Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3137392e32342e302e302f31332d3234203d3e2036303537.roa
File:                     3137392e32342e302e302f31332d3234203d3e2036303537.roa (raw, json)
Hash identifier:          7quTA8oODJX0bBQtBDlvMNvOYPKHANi96mStbO+1QU8=
Subject key identifier:   C6:F1:A3:DC:62:0C:83:8F:19:7F:C6:25:3A:8B:1C:F8:F1:A0:B0:AE
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       42C2F036B9F22A12370714EA9197195263C017BC
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3137392e32342e302e302f31332d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:01 +0000
ROA not before:           Tue 05 Mar 2024 18:15:01 +0000
ROA not after:            Tue 04 Mar 2025 18:20:01 +0000
asID:                     6057
IP address blocks:        179.24.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c2:f0:36:b9:f2:2a:12:37:07:14:ea:91:97:19:52:63:c0:17:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:01 2024 GMT
            Not After : Mar  4 18:20:01 2025 GMT
        Subject: CN=C6F1A3DC620C838F197FC6253A8B1CF8F1A0B0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:71:01:fd:4d:d3:59:b0:46:5b:22:02:03:
                    89:ff:53:06:62:eb:4f:7f:52:3f:80:91:32:4b:46:
                    6d:79:52:20:ca:a3:be:ec:62:fa:55:d4:68:bc:85:
                    c4:8c:e2:ba:2f:32:f6:64:07:c1:d9:90:89:21:3b:
                    a0:47:e9:77:53:58:67:c3:a6:95:85:b2:1d:cf:1f:
                    04:8a:5c:82:75:2d:a7:b4:24:bc:95:50:6d:a8:55:
                    9e:3b:9e:47:81:9b:fd:c7:8b:82:76:eb:af:01:cb:
                    d6:15:ba:6f:82:05:f5:e3:ac:f5:a7:5c:54:4c:1b:
                    b6:58:2a:7f:81:d4:95:d5:26:cc:6a:0f:11:70:02:
                    9f:94:c7:59:50:06:9e:2a:ce:55:90:7b:4f:17:2c:
                    31:f8:d6:f0:dd:05:60:ab:3b:1c:ae:4b:30:42:28:
                    c3:f2:0c:67:df:2e:62:1d:c4:8f:b3:ac:0e:f6:46:
                    79:6d:85:dd:eb:36:39:38:75:ab:48:41:84:8e:ff:
                    81:f8:40:9a:05:15:c8:93:92:42:db:f5:3b:15:76:
                    05:05:5f:0c:53:f0:a0:b2:27:b0:1e:0c:2e:86:ed:
                    c9:eb:d9:84:b0:a5:fa:09:d3:b3:70:8b:c1:25:4b:
                    bb:94:ba:7b:3f:b7:f1:15:d7:31:11:7f:ee:f1:cf:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:A3:DC:62:0C:83:8F:19:7F:C6:25:3A:8B:1C:F8:F1:A0:B0:AE
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3137392e32342e302e302f31332d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.24.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         c1:7e:a2:00:ec:8c:cf:20:7b:04:bb:82:d7:9c:4a:a3:8d:a6:
         9b:40:cb:f4:ec:68:0a:b4:2b:ec:73:1a:51:d2:a6:4c:1e:d5:
