Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/3137392e34392e3132302e302f32312d3234203d3e203532343737.roa
File:                     3137392e34392e3132302e302f32312d3234203d3e203532343737.roa (raw, json)
Hash identifier:          7SQN1z7HAtHCqUU+4nIMRCsI1xbJeTaF64sGn4TikjQ=
Subject key identifier:   53:B0:86:77:1D:28:01:37:B6:63:81:ED:F9:6A:F6:E9:5E:81:F5:6D
Certificate issuer:       /CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
Certificate serial:       23754C42F970070B1590ED34814DE40B5B2D1E1D
Authority key identifier: 7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/3137392e34392e3132302e302f32312d3234203d3e203532343737.roa
Signing time:             Tue 05 Mar 2024 17:42:50 +0000
ROA not before:           Tue 05 Mar 2024 17:37:50 +0000
ROA not after:            Tue 04 Mar 2025 17:42:50 +0000
asID:                     52477
IP address blocks:        179.49.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:4c:42:f9:70:07:0b:15:90:ed:34:81:4d:e4:0b:5b:2d:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
        Validity
            Not Before: Mar  5 17:37:50 2024 GMT
            Not After : Mar  4 17:42:50 2025 GMT
        Subject: CN=53B086771D280137B66381EDF96AF6E95E81F56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:54:87:82:4f:2e:e1:9e:78:49:68:2a:26:
                    60:03:1a:76:bf:d1:d0:06:28:53:ac:11:b4:5d:0d:
                    2e:2c:cf:a8:be:ac:fd:ad:ab:ef:ad:ff:a9:45:f9:
                    a1:f3:99:3e:02:49:5a:d4:8d:13:50:bd:a2:83:ee:
                    a8:19:e0:ec:38:0f:19:12:1f:ea:ac:8f:af:78:46:
                    6b:50:be:ee:24:64:d0:24:cb:6d:e0:bf:42:6f:5a:
                    d6:f8:1d:06:a5:0b:e2:aa:9b:13:05:23:94:b3:c1:
                    6f:4e:ef:6a:ba:03:22:ab:59:07:b1:26:83:62:00:
                    59:d8:7a:81:95:eb:21:a7:8e:66:1f:92:e1:6b:ad:
                    d1:d3:e9:c8:a1:49:f7:8c:8e:91:d7:39:68:79:41:
                    8c:b6:ab:2f:fb:5c:4b:c0:d9:bb:34:67:62:86:fa:
                    3f:97:01:47:dd:37:48:e1:62:7e:74:bf:16:8b:d1:
                    41:b2:bd:b7:83:2a:0b:59:c1:67:96:18:1a:00:d6:
                    5c:80:9c:c3:57:5a:d3:ff:79:f5:ef:af:20:c5:49:
                    01:4b:ec:b2:3b:04:81:2e:2e:ee:b6:1c:f7:eb:e6:
                    3c:22:89:ce:50:e3:67:7d:f6:42:82:4f:31:8e:47:
                    1b:a7:87:3b:db:16:23:b2:98:14:a7:89:da:61:8d:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B0:86:77:1D:28:01:37:B6:63:81:ED:F9:6A:F6:E9:5E:81:F5:6D
            X509v3 Authority Key Identifier:
                keyid:7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/3137392e34392e3132302e302f32312d3234203d3e203532343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:2d:b6:10:76:7a:15:ff:47:da:dc:13:53:1d:b5:70:91:71:
