Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e203237393437.roa
File:                     3137392e36332e32302e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          hPuwxxSzAoV/pC78pdQ2R5DECXpyk/gq6YMVn3k6t6A=
Subject key identifier:   80:0E:33:B1:42:FF:50:01:90:41:08:12:E8:79:B3:78:09:F9:08:00
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       1F3F1B6EE28E2D949307AAE592CF93E16E28F899
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:11:02 +0000
ROA not before:           Tue 05 Mar 2024 18:06:02 +0000
ROA not after:            Tue 04 Mar 2025 18:11:02 +0000
asID:                     27947
IP address blocks:        179.63.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3f:1b:6e:e2:8e:2d:94:93:07:aa:e5:92:cf:93:e1:6e:28:f8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Mar  5 18:06:02 2024 GMT
            Not After : Mar  4 18:11:02 2025 GMT
        Subject: CN=800E33B142FF500190410812E879B37809F90800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:3c:9e:a8:b6:6c:28:7f:68:2e:52:71:c1:
                    29:b4:e6:ae:fa:9d:35:9a:c6:93:9b:9b:3c:e9:1a:
                    27:b8:73:05:04:76:b6:31:22:9a:90:ae:06:30:6e:
                    60:5d:13:90:e3:cf:ef:9e:7a:1c:a4:83:7d:eb:79:
                    0c:49:fb:9a:ad:06:e5:58:b2:3f:5b:87:61:85:9b:
                    b2:03:f4:4d:4e:92:5e:8f:f3:74:bf:2e:ff:ca:73:
                    d5:07:2f:b3:85:df:00:2a:0d:7e:d7:35:ab:ed:3b:
                    91:47:a0:ae:e6:b9:74:31:dd:13:2c:cb:de:66:5c:
                    25:f4:eb:82:ee:7b:be:09:f9:e9:93:e7:b2:1d:c3:
                    07:fe:9e:fb:6b:7f:ec:bf:d8:70:b7:11:5d:d9:64:
                    b4:61:98:12:65:4b:49:96:76:83:ab:74:42:ce:8d:
                    25:87:71:f7:9e:21:8c:ab:5b:60:80:53:f2:96:0a:
                    86:b6:f8:35:18:45:67:d0:0c:73:df:70:d0:2f:7f:
                    fb:ac:a5:34:9e:f8:a6:52:a9:80:02:cf:db:c6:33:
                    63:dd:fc:17:74:a1:96:dd:e6:7a:5b:c9:3f:41:64:
                    8e:3d:af:f8:c6:ea:10:88:82:80:3c:8a:2b:e8:58:
                    ad:82:65:ea:9e:55:af:78:d3:9d:4e:bc:44:9b:2f:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0E:33:B1:42:FF:50:01:90:41:08:12:E8:79:B3:78:09:F9:08:00
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:63:28:77:86:f6:8c:a5:50:6d:ab:d7:77:ba:14:c4:1b:8e:
         07:42:3b:36:e3:72:77:6e:b6:61:ba:f6:6e:cc:a2:2b:e7:b3:
         98:61:08:15:e4:da:37:35:02:45:5d:22:3a:26:90:f7:3a:01:
         62:e6:3c:f4:dc:c8:e8:68:4a:af:59:8d:6d:67:d2:b7:f5:c1:
         d4:25:ab:a4:a9:cd:6d:49:71:df:88:a4:90:80:cf:0b:3c:b3:
         4d:4f:ac:d4:bc:6c:89:d1:b8:4d:7d:b6:3d:5e:bb:0a:90:da:
         a5:ba:ba:9d:63:95:79:55:cf:2b:8e:70:c2:8d:0f:c4:45:aa:
         9a:94:8c:c3:0d:7b:eb:cf:2c:ba:a4:4a:60:41:8e:00:ab:11:
         89:e7:a4:9e:cb:9f:54:53:c2:66:30:59:43:5e:58:ac:79:77:
         a2:af:c9:e9:cf:b1:21:a3:cb:f6:ed:2a:4f:a3:56:51:02:42:
         2d:4f:31:1c:5a:b9:30:11:e8:f5:c7:80:44:cd:f3:cc:8f:14:
         1c:29:d2:70:30:db:17:b0:20:32:0d:e9:18:fa:0a:5a:99:25:
         f7:94:41:c8:b6:36:6f:67:6e:5d:25:b2:5b:a8:5c:a8:23:73:
         ae:bd:e5:46:b2:5d:38:c7:06:87:7d:7b:c7:82:df:16:e3:86:
         38:77:a1:80
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHz8bbuKOLZSTB6rlks+T4W4o+JkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNGNjY0RUZFNzkxQzJGQUU3RTRCMTUxRTM5NDMwMkU1
MDg0MDhBRjAeFw0yNDAzMDUxODA2MDJaFw0yNTAzMDQxODExMDJaMDMxMTAvBgNV
BAMTKDgwMEUzM0IxNDJGRjUwMDE5MDQxMDgxMkU4NzlCMzc4MDlGOTA4MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bjyeqLZsKH9oLlJxwSm05q76
nTWaxpObmzzpGie4cwUEdrYxIpqQrgYwbmBdE5Djz++eehykg33reQxJ+5qtBuVY
sj9bh2GFm7ID9E1Okl6P83S/Lv/Kc9UHL7OF3wAqDX7XNavtO5FHoK7muXQx3RMs
y95mXCX064Lue74J+emT57Idwwf+nvtrf+y/2HC3EV3ZZLRhmBJlS0mWdoOrdELO
jSWHcfeeIYyrW2CAU/KWCoa2+DUYRWfQDHPfcNAvf/uspTSe+KZSqYACz9vGM2Pd
/Bd0oZbd5npbyT9BZI49r/jG6hCIgoA8iivoWK2CZeqeVa94051OvESbLyujAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUgA4zsUL/UAGQQQgS6HmzeAn5CAAwHwYDVR0j
BBgwFoAUE/Zk7+eRwvrn5LFR45QwLlCECK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDk1NjZDNzlGMzIzRjAxMzk5RDEzNzZENjIwMDNEMDNE
RUEzNEIwQkQ2QTJGRDVDQkE3NDM5M0YwRTlCNUQ2LzAvMTNGNjY0RUZFNzkxQzJG
QUU3RTRCMTUxRTM5NDMwMkU1MDg0MDhBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xM0Y2NjRFRkU3OTFDMkZBRTdF
NEIxNTFFMzk0MzAyRTUwODQwOEFGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQ5NTY2Qzc5RjMyM0YwMTM5OUQxMzc2RDYyMDAzRDAzREVBMzRCMEJE
NkEyRkQ1Q0JBNzQzOTNGMEU5QjVENi8wLzMxMzczOTJlMzYzMzJlMzIzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKzPxQwDQYJ
KoZIhvcNAQELBQADggEBADBjKHeG9oylUG2r13e6FMQbjgdCOzbjcndutmG69m7M
oivns5hhCBXk2jc1AkVdIjomkPc6AWLmPPTcyOhoSq9ZjW1n0rf1wdQlq6SpzW1J
cd+IpJCAzws8s01PrNS8bInRuE19tj1euwqQ2qW6up1jlXlVzyuOcMKND8RFqpqU
jMMNe+vPLLqkSmBBjgCrEYnnpJ7Ln1RTwmYwWUNeWKx5d6KvyenPsSGjy/btKk+j
VlECQi1PMRxauTAR6PXHgETN88yPFBwp0nAw2xewIDIN6Rj6ClqZJfeUQci2Nm9n
bl0lsluoXKgjc6695UayXTjHBod9e8eC3xbjhjh3oYA=
-----END CERTIFICATE-----
Generated at Sun May 5 05:21:03 2024 by rpki-client on console-fra.rpki-client.org