Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa
File:                     3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa (raw, json)
Hash identifier:          DmMW4SqUuvcz1h4QpD0hUYvSozkOD+UaC/8NzmcbEeQ=
Subject key identifier:   D2:B8:0B:B7:42:DF:F3:11:1B:CB:23:16:05:84:C8:6A:96:F1:BB:F0
Certificate issuer:       /CN=ADB0B4D4BBEB7416415737F66B839E60AFF89A62
Certificate serial:       68DBBBDA016989053557E3D29DB06B6CD6AB184A
Authority key identifier: AD:B0:B4:D4:BB:EB:74:16:41:57:37:F6:6B:83:9E:60:AF:F8:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa
Signing time:             Tue 05 Mar 2024 17:56:29 +0000
ROA not before:           Tue 05 Mar 2024 17:51:29 +0000
ROA not after:            Tue 04 Mar 2025 17:56:29 +0000
asID:                     272824
IP address blocks:        179.63.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:db:bb:da:01:69:89:05:35:57:e3:d2:9d:b0:6b:6c:d6:ab:18:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB0B4D4BBEB7416415737F66B839E60AFF89A62
        Validity
            Not Before: Mar  5 17:51:29 2024 GMT
            Not After : Mar  4 17:56:29 2025 GMT
        Subject: CN=D2B80BB742DFF3111BCB23160584C86A96F1BBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:4c:fb:ac:82:6f:15:5f:f7:78:61:62:63:
                    28:14:e1:aa:79:f5:00:2b:ff:5d:b5:0c:a2:81:5c:
                    69:f5:65:85:b0:c3:20:13:a4:1b:b6:1f:13:0e:73:
                    3f:d1:e0:45:3e:0e:6a:0b:0f:77:99:ba:01:6d:e1:
                    48:f2:09:76:c8:de:b0:b4:79:ca:3e:ae:14:93:2a:
                    b1:f6:c4:fd:e1:99:93:a3:0b:b1:54:52:f6:80:94:
                    94:6d:40:3a:b2:63:22:18:d6:3a:8f:e0:0e:04:e7:
                    20:47:68:27:e1:d8:4d:94:a1:ab:4e:2c:4f:6a:1e:
                    7c:c2:d1:ec:9c:f6:26:49:fd:33:0b:67:ee:16:e0:
                    b1:87:cc:27:91:0f:fc:9f:12:df:83:5d:62:69:a1:
                    7a:bb:7e:53:ce:45:1d:f8:c9:01:5d:c8:57:f7:88:
                    a1:40:1b:d5:35:99:cf:29:cb:f2:25:3b:03:80:77:
                    11:72:71:4c:dd:ca:de:dc:6b:12:90:ae:48:73:c2:
                    27:7b:11:8b:1f:e1:74:15:e9:49:45:df:a4:f5:ac:
                    9e:63:40:3f:8c:4a:c7:8c:7e:76:f8:50:a0:d9:b7:
                    c3:32:ba:40:91:c5:64:16:a9:c9:49:6c:72:6c:e4:
                    00:86:37:fa:e9:bd:74:c4:ac:a2:02:21:72:e4:32:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:0B:B7:42:DF:F3:11:1B:CB:23:16:05:84:C8:6A:96:F1:BB:F0
            X509v3 Authority Key Identifier:
                keyid:AD:B0:B4:D4:BB:EB:74:16:41:57:37:F6:6B:83:9E:60:AF:F8:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:62:79:a7:42:4e:a7:40:b4:30:88:52:28:c9:54:3a:d9:
