Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/3137392e36332e3234302e302f32322d3234203d3e203532343735.roa
File:                     3137392e36332e3234302e302f32322d3234203d3e203532343735.roa (raw, json)
Hash identifier:          WO0ZO0cFZMhS3z0b7IPlX9y7Td1fgbfAN/CXAsvxHHI=
Subject key identifier:   47:C7:27:E0:28:80:06:9E:5F:2F:E5:91:98:8E:9F:5B:E5:6E:09:F6
Certificate issuer:       /CN=558C8747A49F897C4126F7858E42A85E9DD69C56
Certificate serial:       7B174E7AC9BD9A429CA2DF35C55CB4C795B8AB32
Authority key identifier: 55:8C:87:47:A4:9F:89:7C:41:26:F7:85:8E:42:A8:5E:9D:D6:9C:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/558C8747A49F897C4126F7858E42A85E9DD69C56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/3137392e36332e3234302e302f32322d3234203d3e203532343735.roa
Signing time:             Tue 05 Mar 2024 17:49:57 +0000
ROA not before:           Tue 05 Mar 2024 17:44:57 +0000
ROA not after:            Tue 04 Mar 2025 17:49:57 +0000
asID:                     52475
IP address blocks:        179.63.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/558C8747A49F897C4126F7858E42A85E9DD69C56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/558C8747A49F897C4126F7858E42A85E9DD69C56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/558C8747A49F897C4126F7858E42A85E9DD69C56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:17:4e:7a:c9:bd:9a:42:9c:a2:df:35:c5:5c:b4:c7:95:b8:ab:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558C8747A49F897C4126F7858E42A85E9DD69C56
        Validity
            Not Before: Mar  5 17:44:57 2024 GMT
            Not After : Mar  4 17:49:57 2025 GMT
        Subject: CN=47C727E02880069E5F2FE591988E9F5BE56E09F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:75:44:d3:97:cc:ea:49:55:7c:ba:82:e6:
                    c9:0a:ed:19:d1:68:72:88:ad:ad:bf:cb:b5:32:78:
                    34:1e:99:bb:e5:75:3e:1f:ad:5d:6c:db:50:9e:3a:
                    84:87:2f:9e:33:44:d2:d3:a5:a4:f9:bd:66:6e:68:
                    c7:6c:58:61:96:5c:dd:72:27:76:5d:63:25:ee:d7:
                    3f:8a:c5:81:da:0e:20:d6:82:2b:48:3b:51:e9:90:
                    a0:62:23:71:50:2b:a3:5b:a3:2f:d6:22:3c:f0:04:
                    ee:5d:3e:1d:26:74:4a:af:a1:7d:22:6a:4a:71:9a:
                    ab:f4:a2:19:01:bf:70:cd:d4:8b:20:c2:b8:f1:51:
                    cc:fb:75:2e:33:2f:bc:ad:ad:2a:dc:71:cf:4b:fa:
                    e2:65:ec:53:d2:db:67:06:6c:9a:ea:8d:04:0a:77:
                    4c:db:a8:5b:f6:bd:f3:28:59:5a:64:aa:08:97:9f:
                    88:44:94:40:47:09:92:91:1b:22:e8:b7:bb:78:a3:
                    78:57:dd:37:af:72:ef:ba:d1:6c:34:9c:8a:3e:e3:
                    0c:34:45:ab:c2:f4:0a:a7:84:34:7a:1d:78:9a:55:
                    cc:98:5b:f1:a2:80:56:a5:e0:59:e4:c1:26:dd:3f:
                    ea:4c:fd:54:de:91:91:c5:4f:9e:f1:6a:4e:09:30:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C7:27:E0:28:80:06:9E:5F:2F:E5:91:98:8E:9F:5B:E5:6E:09:F6
            X509v3 Authority Key Identifier:
                keyid:55:8C:87:47:A4:9F:89:7C:41:26:F7:85:8E:42:A8:5E:9D:D6:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/558C8747A49F897C4126F7858E42A85E9DD69C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/558C8747A49F897C4126F7858E42A85E9DD69C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/3137392e36332e3234302e302f32322d3234203d3e203532343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:40:ff:7b:5c:32:2c:23:a5:22:9b:51:95:cf:19:81:bb:13:
         f3:6c:b5:01:c0:1e:5b:0d:66:21:43:d5:9e:d6:57:e8:2a:b6:
         77:24:ef:8e:9a:6e:34:c0:4e:77:6a:89:f5:0e:e8:64:c4:02:
         1f:60:59:31:26:6b:50:66:5f:73:f4:33:73:84:d7:2e:5e:5b:
         74:cb:c2:69:a9:d7:dc:db:37:6d:89:25:35:3e:76:d7:9a:54:
         17:03:bb:83:e5:e9:bd:ac:b4:a0:1c:24:01:3f:8c:69:07:f5:
         b3:a0:57:f6:c1:a0:8b:0a:43:38:e6:98:89:fc:3b:99:41:05:
         c0:88:66:d0:a1:21:e9:b4:6b:4c:22:93:fd:3a:60:4d:de:7b:
         21:a7:d0:23:f2:c8:18:6c:2f:c2:c8:da:74:c4:c5:7d:a8:71:
         e7:ff:56:ad:aa:eb:88:43:e2:55:c1:1d:ac:46:d7:b3:19:67:
         24:ee:df:20:a8:54:99:c1:64:1f:40:e2:d4:f3:43:b2:54:d4:
         df:a0:65:46:cb:89:da:e3:71:85:7e:9c:d0:89:d2:23:00:c4:
         0c:68:62:a0:46:f2:4e:29:11:e9:ba:7c:45:82:76:0c:6f:fb:
         56:bf:74:ba:bd:db:94:a1:88:9c:54:38:65:b5:1b:18:cb:29:
         0d:33:ca:89
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUexdOesm9mkKcot81xVy0x5W4qzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4Qzg3NDdBNDlGODk3QzQxMjZGNzg1OEU0MkE4NUU5
REQ2OUM1NjAeFw0yNDAzMDUxNzQ0NTdaFw0yNTAzMDQxNzQ5NTdaMDMxMTAvBgNV
BAMTKDQ3QzcyN0UwMjg4MDA2OUU1RjJGRTU5MTk4OEU5RjVCRTU2RTA5RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahHVE05fM6klVfLqC5skK7RnR
aHKIra2/y7UyeDQembvldT4frV1s21CeOoSHL54zRNLTpaT5vWZuaMdsWGGWXN1y
J3ZdYyXu1z+KxYHaDiDWgitIO1HpkKBiI3FQK6Nboy/WIjzwBO5dPh0mdEqvoX0i
akpxmqv0ohkBv3DN1IsgwrjxUcz7dS4zL7ytrSrccc9L+uJl7FPS22cGbJrqjQQK
d0zbqFv2vfMoWVpkqgiXn4hElEBHCZKRGyLot7t4o3hX3Tevcu+60Ww0nIo+4ww0
RavC9AqnhDR6HXiaVcyYW/GigFal4FnkwSbdP+pM/VTekZHFT57xak4JMJopAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUR8cn4CiABp5fL+WRmI6fW+VuCfYwHwYDVR0j
BBgwFoAUVYyHR6SfiXxBJveFjkKoXp3WnFYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODE2OUJDN0RDODc0NkVFNUY3MDYwREEyQUM1QTc3RjIw
RERBMDBFMzIwRUFFOTExMDA0Q0Q4NTlEMjhENjBCLzAvNTU4Qzg3NDdBNDlGODk3
QzQxMjZGNzg1OEU0MkE4NUU5REQ2OUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NThDODc0N0E0OUY4OTdDNDEy
NkY3ODU4RTQyQTg1RTlERDY5QzU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODgxNjlCQzdEQzg3NDZFRTVGNzA2MERBMkFDNUE3N0YyMEREQTAwRTMy
MEVBRTkxMTAwNENEODU5RDI4RDYwQi8wLzMxMzczOTJlMzYzMzJlMzIzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArM/8DAN
BgkqhkiG9w0BAQsFAAOCAQEAgkD/e1wyLCOlIptRlc8ZgbsT82y1AcAeWw1mIUPV
ntZX6Cq2dyTvjppuNMBOd2qJ9Q7oZMQCH2BZMSZrUGZfc/Qzc4TXLl5bdMvCaanX
3Ns3bYklNT5215pUFwO7g+Xpvay0oBwkAT+MaQf1s6BX9sGgiwpDOOaYifw7mUEF
wIhm0KEh6bRrTCKT/TpgTd57IafQI/LIGGwvwsjadMTFfahx5/9WrarriEPiVcEd
rEbXsxlnJO7fIKhUmcFkH0Di1PNDslTU36BlRsuJ2uNxhX6c0InSIwDEDGhioEby
TikR6bp8RYJ2DG/7Vr90ur3blKGInFQ4ZbUbGMspDTPKiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:15 2024 by rpki-client on console-ams.rpki-client.org