Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135352e302f32342d3234203d3e203532343934.roa
File:                     3137392e302e3135352e302f32342d3234203d3e203532343934.roa (raw, json)
Hash identifier:          rLbifLvEhH7Kbx+2xTDbZQRJl+ncnuFvdpP5Mksv4pI=
Subject key identifier:   35:CA:6E:32:17:41:E8:D9:0F:C1:5C:F0:FE:F1:C2:8B:C0:A1:08:8C
Certificate issuer:       /CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
Certificate serial:       6A6A8E05381AD614FBF4BDE7E422F4CFECCE2D98
Authority key identifier: 8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135352e302f32342d3234203d3e203532343934.roa
Signing time:             Tue 05 Mar 2024 17:49:39 +0000
ROA not before:           Tue 05 Mar 2024 17:44:39 +0000
ROA not after:            Tue 04 Mar 2025 17:49:39 +0000
asID:                     52494
IP address blocks:        179.0.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6a:8e:05:38:1a:d6:14:fb:f4:bd:e7:e4:22:f4:cf:ec:ce:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
        Validity
            Not Before: Mar  5 17:44:39 2024 GMT
            Not After : Mar  4 17:49:39 2025 GMT
        Subject: CN=35CA6E321741E8D90FC15CF0FEF1C28BC0A1088C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:a2:36:cd:02:5a:49:28:49:87:5f:1a:f1:
                    d1:35:3c:c3:bc:e9:00:3a:a7:bf:13:9b:5c:54:08:
                    ec:75:fc:5d:1f:4a:53:7d:ae:e1:5e:5f:51:03:44:
                    21:05:57:0b:1c:d2:c1:2d:4c:ff:11:ce:96:c0:41:
                    2a:12:4a:3b:e0:fe:a2:fb:01:14:df:6d:bf:12:be:
                    3d:fc:43:fd:ee:fd:55:1c:e2:64:2a:ec:4f:4b:c7:
                    42:6f:d1:36:9d:4b:40:68:03:6d:0a:1e:3e:0f:c9:
                    80:49:cf:fe:e7:bf:c2:8a:c0:02:a3:74:44:b5:17:
                    0e:9c:a1:dc:0f:c4:18:fc:20:01:97:8d:42:e7:66:
                    fb:d2:de:89:e3:39:ec:b0:e6:a9:38:f3:ff:97:0f:
                    56:dc:87:63:99:b6:10:33:4b:68:c5:ab:9c:eb:fa:
                    c4:9a:88:27:8b:ef:10:c3:e4:f8:37:61:de:9d:34:
                    41:5f:68:33:ad:a5:57:db:ba:55:03:32:de:60:65:
                    45:6d:62:fb:e0:c4:2f:17:73:30:d6:a1:ad:24:5b:
                    4c:97:b7:58:63:b6:6a:e9:09:9e:62:6b:16:c4:33:
                    14:f8:f6:24:87:3e:c6:31:9f:eb:68:11:6d:6e:cf:
                    bc:dd:b2:c5:d8:93:71:4b:d8:e0:ea:ab:e5:0e:e6:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CA:6E:32:17:41:E8:D9:0F:C1:5C:F0:FE:F1:C2:8B:C0:A1:08:8C
            X509v3 Authority Key Identifier:
                keyid:8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135352e302f32342d3234203d3e203532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:13:2f:38:b6:dd:e9:a0:7a:ed:b0:af:42:ef:98:e0:0b:
         f6:0b:c0:0c:7f:d4:4a:ab:8a:2e:d9:1b:74:94:bf:40:2d:e9:
         79:c9:67:1f:a3:a5:ea:32:b3:0c:da:93:4d:dc:02:55:f6:8a:
         03:d0:89:e5:87:4b:bd:b3:f7:79:f7:97:fe:0c:16:a2:34:78:
         50:72:12:a2:00:b9:67:8f:df:3e:3b:3a:cd:60:95:d7:b2:05:
         8f:df:1d:b0:0e:63:ef:c3:16:7c:59:66:dd:9f:4a:4b:29:a9:
         95:2b:5e:44:f1:a3:13:f0:a6:a6:69:68:01:6e:d0:d6:f5:54:
         e2:bc:3d:c5:4e:4b:7f:a5:c2:d8:e0:66:71:f1:cb:16:4d:25:
         f0:94:7e:f9:11:60:4c:be:91:fb:e7:de:0f:ee:2a:d6:32:55:
         be:84:58:a5:07:ad:f7:1a:84:4f:34:0e:c9:e6:82:67:51:3d:
         c8:0b:d3:56:4c:95:7a:eb:42:c2:22:88:f3:1f:a4:23:9e:8b:
         a2:b4:5d:f4:f0:0f:5e:07:f0:bc:1a:ca:a6:27:d1:39:c0:da:
         1a:38:17:19:13:9d:9e:df:71:09:2b:e7:6b:e3:67:fe:f2:1c:
         f2:bf:7c:4b:e5:97:d6:c3:0d:96:c9:a6:3f:b9:ce:6d:9d:b3:
         e6:e5:a3:34
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUamqOBTga1hT79L3n5CL0z+zOLZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMxMDNGNjI4OTlENTBDMzQ5OUQ1NEUwRDMxRkFGODRC
NEM2OUYxOTAeFw0yNDAzMDUxNzQ0MzlaFw0yNTAzMDQxNzQ5MzlaMDMxMTAvBgNV
BAMTKDM1Q0E2RTMyMTc0MUU4RDkwRkMxNUNGMEZFRjFDMjhCQzBBMTA4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRKI2zQJaSShJh18a8dE1PMO8
6QA6p78Tm1xUCOx1/F0fSlN9ruFeX1EDRCEFVwsc0sEtTP8RzpbAQSoSSjvg/qL7
ARTfbb8Svj38Q/3u/VUc4mQq7E9Lx0Jv0TadS0BoA20KHj4PyYBJz/7nv8KKwAKj
dES1Fw6codwPxBj8IAGXjULnZvvS3onjOeyw5qk48/+XD1bch2OZthAzS2jFq5zr
+sSaiCeL7xDD5Pg3Yd6dNEFfaDOtpVfbulUDMt5gZUVtYvvgxC8XczDWoa0kW0yX
t1hjtmrpCZ5iaxbEMxT49iSHPsYxn+toEW1uz7zdssXYk3FL2ODqq+UO5vorAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUNcpuMhdB6NkPwVzw/vHCi8ChCIwwHwYDVR0j
BBgwFoAUjBA/YomdUMNJnVTg0x+vhLTGnxkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMTIwMEQzRTI2QThGNERBMzc3N0ZCMDkwRTM0RDhFNzcx
RjMwQzRGODMzQTc5QjE4MkU1RTEyRjQ1MEMyOTM2LzAvOEMxMDNGNjI4OTlENTBD
MzQ5OUQ1NEUwRDMxRkFGODRCNEM2OUYxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzEwM0Y2Mjg5OUQ1MEMzNDk5
RDU0RTBEMzFGQUY4NEI0QzY5RjE5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjEyMDBEM0UyNkE4RjREQTM3NzdGQjA5MEUzNEQ4RTc3MUYzMEM0Rjgz
M0E3OUIxODJFNUUxMkY0NTBDMjkzNi8wLzMxMzczOTJlMzAyZTMxMzUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzAJswDQYJ
KoZIhvcNAQELBQADggEBAIBsEy84tt3poHrtsK9C75jgC/YLwAx/1Eqrii7ZG3SU
v0At6XnJZx+jpeoyswzak03cAlX2igPQieWHS72z93n3l/4MFqI0eFByEqIAuWeP
3z47Os1gldeyBY/fHbAOY+/DFnxZZt2fSkspqZUrXkTxoxPwpqZpaAFu0Nb1VOK8
PcVOS3+lwtjgZnHxyxZNJfCUfvkRYEy+kfvn3g/uKtYyVb6EWKUHrfcahE80Dsnm
gmdRPcgL01ZMlXrrQsIiiPMfpCOei6K0XfTwD14H8LwayqYn0TnA2ho4FxkTnZ7f
cQkr52vjZ/7yHPK/fEvll9bDDZbJpj+5zm2ds+blozQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org