Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6F73D7AFCB6C63F3FCEB708F7452C7C1F31614FB1DFDADBF34F3447EBB8DD78/0/3137392e302e3138302e302f32322d3234203d3e20323730303434.roa
File:                     3137392e302e3138302e302f32322d3234203d3e20323730303434.roa (raw, json)
Hash identifier:          CUO9yfXw/eAtutNUUeRi7GXb8zOPZqImxA2iteI0ig8=
Subject key identifier:   85:8E:9E:2C:DA:8B:03:25:59:A2:35:EF:98:A2:8F:A8:87:2C:49:57
Certificate issuer:       /CN=C6CC79153716F84AE8F1F868BF399718465A8697
Certificate serial:       55BE1687691748371168CE324FBA6294118FEC31
Authority key identifier: C6:CC:79:15:37:16:F8:4A:E8:F1:F8:68:BF:39:97:18:46:5A:86:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6CC79153716F84AE8F1F868BF399718465A8697.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6F73D7AFCB6C63F3FCEB708F7452C7C1F31614FB1DFDADBF34F3447EBB8DD78/0/3137392e302e3138302e302f32322d3234203d3e20323730303434.roa
Signing time:             Tue 05 Mar 2024 17:59:04 +0000
ROA not before:           Tue 05 Mar 2024 17:54:04 +0000
ROA not after:            Tue 04 Mar 2025 17:59:04 +0000
asID:                     270044
IP address blocks:        179.0.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6F73D7AFCB6C63F3FCEB708F7452C7C1F31614FB1DFDADBF34F3447EBB8DD78/0/C6CC79153716F84AE8F1F868BF399718465A8697.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6F73D7AFCB6C63F3FCEB708F7452C7C1F31614FB1DFDADBF34F3447EBB8DD78/0/C6CC79153716F84AE8F1F868BF399718465A8697.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6CC79153716F84AE8F1F868BF399718465A8697.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:be:16:87:69:17:48:37:11:68:ce:32:4f:ba:62:94:11:8f:ec:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6CC79153716F84AE8F1F868BF399718465A8697
        Validity
            Not Before: Mar  5 17:54:04 2024 GMT
            Not After : Mar  4 17:59:04 2025 GMT
        Subject: CN=858E9E2CDA8B032559A235EF98A28FA8872C4957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:21:ed:7e:a7:20:39:b7:63:15:25:a5:52:
                    12:eb:94:bf:53:4d:a4:09:57:c2:c7:6d:0b:a3:fa:
                    9a:d8:59:40:58:7b:ac:d5:01:d6:7c:4c:93:af:5a:
                    7a:35:78:f0:fb:6c:f2:b4:c1:97:9a:61:c4:ef:81:
                    2e:7e:47:b9:1b:43:b7:f5:78:22:54:f1:58:70:b7:
                    1d:8a:b2:2d:51:32:1a:ea:e6:45:aa:63:40:ad:40:
                    b2:fd:ac:ba:e7:fd:82:64:1a:00:94:20:d7:cb:d0:
                    f4:aa:3a:ed:68:4b:d1:02:d6:93:61:ea:9e:45:c5:
                    9e:67:b6:8e:5f:d2:bb:a2:ba:06:a0:12:bb:d2:1a:
                    2a:f7:11:28:74:c2:96:f9:33:d2:a1:07:ef:ef:bf:
                    38:88:70:51:bf:73:92:c8:2f:25:6c:12:41:ac:a6:
                    4d:a5:63:d1:69:9a:47:41:51:7d:db:f0:27:91:e8:
                    ae:88:3a:72:82:2e:51:c5:f4:e0:e3:cf:06:03:bc:
                    05:c7:81:3c:1e:82:87:48:bb:03:9a:3e:ff:fc:e2:
                    8e:5b:9d:2a:a8:3a:c2:ee:3f:f0:12:41:05:b8:cf:
                    f6:b2:71:8b:b7:b8:76:8c:ea:c3:de:3d:7f:d0:92:
                    e1:84:de:e0:46:8a:d2:01:4a:cf:9a:47:3d:cf:00:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8E:9E:2C:DA:8B:03:25:59:A2:35:EF:98:A2:8F:A8:87:2C:49:57
            X509v3 Authority Key Identifier:
