Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32342d3234203d3e20323732393031.roa
File:                     3137372e37312e39382e302f32342d3234203d3e20323732393031.roa (raw, json)
Hash identifier:          6GKfqt6Hbmm4/LJFQ5fPRg2pgJ3DenDWGBWmVHRQFlQ=
Subject key identifier:   96:BA:62:CD:6A:22:9A:A3:D9:4F:7F:AC:CE:B4:7D:DD:5E:9C:C1:88
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       79ED2041B2F8B5BE1C4841FB771969D797B71D8C
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32342d3234203d3e20323732393031.roa
Signing time:             Fri 15 Nov 2024 13:30:01 +0000
ROA not before:           Fri 15 Nov 2024 13:25:01 +0000
ROA not after:            Fri 14 Nov 2025 13:30:01 +0000
asID:                     272901
IP address blocks:        177.71.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ed:20:41:b2:f8:b5:be:1c:48:41:fb:77:19:69:d7:97:b7:1d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Nov 15 13:25:01 2024 GMT
            Not After : Nov 14 13:30:01 2025 GMT
        Subject: CN=96BA62CD6A229AA3D94F7FACCEB47DDD5E9CC188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:16:0e:34:0a:3b:bd:43:38:dc:08:fb:a3:
                    68:15:cd:54:32:e3:f6:15:97:ec:74:39:f8:17:2e:
                    cc:cd:2d:73:86:e2:d4:90:1e:c7:f7:ae:d1:9e:83:
                    68:17:71:89:4e:94:da:a0:2d:e3:f6:5e:28:af:10:
                    0a:30:b7:15:c2:17:7e:5b:94:4c:a5:f5:5f:9e:e4:
                    89:ec:33:33:e0:d6:a6:b9:b7:a9:e2:03:db:3f:6c:
                    ba:ab:de:91:ba:e5:4c:d0:b8:69:3a:c0:db:67:1e:
                    fb:7a:30:20:0b:74:2a:19:7e:ee:12:7a:9b:fc:a1:
                    a1:08:e8:54:d6:44:ea:79:78:a6:a1:96:b4:fe:4b:
                    d7:42:14:96:00:68:cd:55:26:5e:8a:de:d2:93:f2:
                    1b:df:29:d1:a1:02:ca:8b:33:f9:83:15:53:96:dd:
                    ff:51:58:f4:27:96:36:76:3d:d1:bf:b1:6f:e3:67:
                    9b:8d:d2:80:5c:8b:16:5f:29:3e:91:45:99:4e:b8:
                    46:53:da:bc:14:d9:70:8b:17:f2:c8:61:f4:ce:8f:
                    cf:30:fd:ae:31:8f:83:63:1a:05:cc:cd:38:8d:7e:
                    7d:b5:23:4a:14:c7:46:fd:5d:fa:3b:d7:de:8a:33:
                    bf:4b:88:df:c9:27:0e:e9:88:e9:bc:d3:7c:1d:05:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:62:CD:6A:22:9A:A3:D9:4F:7F:AC:CE:B4:7D:DD:5E:9C:C1:88
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39382e302f32342d3234203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9d:8e:fd:f6:0f:72:d0:c9:b5:c7:1a:9b:3f:29:cf:88:6d:
         74:77:f9:b7:0f:d3:c9:a8:0f:eb:52:a2:7f:9d:eb:56:18:6e:
         c8:fc:51:c2:9c:83:20:50:dd:45:76:6a:d4:9a:75:88:14:88:
         5a:68:73:cd:a3:32:75:78:50:58:8b:49:11:d9:7a:96:91:ec:
         69:e5:b5:bd:83:3a:03:de:4b:b6:6b:b8:c3:80:db:c7:9d:d6:
         20:27:b0:8c:aa:68:e7:2a:5a:53:bb:96:b5:31:36:0f:79:8a:
         3e:ef:a9:a9:e1:49:ff:87:b5:1c:51:a9:00:41:fc:d3:02:7f:
         da:e2:08:b8:46:da:3d:f5:c5:a4:2c:3f:e3:79:0c:3f:6d:05:
         15:3a:9a:c2:ab:c6:67:05:b7:c7:77:74:ba:d4:0d:a7:99:63:
         9e:82:fd:5c:a7:47:05:b5:18:58:af:a6:36:d8:11:4a:e7:83:
         02:16:36:a5:20:31:4a:81:18:be:4c:00:d9:c8:fe:93:57:cb:
         bf:10:07:a7:76:a4:c5:69:c8:c2:f4:55:46:90:62:58:5a:59:
         78:7f:65:47:50:f9:4e:88:0e:8c:af:6a:bc:b4:17:bc:1e:4e:
         d2:1d:de:a0:7f:05:cb:66:f6:2c:3c:2d:67:89:cb:6e:20:c3:
         c2:59:f2:f3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUee0gQbL4tb4cSEH7dxlp15e3HYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUyMTgyOEQxQzE4REExNTg5RTBDODE5NEM3MDA2MjU2
NjUyNzdCMjAeFw0yNDExMTUxMzI1MDFaFw0yNTExMTQxMzMwMDFaMDMxMTAvBgNV
BAMTKDk2QkE2MkNENkEyMjlBQTNEOTRGN0ZBQ0NFQjQ3RERENUU5Q0MxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uBYONAo7vUM43Aj7o2gVzVQy
4/YVl+x0OfgXLszNLXOG4tSQHsf3rtGeg2gXcYlOlNqgLeP2XiivEAowtxXCF35b
lEyl9V+e5InsMzPg1qa5t6niA9s/bLqr3pG65UzQuGk6wNtnHvt6MCALdCoZfu4S
epv8oaEI6FTWROp5eKahlrT+S9dCFJYAaM1VJl6K3tKT8hvfKdGhAsqLM/mDFVOW
3f9RWPQnljZ2PdG/sW/jZ5uN0oBcixZfKT6RRZlOuEZT2rwU2XCLF/LIYfTOj88w
/a4xj4NjGgXMzTiNfn21I0oUx0b9Xfo7196KM79LiN/JJw7piOm803wdBQG1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlrpizWoimqPZT3+szrR93V6cwYgwHwYDVR0j
BBgwFoAURSGCjRwY2hWJ4MgZTHAGJWZSd7IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjQzMzEwMzk0RDI0QkRBMjBEOEM3NEE2Q0FGOEZCMTBD
NEM5MjdEQTI1MTVDMzAyRDgyNkZCMDA4Q0ZGRkEyLzAvNDUyMTgyOEQxQzE4REEx
NTg5RTBDODE5NEM3MDA2MjU2NjUyNzdCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NTIxODI4RDFDMThEQTE1ODlF
MEM4MTk0QzcwMDYyNTY2NTI3N0IyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY0MzMxMDM5NEQyNEJEQTIwRDhDNzRBNkNBRjhGQjEwQzRDOTI3REEy
NTE1QzMwMkQ4MjZGQjAwOENGRkZBMi8wLzMxMzczNzJlMzczMTJlMzkzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALFHYjAN
BgkqhkiG9w0BAQsFAAOCAQEAQ52O/fYPctDJtccamz8pz4htdHf5tw/TyagP61Ki
f53rVhhuyPxRwpyDIFDdRXZq1Jp1iBSIWmhzzaMydXhQWItJEdl6lpHsaeW1vYM6
A95Ltmu4w4Dbx53WICewjKpo5ypaU7uWtTE2D3mKPu+pqeFJ/4e1HFGpAEH80wJ/
2uIIuEbaPfXFpCw/43kMP20FFTqawqvGZwW3x3d0utQNp5ljnoL9XKdHBbUYWK+m
NtgRSueDAhY2pSAxSoEYvkwA2cj+k1fLvxAHp3akxWnIwvRVRpBiWFpZeH9lR1D5
TogOjK9qvLQXvB5O0h3eoH8Fy2b2LDwtZ4nLbiDDwlny8w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org