         df:23:be:c7:81:92:98:91:f5:3b:ba:89:08:08:b1:bb:a7:61:
         a5:5b:67:f4:d6:b6:72:77:23:1a:6e:76:90:3c:7b:3d:ab:7e:
         f7:f0:35:eb:4b:ba:55:93:77:54:d1:08:59:84:2c:a4:6c:87:
         c3:a1:df:97:8b:29:32:37:95:55:be:5c:00:59:cc:02:bf:40:
         99:ec:f0:f4:12:fb:38:c2:18:e7:4d:c5:8a:47:1e:4e:83:4c:
         ea:5c:02:d9:af:63:b4:7c:f9:62:ec:d6:95:09:b8:bc:90:d8:
         5d:aa:67:6f:e8:e7:c2:92:24:40:d5:c2:38:84:38:8e:b7:8f:
         f0:33:0f:db:67:f0:20:28:22:47:c4:53:01:01:70:09:82:2f:
         44:f5:84:72:3f:f8:45:fd:59:b7:28:a7:c8:85:ab:5f:1c:61:
         58:7f:b9:c9:b4:b7:14:c7:88:7e:c3:94:fb:92:91:6b:32:42:
         9b:c1:c7:b3:d0:54:84:1d:fb:55:a3:96:f5:e2:69:b9:a3:ae:
         3f:34:ad:ab:46:6c:fa:e2:f0:8e:5a:9f:54:d0:cc:6c:02:00:
         5a:69:0b:ce
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUQsLwNrnyKhI3BxTqkZcZUmPAF7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3QTEzRDVEQkYyM0FERjE1ODg5MTgwNkE0MTREMTJB
MkJDN0FDRDAeFw0yNDAzMDUxODE1MDFaFw0yNTAzMDQxODIwMDFaMDMxMTAvBgNV
BAMTKEM2RjFBM0RDNjIwQzgzOEYxOTdGQzYyNTNBOEIxQ0Y4RjFBMEIwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOHEB/U3TWbBGWyICA4n/UwZi
609/Uj+AkTJLRm15UiDKo77sYvpV1Gi8hcSM4rovMvZkB8HZkIkhO6BH6XdTWGfD
ppWFsh3PHwSKXIJ1Lae0JLyVUG2oVZ47nkeBm/3Hi4J2668By9YVum+CBfXjrPWn
XFRMG7ZYKn+B1JXVJsxqDxFwAp+Ux1lQBp4qzlWQe08XLDH41vDdBWCrOxyuSzBC
KMPyDGffLmIdxI+zrA72Rnlthd3rNjk4datIQYSO/4H4QJoFFciTkkLb9TsVdgUF
XwxT8KCyJ7AeDC6G7cnr2YSwpfoJ07Nwi8ElS7uUuns/t/EV1zERf+7xz8I7AgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUxvGj3GIMg48Zf8YlOosc+PGgsK4wHwYDVR0j
BBgwFoAUcnoT1dvyOt8ViJGAakFNEqK8es0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0Q1MkRFOUQyQThBNzc0QUQ0NDA2QkQ1NkQ0MTQ2MTM5
NTM3N0RCRUYzMjk2QTc1Nzk1ODJDNjE2QjA2NDhDLzAvNzI3QTEzRDVEQkYyM0FE
RjE1ODg5MTgwNkE0MTREMTJBMkJDN0FDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjdBMTNENURCRjIzQURGMTU4
ODkxODA2QTQxNEQxMkEyQkM3QUNELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNENTJERTlEMkE4QTc3NEFENDQwNkJENTZENDE0NjEzOTUzNzdEQkVG
MzI5NkE3NTc5NTgyQzYxNkIwNjQ4Qy8wLzMxMzczOTJlMzIzNDJlMzAyZTMwMmYz
MTMzMmQzMjM0MjAzZDNlMjAzNjMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDA7MYMA0GCSqGSIb3
DQEBCwUAA4IBAQDBfqIA7IzPIHsEu4LXnEqjjaabQMv07GgKtCvscxpR0qZMHtXf
I77HgZKYkfU7uokICLG7p2GlW2f01rZydyMabnaQPHs9q3738DXrS7pVk3dU0QhZ
hCykbIfDod+XiykyN5VVvlwAWcwCv0CZ7PD0Evs4whjnTcWKRx5Og0zqXALZr2O0
fPli7NaVCbi8kNhdqmdv6OfCkiRA1cI4hDiOt4/wMw/bZ/AgKCJHxFMBAXAJgi9E
9YRyP/hF/Vm3KKfIhatfHGFYf7nJtLcUx4h+w5T7kpFrMkKbwcez0FSEHftVo5b1
4mm5o64/NK2rRmz64vCOWp9U0MxsAgBaaQvO
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org