b1:8d:58:f6:d7:db:3a:7a:86:5f:
         50:58:35:fb:e3:b8:bf:dd:a4:93:a4:ba:ab:f2:07:de:94:1a:
         2f:cf:1d:8d:a0:39:33:f0:e0:b5:f8:4e:a7:78:aa:94:7d:98:
         2a:eb:f4:75:41:4f:0d:f1:02:12:26:f4:11:2a:f3:14:59:64:
         f2:97:b1:6d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCq/ivpHCKIEYmpCqFLmw/cFo6u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGNjY0RUZFNzkxQzJGQUU3RTRCMTUxRTM5NDMwMkU1
MDg0MDhBRjAeFw0yNDAzMDUxODA2MDJaFw0yNTAzMDQxODExMDJaMDMxMTAvBgNV
BAMTKDNCM0FBMjAwMzA3REE3QzEzMDY4NTk5RTYxQzgyQTMyRkUyQ0QzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjz03GMs4cdFh40vi+M3cClqT
pwj4uax0jt5xnHpVwfG+8Cib6wTWajlZWZU5y7tMVR6KqXN06SjtpIYmTRP3sVcc
3yOUVn1CMXvmOZOXlEm3/WqeJ0CVP9iPPDGrLjqGzxaF3KvT1y0kmQyWLun0K+a9
qxqWUueNUoip2PIA/8lZzlZzH/pU04Zh1pWwyS2PnVu+g0UYm+zPwTe4kpertJRF
ZE5EAzkRkJmg+djChSImm11I+YsqYiqYpEOAaKESnR6dVWcDIxfoh9PzeIC8lFT4
Md26mErZeywU6123T/aL/zstENlXzsWBpWc2FLNMsKO2wR7jExBNcZBTN5tTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUOzqiADB9p8EwaFmeYcgqMv4s09gwHwYDVR0j
BBgwFoAUE/Zk7+eRwvrn5LFR45QwLlCECK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDk1NjZDNzlGMzIzRjAxMzk5RDEzNzZENjIwMDNEMDNE
RUEzNEIwQkQ2QTJGRDVDQkE3NDM5M0YwRTlCNUQ2LzAvMTNGNjY0RUZFNzkxQzJG
QUU3RTRCMTUxRTM5NDMwMkU1MDg0MDhBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xM0Y2NjRFRkU3OTFDMkZBRTdF
NEIxNTFFMzk0MzAyRTUwODQwOEFGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQ5NTY2Qzc5RjMyM0YwMTM5OUQxMzc2RDYyMDAzRDAzREVBMzRCMEJE
NkEyRkQ1Q0JBNzQzOTNGMEU5QjVENi8wLzMxMzczOTJlMzYzMzJlMzIzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzkzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKzPxQwDQYJ
KoZIhvcNAQELBQADggEBAKm2SXjS3DCcxvMI+IGZGclEgQ9Ts6O5vbSLpTymTJU3
ztkZjS4Ho8zEXmIThSp3O7OtHGapwGySZXcbZDO4L9x6ZNIGNwUspajyfgM2eoY1
sEed2FbCU7CHAkG+DWAMLfHbjVZK1maQccIf6kqLYvJMK0n/MPPrMZimjx4IxXaj
VXDjCUhfdgNIwbqfdGTo8146RSGje3Tr4I/cBizFDWUGPYg9UHWw3TfUlPLE/qwt
jGrWbkB9cfoRHLs4sY1Y9tfbOnqGX1BYNfvjuL/dpJOkuqvyB96UGi/PHY2gOTPw
4LX4Tqd4qpR9mCrr9HVBTw3xAhIm9BEq8xRZZPKXsW0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:12 2024 by rpki-client on console-fra.rpki-client.org