                keyid:C6:CC:79:15:37:16:F8:4A:E8:F1:F8:68:BF:39:97:18:46:5A:86:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6F73D7AFCB6C63F3FCEB708F7452C7C1F31614FB1DFDADBF34F3447EBB8DD78/0/C6CC79153716F84AE8F1F868BF399718465A8697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6CC79153716F84AE8F1F868BF399718465A8697.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6F73D7AFCB6C63F3FCEB708F7452C7C1F31614FB1DFDADBF34F3447EBB8DD78/0/3137392e302e3138302e302f32322d3234203d3e20323730303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:f3:cc:91:07:ab:f5:86:4e:7c:db:22:83:60:da:71:99:
         65:fc:b8:69:65:73:b0:1c:38:25:1f:95:11:03:0e:2b:d8:d3:
         81:44:8a:a6:5c:2b:2b:c2:ef:77:51:8a:59:6f:a8:f8:9b:31:
         2b:29:15:35:13:23:f7:cf:5a:33:6b:4b:6b:7a:03:f5:46:c3:
         e5:c2:d1:88:db:a2:48:5c:b5:aa:f0:68:d5:53:ad:23:de:df:
         92:91:f1:61:be:0b:b7:09:65:34:2c:76:55:d9:d6:7b:30:a9:
         f4:73:34:1d:43:6b:b6:90:73:f6:8a:b5:96:e6:06:86:66:80:
         23:3f:7b:6f:eb:a0:f1:94:3b:84:60:fe:8f:d6:c9:3c:b5:28:
         13:66:48:fa:5d:19:23:e2:bf:44:4b:a8:ce:52:38:42:16:9b:
         54:00:d5:71:8c:26:ae:9e:21:1a:de:ae:2c:8b:6d:ad:0d:53:
         b4:49:a5:f5:18:18:fc:16:14:bf:99:4e:41:e5:f9:ce:3a:48:
         bf:2e:71:aa:61:06:49:2a:e5:bb:12:e4:7c:2d:05:10:4c:b7:
         09:8d:98:75:ff:8b:7e:fb:68:ce:e9:86:0f:f7:26:2d:89:a8:
         bb:35:3e:7b:03:e0:c3:be:93:15:5d:42:ab:82:62:72:a2:65:
         4f:aa:cc:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVb4Wh2kXSDcRaM4yT7pilBGP7DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZDQzc5MTUzNzE2Rjg0QUU4RjFGODY4QkYzOTk3MTg0
NjVBODY5NzAeFw0yNDAzMDUxNzU0MDRaFw0yNTAzMDQxNzU5MDRaMDMxMTAvBgNV
BAMTKDg1OEU5RTJDREE4QjAzMjU1OUEyMzVFRjk4QTI4RkE4ODcyQzQ5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHyHtfqcgObdjFSWlUhLrlL9T
TaQJV8LHbQuj+prYWUBYe6zVAdZ8TJOvWno1ePD7bPK0wZeaYcTvgS5+R7kbQ7f1
eCJU8Vhwtx2Ksi1RMhrq5kWqY0CtQLL9rLrn/YJkGgCUINfL0PSqOu1oS9EC1pNh
6p5FxZ5nto5f0ruiugagErvSGir3ESh0wpb5M9KhB+/vvziIcFG/c5LILyVsEkGs
pk2lY9FpmkdBUX3b8CeR6K6IOnKCLlHF9ODjzwYDvAXHgTwegodIuwOaPv/84o5b
nSqoOsLuP/ASQQW4z/aycYu3uHaM6sPePX/QkuGE3uBGitIBSs+aRz3PAHbvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhY6eLNqLAyVZojXvmKKPqIcsSVcwHwYDVR0j
BBgwFoAUxsx5FTcW+Ero8fhovzmXGEZahpcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNkY3M0Q3QUZDQjZDNjNGM0ZDRUI3MDhGNzQ1MkM3QzFG
MzE2MTRGQjFERkRBREJGMzRGMzQ0N0VCQjhERDc4LzAvQzZDQzc5MTUzNzE2Rjg0
QUU4RjFGODY4QkYzOTk3MTg0NjVBODY5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkNDNzkxNTM3MTZGODRBRThG
MUY4NjhCRjM5OTcxODQ2NUE4Njk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzZGNzNEN0FGQ0I2QzYzRjNGQ0VCNzA4Rjc0NTJDN0MxRjMxNjE0RkIx
REZEQURCRjM0RjM0NDdFQkI4REQ3OC8wLzMxMzczOTJlMzAyZTMxMzgzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArMAtDAN
BgkqhkiG9w0BAQsFAAOCAQEAQKDzzJEHq/WGTnzbIoNg2nGZZfy4aWVzsBw4JR+V
EQMOK9jTgUSKplwrK8Lvd1GKWW+o+JsxKykVNRMj989aM2tLa3oD9UbD5cLRiNui
SFy1qvBo1VOtI97fkpHxYb4LtwllNCx2VdnWezCp9HM0HUNrtpBz9oq1luYGhmaA
Iz97b+ug8ZQ7hGD+j9bJPLUoE2ZI+l0ZI+K/REuozlI4QhabVADVcYwmrp4hGt6u
LIttrQ1TtEml9RgY/BYUv5lOQeX5zjpIvy5xqmEGSSrluxLkfC0FEEy3CY2Ydf+L
fvtozumGD/cmLYmouzU+ewPgw76TFV1Cq4JicqJlT6rMAg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:22 2024 by rpki-client on console-ams.rpki-client.org