Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa
File:                     3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa (raw, json)
Hash identifier:          FhRI4YfrpzlFXBjiD7lYnccMMofhCHKNpuqOq/paCeE=
Subject key identifier:   74:AB:E5:9D:10:26:94:11:E2:24:64:F8:01:46:04:88:32:BE:94:0F
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       10A65C7B3D484B52582F031510E4B724F7D68104
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:35 +0000
ROA not before:           Tue 04 Feb 2025 18:35:35 +0000
ROA not after:            Tue 03 Feb 2026 18:40:35 +0000
asID:                     270081
IP address blocks:        179.49.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a6:5c:7b:3d:48:4b:52:58:2f:03:15:10:e4:b7:24:f7:d6:81:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:35 2025 GMT
            Not After : Feb  3 18:40:35 2026 GMT
        Subject: CN=74ABE59D10269411E22464F80146048832BE940F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:47:5f:db:26:82:54:db:22:b3:b9:67:c3:
                    50:55:79:0c:b5:2e:6c:76:3e:e7:c0:8e:3e:a1:68:
                    20:07:9a:87:c7:4e:1b:35:31:6c:85:e9:c9:74:29:
                    72:d1:70:3b:7f:71:3e:6a:dd:50:3b:49:3a:da:33:
                    3f:28:f5:46:7f:c6:2f:0e:2f:ec:b0:09:a6:5a:2f:
                    42:04:3b:1b:86:be:3b:03:a0:dc:48:3f:26:3f:6b:
                    94:a3:0e:7b:46:47:9f:25:14:e9:71:0e:d0:d9:81:
                    c5:bc:8b:70:12:fc:6a:15:c9:30:9a:66:7b:47:77:
                    0e:60:b6:43:f1:e2:82:82:d4:8f:6b:c5:76:04:5d:
                    06:3b:0b:16:35:49:fd:87:76:a8:25:72:d4:9f:1d:
                    39:ad:7c:36:c2:e3:40:c4:27:42:53:66:1c:c1:d2:
                    d9:18:c8:e7:53:11:5c:c4:38:38:96:67:14:46:40:
                    32:51:3f:81:cf:b8:92:0a:dd:5c:86:c7:5d:a5:53:
                    a8:e5:7b:7e:75:53:99:aa:0d:bf:fc:0c:7a:1c:3b:
                    bd:3e:05:bd:c4:cb:54:28:27:92:92:11:07:82:d7:
                    c4:e0:d6:b6:5d:bd:5b:a5:6c:23:46:e1:35:1e:97:
                    4e:4b:7f:af:4f:0b:69:56:06:98:03:3f:a7:9d:0b:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:E5:9D:10:26:94:11:E2:24:64:F8:01:46:04:88:32:BE:94:0F
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:cc:43:3d:0d:6c:42:d8:9f:ad:5e:70:9d:a4:92:e4:fc:
         93:8b:fe:04:9e:18:98:7e:32:95:6b:53:b1:38:80:da:38:2e:
         c4:ac:4b:c2:05:87:11:cf:5b:8a:a8:40:67:9a:2a:7a:2a:37:
         77:1f:32:82:45:7b:84:90:81:c9:5e:43:ef:ed:8c:a7:55:47:
         fb:84:11:b5:13:93:56:b4:a6:61:65:a9:7b:30:5b:da:22:9d:
         c6:6e:77:89:1c:77:31:07:fe:e8:de:a8:b3:e7:54:c6:10:b2:
         30:22:26:60:42:d8:fe:a3:ce:7f:6b:1a:df:b9:0a:2e:8b:f6:
         a6:15:fa:a7:6c:06:89:c5:ff:8f:ff:b8:10:69:d1:d0:d2:0b:
         a1:ed:65:34:28:21:c2:c5:6e:0b:48:cc:32:65:8e:c6:a0:f1:
         de:3b:46:06:00:7a:33:67:3b:8c:11:de:9f:c8:56:27:63:aa:
         21:71:8e:37:c8:a7:6a:43:78:53:99:11:e6:f5:63:77:50:c1:
         3a:69:ab:09:9b:01:c6:4e:7f:2d:e1:98:c8:f2:ae:aa:5b:d4:
         80:91:e4:4a:ab:3d:fb:4c:fc:ce:f1:0c:86:5e:9d:0d:20:04:
         6a:0d:fc:15:07:cf:dc:cd:d0:1d:9e:73:3e:fb:cf:2c:d4:e9:
         fa:5b:22:8b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEKZcez1IS1JYLwMVEOS3JPfWgQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy
RTM5MDhDMzAeFw0yNTAyMDQxODM1MzVaFw0yNjAyMDMxODQwMzVaMDMxMTAvBgNV
BAMTKDc0QUJFNTlEMTAyNjk0MTFFMjI0NjRGODAxNDYwNDg4MzJCRTk0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DUdf2yaCVNsis7lnw1BVeQy1
Lmx2PufAjj6haCAHmofHThs1MWyF6cl0KXLRcDt/cT5q3VA7STraMz8o9UZ/xi8O
L+ywCaZaL0IEOxuGvjsDoNxIPyY/a5SjDntGR58lFOlxDtDZgcW8i3AS/GoVyTCa
ZntHdw5gtkPx4oKC1I9rxXYEXQY7CxY1Sf2HdqglctSfHTmtfDbC40DEJ0JTZhzB
0tkYyOdTEVzEODiWZxRGQDJRP4HPuJIK3VyGx12lU6jle351U5mqDb/8DHocO70+
Bb3Ey1QoJ5KSEQeC18Tg1rZdvVulbCNG4TUel05Lf69PC2lWBpgDP6edC3DdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUdKvlnRAmlBHiJGT4AUYEiDK+lA8wHwYDVR0j
BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC
M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF
ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2
M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx
OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMxMzczOTJlMzQzOTJlMzEzNTM4MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMwMzAzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBszGe
MA0GCSqGSIb3DQEBCwUAA4IBAQBO5MxDPQ1sQtifrV5wnaSS5PyTi/4EnhiYfjKV
a1OxOIDaOC7ErEvCBYcRz1uKqEBnmip6Kjd3HzKCRXuEkIHJXkPv7YynVUf7hBG1
E5NWtKZhZal7MFvaIp3GbneJHHcxB/7o3qiz51TGELIwIiZgQtj+o85/axrfuQou
i/amFfqnbAaJxf+P/7gQadHQ0guh7WU0KCHCxW4LSMwyZY7GoPHeO0YGAHozZzuM
Ed6fyFYnY6ohcY43yKdqQ3hTmRHm9WN3UME6aasJmwHGTn8t4ZjI8q6qW9SAkeRK
qz37TPzO8QyGXp0NIARqDfwVB8/czdAdnnM++88s1On6WyKL
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:07 2025 by rpki-client