         24:f8:b8:75:d8:fa:a4:1e:12:ea:79:e7:23:14:25:cb:97:10:
         c9:5d:52:8d:39:6e:07:37:61:56:49:52:04:9d:1d:7c:56:44:
         cf:d4:46:04:f3:7b:94:31:ff:d7:61:9a:e8:17:1f:a8:3c:04:
         44:42:ff:a6:5b:e3:96:ab:d6:12:69:a1:14:25:5b:50:3c:e7:
         df:47:7a:c1:b9:8e:e0:d1:e8:a1:87:bb:46:32:8a:4b:6d:80:
         bb:53:80:b4:21:53:b6:dc:77:ce:82:f5:bf:8d:9d:ae:de:ae:
         c0:55:a2:62:67:08:65:e0:84:36:fe:72:2f:b4:17:bb:eb:c8:
         e6:07:4a:89:7d:0a:c5:16:8a:a9:7e:48:7a:3e:3a:bf:86:e9:
         fc:11:4e:5d:b6:17:85:97:4e:03:f8:73:bb:86:1e:91:31:e2:
         f5:34:8a:95:a3:d1:27:20:f3:b8:7b:12:2e:3f:6b:24:7d:0a:
         40:45:4a:67:76:1c:05:bc:d0:9f:68:02:c6:b6:db:97:fa:67:
         39:b8:98:96:b5:5b:12:63:69:af:b8:4f:a7:b8:cc:a8:3f:03:
         13:9a:14:e9:89:2b:43:19:34:1a:5d:35:65:74:16:31:4d:55:
         4e:8e:09:f0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaNu72gFpiQU1V+PSnbBrbNarGEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURCMEI0RDRCQkVCNzQxNjQxNTczN0Y2NkI4MzlFNjBB
RkY4OUE2MjAeFw0yNDAzMDUxNzUxMjlaFw0yNTAzMDQxNzU2MjlaMDMxMTAvBgNV
BAMTKEQyQjgwQkI3NDJERkYzMTExQkNCMjMxNjA1ODRDODZBOTZGMUJCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYzEz7rIJvFV/3eGFiYygU4ap5
9QAr/121DKKBXGn1ZYWwwyATpBu2HxMOcz/R4EU+DmoLD3eZugFt4UjyCXbI3rC0
eco+rhSTKrH2xP3hmZOjC7FUUvaAlJRtQDqyYyIY1jqP4A4E5yBHaCfh2E2UoatO
LE9qHnzC0eyc9iZJ/TMLZ+4W4LGHzCeRD/yfEt+DXWJpoXq7flPORR34yQFdyFf3
iKFAG9U1mc8py/IlOwOAdxFycUzdyt7caxKQrkhzwid7EYsf4XQV6UlF36T1rJ5j
QD+MSseMfnb4UKDZt8MyukCRxWQWqclJbHJs5ACGN/rpvXTErKICIXLkMqurAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0rgLt0Lf8xEbyyMWBYTIapbxu/AwHwYDVR0j
BBgwFoAUrbC01LvrdBZBVzf2a4OeYK/4mmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOEEwMkM0MkZBMUQyODY3OUQ3NjVBNEFEOTExMzFEMTNF
MzVGMTdCQkU4MjEzQzdBOEZEN0YzNkU1Njk5NDJDLzAvQURCMEI0RDRCQkVCNzQx
NjQxNTczN0Y2NkI4MzlFNjBBRkY4OUE2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BREIwQjRENEJCRUI3NDE2NDE1
NzM3RjY2QjgzOUU2MEFGRjg5QTYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThBMDJDNDJGQTFEMjg2NzlENzY1QTRBRDkxMTMxRDEzRTM1RjE3QkJF
ODIxM0M3QThGRDdGMzZFNTY5OTQyQy8wLzMxMzczOTJlMzYzMzJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzMjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsz+o
MA0GCSqGSIb3DQEBCwUAA4IBAQCF5GJ5p0JOp0C0MIhSKMlUOtkk+Lh12PqkHhLq
eecjFCXLlxDJXVKNOW4HN2FWSVIEnR18VkTP1EYE83uUMf/XYZroFx+oPAREQv+m
W+OWq9YSaaEUJVtQPOffR3rBuY7g0eihh7tGMopLbYC7U4C0IVO23HfOgvW/jZ2u
3q7AVaJiZwhl4IQ2/nIvtBe768jmB0qJfQrFFoqpfkh6Pjq/hun8EU5dtheFl04D
+HO7hh6RMeL1NIqVo9EnIPO4exIuP2skfQpARUpndhwFvNCfaALGttuX+mc5uJiW
tVsSY2mvuE+nuMyoPwMTmhTpiStDGTQaXTVldBYxTVVOjgnw
-----END CERTIFICATE-----
Generated at Fri Oct 25 13:07:20 2024 by rpki-client on console-fra.rpki-client.org