Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa
File:                     3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          dl4rAHV4TGfNfInBZZgMK9N3VQONekX96VLGNwN+vtY=
Subject key identifier:   D8:79:71:3E:EB:67:9A:F1:B3:BD:A0:D1:14:EB:24:6C:E9:C9:E4:1D
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       6D54B3F95B9A99E3FE233A50B7B5724FADBEC60A
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 05 Mar 2024 18:02:16 +0000
ROA not before:           Tue 05 Mar 2024 17:57:16 +0000
ROA not after:            Tue 04 Mar 2025 18:02:16 +0000
asID:                     263686
IP address blocks:        179.63.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:54:b3:f9:5b:9a:99:e3:fe:23:3a:50:b7:b5:72:4f:ad:be:c6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Mar  5 17:57:16 2024 GMT
            Not After : Mar  4 18:02:16 2025 GMT
        Subject: CN=D879713EEB679AF1B3BDA0D114EB246CE9C9E41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:1f:23:c3:40:63:26:03:a9:a2:bb:7b:c5:
                    fd:38:67:e7:21:17:d9:7e:5b:cb:8d:dd:c5:2d:7f:
                    a2:ca:f8:65:f2:f4:f6:a5:d5:72:57:a7:d0:3b:1b:
                    42:6b:08:24:15:c4:66:a6:78:5d:60:97:44:03:3c:
                    a0:09:2b:b7:7f:ba:16:00:70:ff:14:d2:95:9d:56:
                    6f:c4:d5:0b:8c:bb:65:59:23:a5:89:4a:08:d1:2a:
                    d5:c2:0c:2d:d1:31:68:e1:f1:5a:4f:f4:0d:82:95:
                    57:0e:95:e4:a0:04:a3:23:7c:15:4e:36:f9:b2:65:
                    59:13:99:fb:56:9f:2f:09:10:50:e4:2d:0a:cb:2e:
                    80:b2:25:8e:8d:8a:a8:99:90:61:2c:e3:a2:5d:cc:
                    1d:bf:cd:71:ee:77:ed:5c:68:56:2a:69:70:7f:1a:
                    83:d7:4a:0f:38:0f:4d:06:62:af:55:59:29:3d:9c:
                    4e:ba:dd:f0:a2:23:63:50:26:8f:a7:68:5d:27:ca:
                    39:1b:90:d3:1d:cf:ee:00:d3:61:25:fe:8e:15:f2:
                    e8:14:37:dc:9d:bc:70:b8:02:88:44:ba:66:f2:20:
                    9d:30:39:03:d9:86:19:21:5c:bd:e2:85:4c:d3:b0:
                    19:03:b5:8f:be:53:4c:71:e9:dc:d9:fc:6c:f8:cb:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:79:71:3E:EB:67:9A:F1:B3:BD:A0:D1:14:EB:24:6C:E9:C9:E4:1D
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:31:19:94:ff:42:ae:5b:9b:0d:d4:c8:82:de:37:0e:6e:
         d5:e9:fc:9f:fd:9a:1c:96:c1:12:c5:14:53:26:19:e1:94:21:
         ab:00:15:44:35:24:3c:2b:f6:e7:b8:17:11:55:b1:e5:6f:d8:
         19:c5:e3:ea:8c:3f:c8:0d:de:29:99:9f:7c:df:b7:25:0d:f4:
         cb:d5:a7:08:7a:95:45:72:9f:58:aa:10:66:71:87:eb:32:9f:
         2d:8f:21:56:e5:28:df:9e:28:7d:20:d5:95:be:07:e0:b0:1a:
         2b:1c:80:73:a4:10:3f:ab:88:93:a5:ca:2e:7f:c3:76:94:96:
         6b:f8:45:33:98:30:12:0a:f2:a1:cc:cb:13:af:17:df:d0:67:
         45:88:8c:e3:d7:e4:70:69:a4:3f:95:03:59:e4:35:5e:f9:0e:
         b1:90:fe:84:e4:c7:4b:96:d1:3d:ee:dd:37:f6:85:fc:b1:9e:
         ec:18:48:92:0c:d8:21:74:42:6a:6b:31:b6:08:a3:5e:66:09:
         dd:b1:1a:82:ff:56:e2:18:43:6f:26:02:ba:c5:da:58:66:c8:
         16:4b:f3:e0:e7:af:06:b9:8e:cc:47:8f:d4:a0:e2:ab:49:86:
         c1:98:b4:ec:51:a6:4c:99:00:c3:d9:60:d7:9a:ec:5f:dd:0b:
         82:0e:7a:28
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbVSz+VuameP+IzpQt7VyT62+xgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUxNkMyRkUzRjNFNEI4Qzg2NDFCNUJEQzZCRDY0ODNE
OTFEMjU2ODAeFw0yNDAzMDUxNzU3MTZaFw0yNTAzMDQxODAyMTZaMDMxMTAvBgNV
BAMTKEQ4Nzk3MTNFRUI2NzlBRjFCM0JEQTBEMTE0RUIyNDZDRTlDOUU0MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SR8jw0BjJgOport7xf04Z+ch
F9l+W8uN3cUtf6LK+GXy9Pal1XJXp9A7G0JrCCQVxGameF1gl0QDPKAJK7d/uhYA
cP8U0pWdVm/E1QuMu2VZI6WJSgjRKtXCDC3RMWjh8VpP9A2ClVcOleSgBKMjfBVO
NvmyZVkTmftWny8JEFDkLQrLLoCyJY6NiqiZkGEs46JdzB2/zXHud+1caFYqaXB/
GoPXSg84D00GYq9VWSk9nE663fCiI2NQJo+naF0nyjkbkNMdz+4A02El/o4V8ugU
N9ydvHC4AohEumbyIJ0wOQPZhhkhXL3ihUzTsBkDtY++U0xx6dzZ/Gz4yzjtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2HlxPutnmvGzvaDRFOskbOnJ5B0wHwYDVR0j
BBgwFoAUFRbC/j8+S4yGQbW9xr1kg9kdJWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QUIzNDBCMDg3MkEwNzNGQjM5RUFDMzJBMTFERDA0OUFE
QTMzQTI2QTdEMTJCRTQ3MEEyNDUxMDA1MDlDMkEyLzAvMTUxNkMyRkUzRjNFNEI4
Qzg2NDFCNUJEQzZCRDY0ODNEOTFEMjU2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNTE2QzJGRTNGM0U0QjhDODY0
MUI1QkRDNkJENjQ4M0Q5MUQyNTY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUFCMzQwQjA4NzJBMDczRkIzOUVBQzMyQTExREQwNDlBREEzM0EyNkE3
RDEyQkU0NzBBMjQ1MTAwNTA5QzJBMi8wLzMxMzczOTJlMzYzMzJlMzIzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsz/8
MA0GCSqGSIb3DQEBCwUAA4IBAQBO9zEZlP9CrlubDdTIgt43Dm7V6fyf/ZoclsES
xRRTJhnhlCGrABVENSQ8K/bnuBcRVbHlb9gZxePqjD/IDd4pmZ9837clDfTL1acI
epVFcp9YqhBmcYfrMp8tjyFW5Sjfnih9INWVvgfgsBorHIBzpBA/q4iTpcouf8N2
lJZr+EUzmDASCvKhzMsTrxff0GdFiIzj1+RwaaQ/lQNZ5DVe+Q6xkP6E5MdLltE9
7t039oX8sZ7sGEiSDNghdEJqazG2CKNeZgndsRqC/1biGENvJgK6xdpYZsgWS/Pg
568GuY7MR4/UoOKrSYbBmLTsUaZMmQDD2WDXmuxf3QuCDnoo
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org