Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3234203d3e20323732303231.roa
File:                     3137392e36332e382e302f32322d3234203d3e20323732303231.roa (raw, json)
Hash identifier:          Y6IAmKsfYDapfsWsfRCqP/642Y4uL0Aqhv8MwJZDkpY=
Subject key identifier:   EC:43:1E:76:36:3C:0E:F6:BA:23:FE:E6:81:EA:1B:CE:F5:E0:2B:C0
Certificate issuer:       /CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
Certificate serial:       16517EFA96FBB2CC6980B97E8F625143293B9359
Authority key identifier: 15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3234203d3e20323732303231.roa
Signing time:             Tue 05 Mar 2024 18:04:34 +0000
ROA not before:           Tue 05 Mar 2024 17:59:34 +0000
ROA not after:            Tue 04 Mar 2025 18:04:34 +0000
asID:                     272021
IP address blocks:        179.63.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:51:7e:fa:96:fb:b2:cc:69:80:b9:7e:8f:62:51:43:29:3b:93:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
        Validity
            Not Before: Mar  5 17:59:34 2024 GMT
            Not After : Mar  4 18:04:34 2025 GMT
        Subject: CN=EC431E76363C0EF6BA23FEE681EA1BCEF5E02BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:01:18:e4:e3:24:ae:75:41:5a:6c:b7:29:
                    22:aa:1c:70:d8:ed:58:dc:56:a5:4d:ed:f5:73:53:
                    f6:92:9e:b4:49:57:90:ac:72:5c:fe:5c:ba:de:9d:
                    31:bd:d1:30:73:e2:50:d5:5e:bf:f9:31:e5:88:b8:
                    70:64:f3:70:9c:85:4e:1e:09:1c:b0:59:b2:a3:0b:
                    b6:40:a1:9f:c6:f7:b2:ce:22:c4:ab:a9:0b:27:68:
                    30:33:73:36:55:7c:33:a5:81:1d:43:fd:92:8d:89:
                    a7:19:6d:55:3c:cf:69:ca:09:a0:de:bb:4a:60:a8:
                    74:4d:ac:b6:41:c5:2f:42:70:15:f7:8d:b1:8b:6a:
                    ee:08:cc:bc:e1:a1:cb:75:c6:6b:f6:bc:7e:f3:d1:
                    c1:b5:b7:f4:4c:e3:a5:2d:7c:51:16:c2:6b:88:9a:
                    d9:62:1a:1a:34:1f:66:74:b2:a0:b2:97:a3:19:71:
                    ab:ba:93:c6:f4:e7:2f:a7:ee:a6:c8:56:b7:37:07:
                    b9:ef:e3:0b:6c:54:85:47:3d:30:9f:9a:56:93:36:
                    f4:5f:b6:19:60:15:9d:2a:85:d1:b9:9d:a6:98:b0:
                    94:2c:eb:cc:d7:18:29:92:f8:c5:9b:52:de:26:16:
                    ff:0c:13:ee:ba:d8:fc:2e:15:cd:6c:25:b3:ca:17:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:43:1E:76:36:3C:0E:F6:BA:23:FE:E6:81:EA:1B:CE:F5:E0:2B:C0
            X509v3 Authority Key Identifier:
                keyid:15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3234203d3e20323732303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:45:20:63:41:6f:4f:c9:fb:7e:b8:5f:ce:5e:d6:bc:98:86:
