Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323634363638.roa
File:                     3137392e36332e32302e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          izC+PKYr/65jHxs3oVWZP7DxSNMiT8xxDOaQ3hv9J4U=
Subject key identifier:   70:22:AE:72:E3:F2:05:2C:C4:E5:1A:B3:AD:36:8C:B4:12:47:DD:18
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       34EC484914E28BC6E296729FD01551936455781D
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:11:02 +0000
ROA not before:           Tue 05 Mar 2024 18:06:02 +0000
ROA not after:            Tue 04 Mar 2025 18:11:02 +0000
asID:                     264668
IP address blocks:        179.63.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:48:49:14:e2:8b:c6:e2:96:72:9f:d0:15:51:93:64:55:78:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Mar  5 18:06:02 2024 GMT
            Not After : Mar  4 18:11:02 2025 GMT
        Subject: CN=7022AE72E3F2052CC4E51AB3AD368CB41247DD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:6f:1a:33:a6:22:ea:6a:0b:6c:b1:1b:dc:
                    ed:45:ad:49:76:ea:54:04:df:b8:18:55:8d:ef:00:
                    72:25:80:37:c4:0c:8f:60:94:79:55:3e:41:42:04:
                    29:7e:fb:13:cb:28:ba:c3:b2:47:ec:c4:a6:26:55:
                    da:52:45:88:26:a0:77:7b:fb:cd:69:49:18:36:3d:
                    37:a6:df:ed:4a:04:c0:81:d4:a2:f3:35:42:18:16:
                    0f:ca:bc:26:c6:69:80:98:df:03:51:f8:09:5c:ce:
                    c6:04:9c:7c:06:79:10:49:f6:3b:8b:d8:bc:45:02:
                    f0:75:19:00:45:50:e3:2e:c4:0a:3a:28:2e:a7:73:
                    d8:e6:80:69:83:aa:08:40:60:58:63:4a:b7:fc:63:
                    6c:8a:28:ce:4f:94:38:36:b0:1b:02:60:0a:a3:c8:
                    a6:6b:6c:a7:68:4d:25:93:24:c9:ef:1a:ff:3d:53:
                    5f:09:f0:54:83:69:2e:8d:e0:68:d2:a3:3e:36:07:
                    b6:0b:c1:8a:b0:21:b4:03:9b:9a:07:ce:ba:9b:f6:
                    e1:2a:9d:06:44:53:a0:d8:d4:33:92:39:55:aa:1c:
                    6f:ca:37:5e:47:a4:c7:51:1a:22:0c:ed:57:f9:f0:
                    b0:45:be:3d:4f:f9:fd:cd:3c:7e:32:12:a4:52:e7:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:22:AE:72:E3:F2:05:2C:C4:E5:1A:B3:AD:36:8C:B4:12:47:DD:18
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:7c:8d:12:8d:e9:05:0b:f9:13:5f:59:6d:8d:11:80:67:
         26:50:d8:ba:31:0e:ca:76:41:f2:dd:d6:fc:55:5b:9d:a9:d2:
         1d:06:4e:ac:61:82:e8:02:d7:61:35:f3:9a:58:88:9b:2c:79:
         dd:cf:4a:06:1a:f1:8e:f3:9e:8c:ca:13:d0:d0:d0:65:2d:df:
         94:3b:c0:f3:8a:b7:32:b3:c1:66:4e:a6:66:af:3e:a6:71:3c:
         8f:24:d8:f4:bb:1a:bd:d7:f7:cd:9b:6b:e5:55:aa:04:2c:93:
         85:35:ad:4a:5f:13:96:b8:4f:ff:ad:cf:5d:32:b3:a3:a8:ff:
         2e:c3:41:72:cf:c3:3c:ff:94:12:33:ae:4a:3c:44:df:da:7e:
         f2:40:46:6c:be:fb:7c:0c:b0:3c:d4:9c:18:1d:64:63:9e:82:
         30:92:3b:50:b9:14:d4:72:62:da:28:1b:ba:e9:bc:9d:87:89:
         2a:e9:02:57:67:14:6d:1a:c7:35:0b:94:ec:e3:f0:55:7d:e5:
         ad:b8:39:10:15:4b:b6:0e:62:82:a0:09:81:94:cb:df:24:26:
         7a:17:84:39:6c:a0:54:e8:c6:96:f8:7d:34:e2:bd:f3:30:c7:
         4e:15:6a:c2:2d:23:4b:66:d7:c6:4b:3f:9f:0a:e1:b1:7a:07:
         1f:e0:3f:43
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNOxISRTii8bilnKf0BVRk2RVeB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGNjY0RUZFNzkxQzJGQUU3RTRCMTUxRTM5NDMwMkU1
MDg0MDhBRjAeFw0yNDAzMDUxODA2MDJaFw0yNTAzMDQxODExMDJaMDMxMTAvBgNV
BAMTKDcwMjJBRTcyRTNGMjA1MkNDNEU1MUFCM0FEMzY4Q0I0MTI0N0REMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTm8aM6Yi6moLbLEb3O1FrUl2
6lQE37gYVY3vAHIlgDfEDI9glHlVPkFCBCl++xPLKLrDskfsxKYmVdpSRYgmoHd7
+81pSRg2PTem3+1KBMCB1KLzNUIYFg/KvCbGaYCY3wNR+AlczsYEnHwGeRBJ9juL
2LxFAvB1GQBFUOMuxAo6KC6nc9jmgGmDqghAYFhjSrf8Y2yKKM5PlDg2sBsCYAqj
yKZrbKdoTSWTJMnvGv89U18J8FSDaS6N4GjSoz42B7YLwYqwIbQDm5oHzrqb9uEq
nQZEU6DY1DOSOVWqHG/KN15HpMdRGiIM7Vf58LBFvj1P+f3NPH4yEqRS583JAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcCKucuPyBSzE5RqzrTaMtBJH3RgwHwYDVR0j
BBgwFoAUE/Zk7+eRwvrn5LFR45QwLlCECK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDk1NjZDNzlGMzIzRjAxMzk5RDEzNzZENjIwMDNEMDNE
RUEzNEIwQkQ2QTJGRDVDQkE3NDM5M0YwRTlCNUQ2LzAvMTNGNjY0RUZFNzkxQzJG
QUU3RTRCMTUxRTM5NDMwMkU1MDg0MDhBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xM0Y2NjRFRkU3OTFDMkZBRTdF
NEIxNTFFMzk0MzAyRTUwODQwOEFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQ5NTY2Qzc5RjMyM0YwMTM5OUQxMzc2RDYyMDAzRDAzREVBMzRCMEJE
NkEyRkQ1Q0JBNzQzOTNGMEU5QjVENi8wLzMxMzczOTJlMzYzMzJlMzIzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArM/FDAN
BgkqhkiG9w0BAQsFAAOCAQEAc8F8jRKN6QUL+RNfWW2NEYBnJlDYujEOynZB8t3W
/FVbnanSHQZOrGGC6ALXYTXzmliImyx53c9KBhrxjvOejMoT0NDQZS3flDvA84q3
MrPBZk6mZq8+pnE8jyTY9Lsavdf3zZtr5VWqBCyThTWtSl8TlrhP/63PXTKzo6j/
LsNBcs/DPP+UEjOuSjxE39p+8kBGbL77fAywPNScGB1kY56CMJI7ULkU1HJi2igb
uum8nYeJKukCV2cUbRrHNQuU7OPwVX3lrbg5EBVLtg5igqAJgZTL3yQmeheEOWyg
VOjGlvh9NOK98zDHThVqwi0jS2bXxks/nwrhsXoHH+A/Qw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org