Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa
File:                     3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa (raw, json)
Hash identifier:          kcBJpqPUc41BS79Bj0dT/JvUfGgqfnwl/lSkpJ0OwpM=
Subject key identifier:   CA:E5:78:1D:21:EB:F8:7D:CC:01:95:A5:4B:0C:C3:D3:05:90:C6:40
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       6426B4716AB56140AF9B5845B653CAED144BD9FA
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:35 +0000
ROA not before:           Tue 04 Feb 2025 18:35:35 +0000
ROA not after:            Tue 03 Feb 2026 18:40:35 +0000
asID:                     270081
IP address blocks:        179.49.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:26:b4:71:6a:b5:61:40:af:9b:58:45:b6:53:ca:ed:14:4b:d9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:35 2025 GMT
            Not After : Feb  3 18:40:35 2026 GMT
        Subject: CN=CAE5781D21EBF87DCC0195A54B0CC3D30590C640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:14:cc:f7:80:a6:80:84:63:69:f5:6d:79:
                    d6:35:ac:a8:9e:db:ef:82:c7:38:cc:71:fd:6b:ab:
                    e2:91:1a:f3:33:23:42:75:b2:59:61:ec:53:56:11:
                    62:6b:54:5f:65:97:ff:19:92:9f:bf:7f:6e:db:2c:
                    57:80:ee:29:71:e5:3c:ac:92:e6:f2:d5:4e:62:1c:
                    88:ac:51:88:1c:3d:a6:45:1f:a6:14:36:3f:c6:7e:
                    70:fd:5f:05:3f:09:de:88:29:53:6b:e9:9b:9d:c6:
                    37:26:c5:ed:b3:63:7f:7d:a5:45:6d:8e:d3:69:b5:
                    46:26:8f:f6:3f:6c:c3:ae:cb:f0:db:8a:cd:e9:04:
                    c4:66:61:ad:62:c4:88:b2:a8:e4:74:2f:b8:bc:6c:
                    a4:c9:e4:59:20:e2:f2:75:55:2a:2f:f2:eb:ba:9f:
                    fc:78:bc:ac:58:be:0e:cf:ff:08:00:cc:d9:2e:98:
                    da:24:5f:25:c3:2c:10:24:d2:0c:de:47:8b:9c:ed:
                    6a:7e:c8:29:5f:c5:9f:5f:e0:24:40:d0:87:7d:d1:
                    9c:b1:52:f7:40:53:15:3f:c1:7e:37:69:96:d7:a5:
                    2f:17:76:94:5b:36:96:69:1a:57:4d:3b:03:8f:6b:
                    7d:b6:bd:04:c4:3c:ca:fb:84:7a:30:6b:f9:c2:26:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:78:1D:21:EB:F8:7D:CC:01:95:A5:4B:0C:C3:D3:05:90:C6:40
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:2d:c8:83:d4:c9:19:bd:1e:1f:1a:d3:c8:19:de:11:a1:
         54:01:e3:c1:ae:11:ba:b0:07:bf:7b:56:86:5b:fb:32:05:b1:
         68:dc:c9:8c:94:a7:a6:e0:fa:95:84:3d:f1:aa:8c:d3:a2:fa:
         b4:68:c8:35:b3:65:e8:ca:93:97:6b:7b:ea:50:d8:01:c5:f6:
         5d:27:8c:3f:a7:32:74:17:51:fb:cd:3f:3e:6e:bc:45:07:1f:
         7e:f3:a4:a8:c3:c7:6e:5e:41:cf:04:53:e3:b6:13:72:3a:86:
         9a:e5:bf:b7:a9:31:60:f6:4a:93:de:fe:95:aa:09:9b:4c:82:
         a1:b7:e1:87:64:9b:32:4b:b0:37:89:a8:a9:93:d5:46:7c:fc:
         aa:7d:8d:9c:54:2a:f0:30:b4:26:f7:82:5b:f5:fc:d0:1d:31:
         1f:6b:73:b4:45:3a:6d:31:b0:d6:03:83:23:99:2c:32:dc:54:
         a2:d3:2b:d2:10:34:00:d4:4a:ed:cf:f2:28:02:17:c8:d5:4f:
         cf:2b:6f:72:35:e7:c4:49:8e:f1:8b:18:1a:ec:9c:ec:c1:a8:
         36:72:e3:1c:5d:bf:02:97:3e:15:ae:0d:5d:fd:45:9c:d8:ac:
         96:eb:85:fd:df:b9:31:5e:54:aa:ef:71:1e:aa:76:27:fd:d5:
         d8:58:3d:35
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZCa0cWq1YUCvm1hFtlPK7RRL2fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy
RTM5MDhDMzAeFw0yNTAyMDQxODM1MzVaFw0yNjAyMDMxODQwMzVaMDMxMTAvBgNV
BAMTKENBRTU3ODFEMjFFQkY4N0RDQzAxOTVBNTRCMENDM0QzMDU5MEM2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJBTM94CmgIRjafVtedY1rKie
2++CxzjMcf1rq+KRGvMzI0J1sllh7FNWEWJrVF9ll/8Zkp+/f27bLFeA7ilx5Tys
kuby1U5iHIisUYgcPaZFH6YUNj/GfnD9XwU/Cd6IKVNr6Zudxjcmxe2zY399pUVt
jtNptUYmj/Y/bMOuy/Dbis3pBMRmYa1ixIiyqOR0L7i8bKTJ5Fkg4vJ1VSov8uu6
n/x4vKxYvg7P/wgAzNkumNokXyXDLBAk0gzeR4uc7Wp+yClfxZ9f4CRA0Id90Zyx
UvdAUxU/wX43aZbXpS8XdpRbNpZpGldNOwOPa322vQTEPMr7hHowa/nCJo8TAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyuV4HSHr+H3MAZWlSwzD0wWQxkAwHwYDVR0j
BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC
M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF
ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2
M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx
OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMxMzczOTJlMzQzOTJlMzEzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAszGc
MA0GCSqGSIb3DQEBCwUAA4IBAQB+2y3Ig9TJGb0eHxrTyBneEaFUAePBrhG6sAe/
e1aGW/syBbFo3MmMlKem4PqVhD3xqozTovq0aMg1s2XoypOXa3vqUNgBxfZdJ4w/
pzJ0F1H7zT8+brxFBx9+86Sow8duXkHPBFPjthNyOoaa5b+3qTFg9kqT3v6Vqgmb
TIKht+GHZJsyS7A3iaipk9VGfPyqfY2cVCrwMLQm94Jb9fzQHTEfa3O0RTptMbDW
A4MjmSwy3FSi0yvSEDQA1Ertz/IoAhfI1U/PK29yNefESY7xixga7Jzswag2cuMc
Xb8Clz4Vrg1d/UWc2KyW64X937kxXlSq73EeqnYn/dXYWD01
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:00 2025 by rpki-client