Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137392e36302e3231322e302f32322d3234203d3e203237383030.roa
File:                     3137392e36302e3231322e302f32322d3234203d3e203237383030.roa (raw, json)
Hash identifier:          QTUp6hpp5xsk/AcR9h7WdwXiGAV56vDSBeqW5pOuWKQ=
Subject key identifier:   7F:CD:E2:8B:7F:09:2D:AE:C2:15:F9:16:CB:4E:EA:D0:15:7B:15:72
Certificate issuer:       /CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
Certificate serial:       120697EB77A15730BCEE19DF680CC13F91E3E116
Authority key identifier: 2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137392e36302e3231322e302f32322d3234203d3e203237383030.roa
Signing time:             Tue 05 Mar 2024 18:00:22 +0000
ROA not before:           Tue 05 Mar 2024 17:55:22 +0000
ROA not after:            Tue 04 Mar 2025 18:00:22 +0000
asID:                     27800
IP address blocks:        179.60.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:97:eb:77:a1:57:30:bc:ee:19:df:68:0c:c1:3f:91:e3:e1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
        Validity
            Not Before: Mar  5 17:55:22 2024 GMT
            Not After : Mar  4 18:00:22 2025 GMT
        Subject: CN=7FCDE28B7F092DAEC215F916CB4EEAD0157B1572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:6d:84:c7:a1:55:97:8e:d3:59:5d:7f:b1:
                    3b:4f:38:ac:44:b8:26:f5:a7:36:66:16:8c:46:2d:
                    83:ea:cd:78:eb:ac:02:e6:48:36:4d:2e:ed:f3:d5:
                    92:ab:11:47:93:3e:c3:87:a3:6a:01:7d:40:73:53:
                    91:62:ce:55:3a:4c:33:71:3c:7d:66:38:7f:24:57:
                    06:1a:f4:04:7d:ca:72:3e:88:47:91:1f:22:ec:8b:
                    25:90:5f:58:b4:7d:a9:ca:50:99:67:1c:8b:dc:3c:
                    20:3e:64:28:94:10:de:85:9c:aa:cf:66:76:42:15:
                    b8:09:fa:27:6d:eb:f7:50:f5:90:ee:2d:9d:40:aa:
                    4b:ca:5f:3b:ed:47:b9:2c:78:a4:3d:5d:74:1f:60:
                    14:ab:8d:4a:81:79:58:4f:dd:0a:04:6c:a7:3f:53:
                    e0:f7:ce:99:8b:51:9b:af:fe:92:12:1f:72:3a:fe:
                    15:8e:0a:e1:f7:0f:e9:ee:05:18:8f:13:34:bb:ce:
                    9b:b7:ec:13:b6:13:d8:8a:e0:b5:7d:e7:c6:17:26:
                    22:0a:b4:52:e2:65:39:d8:03:47:7f:e7:11:88:87:
                    1b:a4:86:f1:b9:c8:b5:6f:f1:28:48:6a:9b:47:fa:
                    bf:f8:e0:df:e6:23:72:57:bf:e2:7a:ac:d5:b6:55:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:E2:8B:7F:09:2D:AE:C2:15:F9:16:CB:4E:EA:D0:15:7B:15:72
            X509v3 Authority Key Identifier:
                keyid:2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137392e36302e3231322e302f32322d3234203d3e203237383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:b9:a6:cd:ee:be:0a:3d:52:d1:96:fc:a3:4c:19:9a:f5:
         6d:36:b6:61:70:c0:c4:c7:8b:5a:29:71:ac:72:d4:12:f5:d3:
         62:a1:62:93:46:a6:4f:68:58:d5:f0:59:e2:69:73:69:74:17:
         63:97:6a:d4:d6:01:67:fb:5c:ef:ea:b7:ca:13:06:a5:0b:70:
         c9:83:83:48:7f:6a:a4:9d:56:04:3a:34:85:f6:b0:7f:c3:ca:
         a2:a3:bc:5f:94:8d:d4:b8:d5:98:67:17:1c:0a:19:3a:3a:a5:
         61:36:c8:5a:f6:04:e8:a4:47:6e:02:9f:bf:db:ee:59:a2:10:
         64:c9:07:51:fb:26:92:ea:c3:65:bf:06:74:ad:f0:d8:d7:d5:
         72:42:6b:47:db:75:92:c1:35:e0:ec:6c:07:88:96:2e:d2:d3:
         99:5e:77:05:4d:d4:89:99:9e:7b:75:38:d3:47:40:55:b7:c5:
         b1:36:55:64:4a:a6:d8:6a:a3:35:35:64:70:39:d8:ce:bf:a9:
         87:c3:38:48:8a:7b:48:e4:cc:b8:e0:74:21:1f:ac:c8:58:d8:
         6d:ae:35:71:95:a8:fa:5d:2a:72:83:0c:22:a9:e3:64:dd:99:
         a9:aa:7d:51:50:dc:06:ad:2f:e0:80:ee:be:bc:5d:0f:3a:1d:
         e1:8d:cd:fd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEgaX63ehVzC87hnfaAzBP5Hj4RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNFNDI2RENFMTE2QzJGQzJEMDdCREQyMDlCQzA3MEY2
RDIzM0QxQzAeFw0yNDAzMDUxNzU1MjJaFw0yNTAzMDQxODAwMjJaMDMxMTAvBgNV
BAMTKDdGQ0RFMjhCN0YwOTJEQUVDMjE1RjkxNkNCNEVFQUQwMTU3QjE1NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYv22Ex6FVl47TWV1/sTtPOKxE
uCb1pzZmFoxGLYPqzXjrrALmSDZNLu3z1ZKrEUeTPsOHo2oBfUBzU5FizlU6TDNx
PH1mOH8kVwYa9AR9ynI+iEeRHyLsiyWQX1i0fanKUJlnHIvcPCA+ZCiUEN6FnKrP
ZnZCFbgJ+idt6/dQ9ZDuLZ1AqkvKXzvtR7kseKQ9XXQfYBSrjUqBeVhP3QoEbKc/
U+D3zpmLUZuv/pISH3I6/hWOCuH3D+nuBRiPEzS7zpu37BO2E9iK4LV958YXJiIK
tFLiZTnYA0d/5xGIhxukhvG5yLVv8ShIaptH+r/44N/mI3JXv+J6rNW2VaJ/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUf83ii38JLa7CFfkWy07q0BV7FXIwHwYDVR0j
BBgwFoAULOQm3OEWwvwtB73SCbwHD20jPRwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVDNUQ1OUQ0QzdBMzYzRUI2QzRDODVCQzQwODgyOTZF
MjdGQjJBQzUzRTZEQkE0QzY0REQyRjFEQzVCMzVELzAvMkNFNDI2RENFMTE2QzJG
QzJEMDdCREQyMDlCQzA3MEY2RDIzM0QxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQ0U0MjZEQ0UxMTZDMkZDMkQw
N0JERDIwOUJDMDcwRjZEMjMzRDFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1QzVENTlENEM3QTM2M0VCNkM0Qzg1QkM0MDg4Mjk2RTI3RkIyQUM1
M0U2REJBNEM2NEREMkYxREM1QjM1RC8wLzMxMzczOTJlMzYzMDJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArM81DAN
BgkqhkiG9w0BAQsFAAOCAQEAHcC5ps3uvgo9UtGW/KNMGZr1bTa2YXDAxMeLWilx
rHLUEvXTYqFik0amT2hY1fBZ4mlzaXQXY5dq1NYBZ/tc7+q3yhMGpQtwyYODSH9q
pJ1WBDo0hfawf8PKoqO8X5SN1LjVmGcXHAoZOjqlYTbIWvYE6KRHbgKfv9vuWaIQ
ZMkHUfsmkurDZb8GdK3w2NfVckJrR9t1ksE14OxsB4iWLtLTmV53BU3UiZmee3U4
00dAVbfFsTZVZEqm2GqjNTVkcDnYzr+ph8M4SIp7SOTMuOB0IR+syFjYba41cZWo
+l0qcoMMIqnjZN2Zqap9UVDcBq0v4IDuvrxdDzod4Y3N/Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org