Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32322d3330203d3e203532343730.roa
File:                     3137392e302e32302e302f32322d3330203d3e203532343730.roa (raw, json)
Hash identifier:          8hA1lDB4dRc0yTiD4X8h7QX3FRbAMAg3+ixA3++dhXw=
Subject key identifier:   A2:6E:AE:8C:14:FE:19:E8:02:89:3C:0A:6F:CB:8A:22:92:83:82:87
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       5CE23C2E55FA3D00347690FAFA5A2D6DEE3CAC7C
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32322d3330203d3e203532343730.roa
Signing time:             Tue 05 Mar 2024 18:05:18 +0000
ROA not before:           Tue 05 Mar 2024 18:00:18 +0000
ROA not after:            Tue 04 Mar 2025 18:05:18 +0000
asID:                     52470
IP address blocks:        179.0.20.0/22 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:3c:2e:55:fa:3d:00:34:76:90:fa:fa:5a:2d:6d:ee:3c:ac:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Mar  5 18:00:18 2024 GMT
            Not After : Mar  4 18:05:18 2025 GMT
        Subject: CN=A26EAE8C14FE19E802893C0A6FCB8A2292838287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:fe:fe:44:a8:b1:0d:81:ab:33:16:3a:95:
                    e9:65:22:05:95:6d:d2:8d:a9:61:c8:46:72:82:7c:
                    7d:dc:a1:52:76:ed:9a:a2:25:2a:de:25:9e:02:1f:
                    f7:4e:12:c2:ae:a2:e5:5d:5d:6a:1c:b6:04:3a:44:
                    d8:5c:e0:49:26:17:9a:65:c6:e0:c4:e7:da:a5:ab:
                    df:8a:87:45:fd:3f:2c:64:94:53:d1:6e:da:36:70:
                    a5:30:ba:3a:5a:dc:39:87:da:87:1e:79:de:86:4e:
                    38:12:9c:f0:62:6d:5e:f1:bd:9e:36:9a:0c:37:f2:
                    73:28:db:52:43:8d:4b:56:6a:b2:5e:30:1a:e0:43:
                    4d:a2:e2:26:d8:70:55:54:2d:2e:77:29:ba:a6:b8:
                    b3:c7:28:b3:76:3f:30:f3:9f:1e:63:a9:76:f7:d5:
                    88:f3:ea:a6:06:9d:6b:ba:53:96:e8:c6:76:6d:14:
                    2a:f8:45:10:18:aa:20:a1:a1:e0:7a:93:50:3b:cf:
                    7b:b2:90:59:cb:d9:ea:42:fb:53:b1:40:d3:2d:20:
                    b9:d6:be:ee:a4:e8:73:2b:16:94:82:f5:e0:f8:c8:
                    1d:04:ee:07:64:e7:24:d2:de:39:2b:77:46:37:cc:
                    0d:51:7d:81:19:c4:0a:e0:71:1c:0f:fb:d3:49:a8:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6E:AE:8C:14:FE:19:E8:02:89:3C:0A:6F:CB:8A:22:92:83:82:87
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32322d3330203d3e203532343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:1a:bc:a5:4f:d1:2c:3a:11:3f:73:94:07:c4:72:19:47:
         c2:91:75:98:e3:9f:68:8c:a2:82:bb:26:75:be:7b:67:e0:84:
         f1:2f:02:84:7a:92:fa:b4:e3:53:27:11:78:02:76:45:5d:0d:
         1b:d9:af:d6:d5:b0:5e:5c:f6:74:47:1c:1d:5f:c9:77:b1:6b:
         c3:c1:dd:c4:6a:bb:2a:80:2c:ba:87:90:1f:80:18:e1:c6:30:
         d7:3c:4f:e7:59:59:2e:b3:bd:5a:bd:7d:c5:b8:a0:e4:aa:c1:
         21:2e:9a:a1:33:11:f1:8f:90:c8:c3:93:94:d8:9a:da:cd:f3:
         32:0e:ea:e6:47:4a:00:d7:f6:0e:c8:e7:78:b5:f2:29:15:37:
         f8:92:74:4f:cc:74:c5:d1:23:5f:8f:b3:e3:8a:26:6d:a1:b4:
         60:9a:89:b4:3d:f2:d7:be:98:26:64:9d:98:f5:7b:3a:ad:ca:
         c5:2d:08:a9:c0:76:c6:ba:05:41:5d:7f:c7:1b:2a:49:c7:3c:
         04:a4:af:89:59:51:27:ba:c1:fe:85:86:8e:51:38:c8:9f:ad:
         39:cf:e2:dd:c1:01:08:91:2b:97:85:ce:33:84:81:fb:36:38:
         fe:6f:62:f6:50:eb:94:90:5d:50:45:e1:95:f3:41:a1:71:fe:
         9c:f2:a4:70
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUXOI8LlX6PQA0dpD6+lotbe48rHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxRDU4OEE4NkY4N0IyMjRDOUNEQUVBRjlDOTZDNjU1
NUU4MDM4RTAeFw0yNDAzMDUxODAwMThaFw0yNTAzMDQxODA1MThaMDMxMTAvBgNV
BAMTKEEyNkVBRThDMTRGRTE5RTgwMjg5M0MwQTZGQ0I4QTIyOTI4MzgyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mf7+RKixDYGrMxY6lellIgWV
bdKNqWHIRnKCfH3coVJ27ZqiJSreJZ4CH/dOEsKuouVdXWoctgQ6RNhc4EkmF5pl
xuDE59qlq9+Kh0X9PyxklFPRbto2cKUwujpa3DmH2oceed6GTjgSnPBibV7xvZ42
mgw38nMo21JDjUtWarJeMBrgQ02i4ibYcFVULS53KbqmuLPHKLN2PzDznx5jqXb3
1Yjz6qYGnWu6U5boxnZtFCr4RRAYqiChoeB6k1A7z3uykFnL2epC+1OxQNMtILnW
vu6k6HMrFpSC9eD4yB0E7gdk5yTS3jkrd0Y3zA1RfYEZxArgcRwP+9NJqNn7AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUom6ujBT+GegCiTwKb8uKIpKDgocwHwYDVR0j
BBgwFoAUmR1Yiob4eyJMnNrq+clsZVXoA44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTFDOTcyMjM5MUI5MzRFNThCNzg1RTdDQjQzQ0U0QjNG
MzU1NjY4NkQzOTZGQkE2MUZFMDZFQzRDQ0QxRTRDLzAvOTkxRDU4OEE4NkY4N0Iy
MjRDOUNEQUVBRjlDOTZDNjU1NUU4MDM4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTFENTg4QTg2Rjg3QjIyNEM5
Q0RBRUFGOUM5NkM2NTU1RTgwMzhFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExQzk3MjIzOTFCOTM0RTU4Qjc4NUU3Q0I0M0NFNEIzRjM1NTY2ODZE
Mzk2RkJBNjFGRTA2RUM0Q0NEMUU0Qy8wLzMxMzczOTJlMzAyZTMyMzAyZTMwMmYz
MjMyMmQzMzMwMjAzZDNlMjAzNTMyMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCswAUMA0GCSqG
SIb3DQEBCwUAA4IBAQBw1hq8pU/RLDoRP3OUB8RyGUfCkXWY459ojKKCuyZ1vntn
4ITxLwKEepL6tONTJxF4AnZFXQ0b2a/W1bBeXPZ0RxwdX8l3sWvDwd3EarsqgCy6
h5AfgBjhxjDXPE/nWVkus71avX3FuKDkqsEhLpqhMxHxj5DIw5OU2JrazfMyDurm
R0oA1/YOyOd4tfIpFTf4knRPzHTF0SNfj7PjiiZtobRgmom0PfLXvpgmZJ2Y9Xs6
rcrFLQipwHbGugVBXX/HGypJxzwEpK+JWVEnusH+hYaOUTjIn605z+LdwQEIkSuX
hc4zhIH7Njj+b2L2UOuUkF1QReGV80Ghcf6c8qRw
-----END CERTIFICATE-----
Generated at Thu May 2 20:02:24 2024 by rpki-client on console-ams.rpki-client.org