         78:96:a7:60:98:89:41:e7:53:be:a6:75:8e:0c:4c:f9:cd:4d:
         aa:7d:ac:75:fe:02:6e:c5:d3:b7:e9:5c:95:dc:26:c1:e3:52:
         39:74:aa:01:54:d7:c8:e6:86:de:a5:16:ee:b8:8d:3c:fd:06:
         b4:e0:f0:b3:9f:96:2e:88:58:52:47:4c:0c:bf:65:34:35:72:
         2b:d0:eb:c0:f8:1e:e5:c6:5e:2b:6f:c4:a1:93:a0:20:1f:23:
         88:91:f4:37:39:66:c7:7d:11:87:93:3f:bf:3b:79:3c:a6:6f:
         13:f4:35:02:26:f3:5d:a6:a5:c2:0f:bb:df:8a:51:ed:83:7c:
         e6:fe:6e:1e:15:d9:bc:85:cb:ad:7e:bd:1e:56:40:3b:7f:4d:
         94:e3:0e:59:36:b3:2d:ee:3a:dd:47:36:f2:ba:fc:f8:79:bf:
         34:fd:7e:37:98:ea:0c:65:9b:ca:52:3c:c0:6b:9d:1a:c1:31:
         31:db:cd:8a:77:8b:39:1c:6b:a7:b6:44:ce:14:23:b2:c0:3d:
         94:79:d7:e6:ef:68:d9:ac:9e:59:31:3b:99:0d:b9:cf:88:47:
         a4:a3:5d:89:a1:d1:14:32:a2:ce:c1:84:60:ef:63:af:8e:c2:
         a9:ff:83:b4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI3VMQvlwBwsVkO00gU3kC1stHh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyRUFEMzhDN0E5OTdBREQ0NTEyNkU4NEQzNkM0MDU3
QzU2MUMwNjAeFw0yNDAzMDUxNzM3NTBaFw0yNTAzMDQxNzQyNTBaMDMxMTAvBgNV
BAMTKDUzQjA4Njc3MUQyODAxMzdCNjYzODFFREY5NkFGNkU5NUU4MUY1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUSFSHgk8u4Z54SWgqJmADGna/
0dAGKFOsEbRdDS4sz6i+rP2tq++t/6lF+aHzmT4CSVrUjRNQvaKD7qgZ4Ow4DxkS
H+qsj694RmtQvu4kZNAky23gv0JvWtb4HQalC+KqmxMFI5SzwW9O72q6AyKrWQex
JoNiAFnYeoGV6yGnjmYfkuFrrdHT6cihSfeMjpHXOWh5QYy2qy/7XEvA2bs0Z2KG
+j+XAUfdN0jhYn50vxaL0UGyvbeDKgtZwWeWGBoA1lyAnMNXWtP/efXvryDFSQFL
7LI7BIEuLu62HPfr5jwiic5Q42d99kKCTzGORxunhzvbFiOymBSnidphjae3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU7CGdx0oATe2Y4Ht+Wr26V6B9W0wHwYDVR0j
BBgwFoAUey6tOMepl63UUSboTTbEBXxWHAYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkM1RTgzNjExMjcyRUMyNUVDMzc0NzBGNUI0ODk5ODQ4
QjAyNENBQzQ2Q0Q4OTM4RjEzNjQ5ODE2MDdERUY0LzAvN0IyRUFEMzhDN0E5OTdB
REQ0NTEyNkU4NEQzNkM0MDU3QzU2MUMwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjJFQUQzOEM3QTk5N0FERDQ1
MTI2RTg0RDM2QzQwNTdDNTYxQzA2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZDNUU4MzYxMTI3MkVDMjVFQzM3NDcwRjVCNDg5OTg0OEIwMjRDQUM0
NkNEODkzOEYxMzY0OTgxNjA3REVGNC8wLzMxMzczOTJlMzQzOTJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM0MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7MxeDAN
BgkqhkiG9w0BAQsFAAOCAQEAQy22EHZ6Ff9H2twTUx21cJFxeJanYJiJQedTvqZ1
jgxM+c1Nqn2sdf4CbsXTt+lcldwmweNSOXSqAVTXyOaG3qUW7riNPP0GtODws5+W
LohYUkdMDL9lNDVyK9DrwPge5cZeK2/EoZOgIB8jiJH0Nzlmx30Rh5M/vzt5PKZv
E/Q1AibzXaalwg+734pR7YN85v5uHhXZvIXLrX69HlZAO39NlOMOWTazLe463Uc2
8rr8+Hm/NP1+N5jqDGWbylI8wGudGsExMdvNineLORxrp7ZEzhQjssA9lHnX5u9o
2ayeWTE7mQ25z4hHpKNdiaHRFDKizsGEYO9jr47Cqf+DtA==
-----END CERTIFICATE-----
Generated at Tue May 7 21:35:36 2024 by rpki-client on console-ams.rpki-client.org