         36:11:01:1a:4c:85:8d:32:60:16:f8:9c:47:fd:ca:f3:34:c7:
         62:e8:77:83:19:5c:e5:6e:63:a8:a0:b6:0c:d7:02:8f:15:9d:
         7a:82:03:b7:84:ff:65:5f:8d:a1:0a:2e:0c:76:75:17:63:fc:
         c7:aa:a1:8a:25:10:62:d1:75:01:52:0e:2c:45:5a:0d:e3:ff:
         83:62:d4:db:c2:68:ab:3a:52:19:49:c3:2d:ea:d1:81:1d:58:
         20:b5:88:82:74:5a:13:50:f1:e7:94:2c:99:9a:91:dd:e2:46:
         ac:a8:1a:be:f4:e6:19:74:fa:82:49:b9:f9:de:ae:76:6a:f4:
         3e:d0:b0:25:6d:9d:03:7b:ef:d6:8e:c4:19:1b:aa:8d:5d:9f:
         20:51:60:df:47:e7:f8:ee:75:f1:7e:88:ab:5b:c6:70:79:ab:
         ef:5c:a8:d7:97:0d:94:2a:ff:34:0b:98:d4:fd:68:22:a0:58:
         15:c3:a7:4e:f7:c5:15:9f:85:0b:18:2b:de:e5:01:24:78:76:
         93:3b:02:f7:d1:fc:18:e6:82:17:9d:95:f5:eb:1e:a4:4d:24:
         63:de:82:d3:8d:e4:89:80:b4:f7:8b:2f:06:ea:26:38:03:8c:
         70:14:bd:e0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFlF++pb7ssxpgLl+j2JRQyk7k1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBRUZCNDdEREIwNzc1NTFCMkJDNkYyMjZBMDUxODU1
RTBBMEY2RDAeFw0yNDAzMDUxNzU5MzRaFw0yNTAzMDQxODA0MzRaMDMxMTAvBgNV
BAMTKEVDNDMxRTc2MzYzQzBFRjZCQTIzRkVFNjgxRUExQkNFRjVFMDJCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcYQEY5OMkrnVBWmy3KSKqHHDY
7VjcVqVN7fVzU/aSnrRJV5Csclz+XLrenTG90TBz4lDVXr/5MeWIuHBk83CchU4e
CRywWbKjC7ZAoZ/G97LOIsSrqQsnaDAzczZVfDOlgR1D/ZKNiacZbVU8z2nKCaDe
u0pgqHRNrLZBxS9CcBX3jbGLau4IzLzhoct1xmv2vH7z0cG1t/RM46UtfFEWwmuI
mtliGho0H2Z0sqCyl6MZcau6k8b05y+n7qbIVrc3B7nv4wtsVIVHPTCfmlaTNvRf
thlgFZ0qhdG5naaYsJQs68zXGCmS+MWbUt4mFv8ME+662PwuFc1sJbPKF2fVAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU7EMedjY8Dva6I/7mgeobzvXgK8AwHwYDVR0j
BBgwFoAUFa77R92wd1UbK8byJqBRhV4KD20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODc4RENGQ0ZDMzMyNjBDMEJEOEEyQTY4M0Y5RjY3Njky
RTIxRkQ0Rjc0NDY1MkRGRDZCQUI2NTFCRDJFNzgyLzAvMTVBRUZCNDdEREIwNzc1
NTFCMkJDNkYyMjZBMDUxODU1RTBBMEY2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUFFRkI0N0REQjA3NzU1MUIy
QkM2RjIyNkEwNTE4NTVFMEEwRjZELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg3OERDRkNGQzMzMjYwQzBCRDhBMkE2ODNGOUY2NzY5MkUyMUZENEY3
NDQ2NTJERkQ2QkFCNjUxQkQyRTc4Mi8wLzMxMzczOTJlMzYzMzJlMzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM3MzIzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKzPwgwDQYJ
KoZIhvcNAQELBQADggEBADdFIGNBb0/J+364X85e1ryYhjYRARpMhY0yYBb4nEf9
yvM0x2Lod4MZXOVuY6igtgzXAo8VnXqCA7eE/2VfjaEKLgx2dRdj/MeqoYolEGLR
dQFSDixFWg3j/4Ni1NvCaKs6UhlJwy3q0YEdWCC1iIJ0WhNQ8eeULJmakd3iRqyo
Gr705hl0+oJJufnernZq9D7QsCVtnQN779aOxBkbqo1dnyBRYN9H5/judfF+iKtb
xnB5q+9cqNeXDZQq/zQLmNT9aCKgWBXDp073xRWfhQsYK97lASR4dpM7AvfR/Bjm
ghedlfXrHqRNJGPegtON5ImAtPeLLwbqJjgDjHAUveA=
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org