Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32312e3132382f32362d3236203d3e203635313034.roa
File:                     3137392e302e32312e3132382f32362d3236203d3e203635313034.roa (raw, json)
Hash identifier:          fMCNAkpCioYkXFyBmPns2N5vQeK0anOSAv37w7fDxIg=
Subject key identifier:   8D:E8:41:67:E8:A7:58:BD:C5:3C:9C:6B:EC:14:65:1D:9A:3B:82:74
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       56A14490A0333021A73AD2F2938A84A310156CB4
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32312e3132382f32362d3236203d3e203635313034.roa
Signing time:             Tue 05 Mar 2024 18:05:18 +0000
ROA not before:           Tue 05 Mar 2024 18:00:18 +0000
ROA not after:            Tue 04 Mar 2025 18:05:18 +0000
asID:                     65104
IP address blocks:        179.0.21.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a1:44:90:a0:33:30:21:a7:3a:d2:f2:93:8a:84:a3:10:15:6c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Mar  5 18:00:18 2024 GMT
            Not After : Mar  4 18:05:18 2025 GMT
        Subject: CN=8DE84167E8A758BDC53C9C6BEC14651D9A3B8274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:fc:e5:1e:fa:66:5e:18:7d:5b:17:c8:28:
                    f8:1b:e1:7a:a8:23:c0:7c:57:99:5c:e3:45:0a:1b:
                    32:ab:35:e5:7d:2d:73:1e:e3:60:5c:80:94:8f:3c:
                    d0:ac:1c:ae:89:43:7d:95:cf:bc:ae:0e:f4:9b:9b:
                    95:b0:eb:34:55:e8:74:91:bd:38:47:b0:8c:d8:cb:
                    7d:32:8b:b2:2c:ef:32:bb:08:f4:c0:fd:04:66:c2:
                    11:a7:cd:97:a3:f1:3d:05:9f:93:44:9c:40:11:14:
                    90:08:f1:77:42:71:22:d2:99:bb:37:4c:20:dd:33:
                    e9:9a:ab:41:f2:48:c7:bd:c2:7d:8c:48:af:55:53:
                    ec:4b:71:12:cc:d3:0b:09:de:ea:49:9f:42:15:e5:
                    d1:c9:1c:e0:79:1d:be:9f:7f:0a:74:c3:d4:db:4a:
                    df:10:86:07:69:e5:bb:fc:33:09:59:b6:32:45:0c:
                    47:a5:c6:e3:e2:fe:21:52:21:d7:b2:e7:c8:b6:19:
                    73:b5:96:1d:10:28:86:33:ed:8f:fa:7a:41:13:b5:
                    1f:70:c0:14:17:7d:69:ae:4a:c3:be:a4:de:a8:c2:
                    76:52:26:4d:30:f9:61:92:ed:ba:97:89:0e:f7:a9:
                    43:e3:43:43:92:19:98:4f:cd:0e:30:e1:bf:19:6c:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E8:41:67:E8:A7:58:BD:C5:3C:9C:6B:EC:14:65:1D:9A:3B:82:74
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32312e3132382f32362d3236203d3e203635313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.21.128/26

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:0e:32:8a:0d:b9:0a:3e:e6:b3:58:55:e8:5e:1a:35:dc:
         b2:26:3d:10:4d:cf:21:8a:f9:6f:5b:3e:13:7a:e7:b8:30:83:
         1c:83:91:e3:03:e5:82:aa:c0:98:91:7d:2a:b3:2d:8c:92:f4:
         47:d3:e5:d4:f3:26:0f:c9:90:a9:62:11:d5:90:d5:51:2f:05:
         a4:b9:50:e2:6f:e2:76:87:fe:ce:ba:4f:d4:ff:d1:90:74:b4:
         29:41:7e:6d:23:be:e4:30:5a:23:ac:45:a4:a7:96:aa:ea:bf:
         33:95:49:67:cb:f6:b1:7f:6a:37:e1:6e:db:fd:b7:71:ee:a4:
         84:7d:47:51:d8:c7:2d:38:f3:09:78:fc:29:c9:39:44:7d:ac:
         12:8b:05:cd:4d:0c:49:3b:d6:05:86:d5:03:f5:70:87:b9:7a:
         fb:c4:bb:74:1c:73:d7:bf:f6:2d:e9:8e:35:3e:e0:da:38:4c:
         40:7d:75:4d:1d:d5:50:fb:de:f3:99:32:2c:be:3d:27:88:b1:
         65:65:fa:e7:d5:6e:89:41:ad:04:72:c3:01:fa:98:14:8e:14:
         5b:51:06:61:ae:67:6b:f1:36:8b:58:a1:fa:a7:49:d2:79:6e:
         49:98:22:d5:65:6f:1a:08:ec:8d:ce:2d:b6:03:56:67:98:b5:
         02:ce:31:eb
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVqFEkKAzMCGnOtLyk4qEoxAVbLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxRDU4OEE4NkY4N0IyMjRDOUNEQUVBRjlDOTZDNjU1
NUU4MDM4RTAeFw0yNDAzMDUxODAwMThaFw0yNTAzMDQxODA1MThaMDMxMTAvBgNV
BAMTKDhERTg0MTY3RThBNzU4QkRDNTNDOUM2QkVDMTQ2NTFEOUEzQjgyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8fzlHvpmXhh9WxfIKPgb4Xqo
I8B8V5lc40UKGzKrNeV9LXMe42BcgJSPPNCsHK6JQ32Vz7yuDvSbm5Ww6zRV6HSR
vThHsIzYy30yi7Is7zK7CPTA/QRmwhGnzZej8T0Fn5NEnEARFJAI8XdCcSLSmbs3
TCDdM+maq0HySMe9wn2MSK9VU+xLcRLM0wsJ3upJn0IV5dHJHOB5Hb6ffwp0w9Tb
St8Qhgdp5bv8MwlZtjJFDEelxuPi/iFSIdey58i2GXO1lh0QKIYz7Y/6ekETtR9w
wBQXfWmuSsO+pN6ownZSJk0w+WGS7bqXiQ73qUPjQ0OSGZhPzQ4w4b8ZbKWXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjehBZ+inWL3FPJxr7BRlHZo7gnQwHwYDVR0j
BBgwFoAUmR1Yiob4eyJMnNrq+clsZVXoA44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTFDOTcyMjM5MUI5MzRFNThCNzg1RTdDQjQzQ0U0QjNG
MzU1NjY4NkQzOTZGQkE2MUZFMDZFQzRDQ0QxRTRDLzAvOTkxRDU4OEE4NkY4N0Iy
MjRDOUNEQUVBRjlDOTZDNjU1NUU4MDM4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTFENTg4QTg2Rjg3QjIyNEM5
Q0RBRUFGOUM5NkM2NTU1RTgwMzhFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExQzk3MjIzOTFCOTM0RTU4Qjc4NUU3Q0I0M0NFNEIzRjM1NTY2ODZE
Mzk2RkJBNjFGRTA2RUM0Q0NEMUU0Qy8wLzMxMzczOTJlMzAyZTMyMzEyZTMxMzIz
ODJmMzIzNjJkMzIzNjIwM2QzZTIwMzYzNTMxMzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBrMAFYAw
DQYJKoZIhvcNAQELBQADggEBALg4DjKKDbkKPuazWFXoXho13LImPRBNzyGK+W9b
PhN657gwgxyDkeMD5YKqwJiRfSqzLYyS9EfT5dTzJg/JkKliEdWQ1VEvBaS5UOJv
4naH/s66T9T/0ZB0tClBfm0jvuQwWiOsRaSnlqrqvzOVSWfL9rF/ajfhbtv9t3Hu
pIR9R1HYxy048wl4/CnJOUR9rBKLBc1NDEk71gWG1QP1cIe5evvEu3Qcc9e/9i3p
jjU+4No4TEB9dU0d1VD73vOZMiy+PSeIsWVl+ufVbolBrQRywwH6mBSOFFtRBmGu
Z2vxNotYofqnSdJ5bkmYItVlbxoI7I3OLbYDVmeYtQLOMes=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org