Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e2033333536.roa
File:                     3137392e302e32372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          fQttTRxNOriUI+/xqtBfkOhGFXhPiu0xgUpUX7+ZI5o=
Subject key identifier:   96:89:32:CE:5E:A2:4B:BD:AF:92:91:7D:38:B3:7B:8F:ED:FA:84:F9
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       4AD6166581A5D6B47CFDE049188815D8A9660F59
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 04 Feb 2025 18:07:17 +0000
ROA not before:           Tue 04 Feb 2025 18:02:17 +0000
ROA not after:            Tue 03 Feb 2026 18:07:17 +0000
asID:                     3356
IP address blocks:        179.0.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d6:16:65:81:a5:d6:b4:7c:fd:e0:49:18:88:15:d8:a9:66:0f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:17 2025 GMT
            Not After : Feb  3 18:07:17 2026 GMT
        Subject: CN=968932CE5EA24BBDAF92917D38B37B8FEDFA84F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:95:dc:68:45:d4:a3:ed:98:44:02:f0:7f:
                    ee:c9:57:8c:ff:6f:a5:e7:f3:25:82:17:4f:27:94:
                    20:5b:24:07:c7:44:7d:dc:92:bb:c7:1e:cb:c1:dd:
                    62:cb:27:f7:1d:c9:ed:30:65:dc:a1:86:1a:c6:98:
                    5a:40:d0:36:fd:b5:9b:dc:0f:b6:7f:b1:35:5c:ad:
                    75:27:5d:2d:8d:c0:01:f6:18:2d:f8:1b:81:48:f6:
                    ab:60:c1:49:48:18:60:c7:c3:f8:b1:f0:44:e6:12:
                    99:6a:73:16:e2:82:5c:af:8b:b5:e5:e0:09:01:f9:
                    c3:35:c1:14:11:74:97:6e:0d:fc:ce:07:22:42:f2:
                    85:18:f6:1e:f5:f2:21:ae:4d:14:b2:ec:c9:9f:11:
                    07:d5:69:d6:d7:30:ef:92:b9:a7:9a:ad:b8:e4:b1:
                    06:e2:5f:ad:71:19:c4:e7:f1:ee:c9:41:6d:f9:85:
                    02:4a:c8:bc:2a:e4:ac:ea:86:9c:a5:dd:dd:b2:33:
                    68:58:d7:01:28:fc:13:85:8a:a4:bf:40:35:2c:4d:
                    f5:34:5e:67:cf:07:c2:50:9c:4f:6a:7c:9f:dc:80:
                    00:b6:19:0a:1d:11:21:6e:7a:00:b2:4c:6f:b3:a1:
                    f0:ec:69:94:7d:96:9a:25:1e:78:a0:1b:ec:47:18:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:89:32:CE:5E:A2:4B:BD:AF:92:91:7D:38:B3:7B:8F:ED:FA:84:F9
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:d8:c5:00:75:ce:b9:ed:7a:96:6e:9a:f5:63:1b:0f:9d:
         72:cf:08:4b:f3:33:4b:3e:10:69:37:9d:53:78:7e:58:48:aa:
         a8:95:5f:c2:90:2f:fb:c3:d7:90:77:1a:e5:94:8b:07:96:6b:
         4e:b7:58:f6:f2:6a:da:a4:85:a7:95:6c:50:91:eb:f2:08:34:
         ed:7f:b0:b6:01:9d:f7:e8:9c:b4:32:76:64:9d:b2:b9:2c:89:
         a2:d8:4f:7c:2f:c6:18:47:3d:d3:73:69:be:07:88:41:3a:e9:
         63:1f:b9:60:8c:c9:9b:ef:e1:bd:81:37:9f:4c:27:ab:22:64:
         a7:0a:7f:91:d1:35:8e:34:59:e0:2a:4a:57:e8:d2:31:45:28:
         42:fa:31:73:09:80:74:6a:48:92:6a:3e:59:52:8d:48:19:92:
         86:13:a8:74:31:94:65:cf:86:a8:2b:4a:73:28:f2:d4:49:db:
         bf:f6:c3:35:66:5e:0e:fd:56:0a:45:c6:77:8d:47:7c:1b:2c:
         83:42:e9:00:36:7a:80:2d:2b:80:8b:de:ad:71:42:a9:1e:65:
         a1:38:75:13:6f:02:fa:00:33:1f:01:87:14:92:89:98:13:93:
         48:47:b7:83:87:94:e9:c3:67:03:08:41:18:94:84:ff:5d:79:
         0c:91:65:14
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUStYWZYGl1rR8/eBJGIgV2KlmD1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMzBFRjFCNzUxNTMxRTdBNTAzMDg2RTE1NzJCQ0Uy
RTM3RDBDQzAeFw0yNTAyMDQxODAyMTdaFw0yNjAyMDMxODA3MTdaMDMxMTAvBgNV
BAMTKDk2ODkzMkNFNUVBMjRCQkRBRjkyOTE3RDM4QjM3QjhGRURGQTg0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmZXcaEXUo+2YRALwf+7JV4z/
b6Xn8yWCF08nlCBbJAfHRH3ckrvHHsvB3WLLJ/cdye0wZdyhhhrGmFpA0Db9tZvc
D7Z/sTVcrXUnXS2NwAH2GC34G4FI9qtgwUlIGGDHw/ix8ETmEplqcxbiglyvi7Xl
4AkB+cM1wRQRdJduDfzOByJC8oUY9h718iGuTRSy7MmfEQfVadbXMO+Suaearbjk
sQbiX61xGcTn8e7JQW35hQJKyLwq5Kzqhpyl3d2yM2hY1wEo/BOFiqS/QDUsTfU0
XmfPB8JQnE9qfJ/cgAC2GQodESFuegCyTG+zofDsaZR9lpolHnigG+xHGBN7AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUlokyzl6iS72vkpF9OLN7j+36hPkwHwYDVR0j
BBgwFoAUFDMO8bdRUx56UDCG4Vcrzi430MwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTc3NTVENTA5MjdDNkIyRjdGNUM3OTQ4NENGQkE5RDM4
RDI2NTBENjI4QkVEODA1MjZDNjg1REVCMURFQjk0LzAvMTQzMzBFRjFCNzUxNTMx
RTdBNTAzMDg2RTE1NzJCQ0UyRTM3RDBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDMzMEVGMUI3NTE1MzFFN0E1
MDMwODZFMTU3MkJDRTJFMzdEMENDLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk3NzU1RDUwOTI3QzZCMkY3RjVDNzk0ODRDRkJBOUQzOEQyNjUwRDYy
OEJFRDgwNTI2QzY4NURFQjFERUI5NC8wLzMxMzczOTJlMzAyZTMyMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMAGzANBgkqhkiG
9w0BAQsFAAOCAQEAWiDYxQB1zrntepZumvVjGw+dcs8IS/MzSz4QaTedU3h+WEiq
qJVfwpAv+8PXkHca5ZSLB5ZrTrdY9vJq2qSFp5VsUJHr8gg07X+wtgGd9+ictDJ2
ZJ2yuSyJothPfC/GGEc903NpvgeIQTrpYx+5YIzJm+/hvYE3n0wnqyJkpwp/kdE1
jjRZ4CpKV+jSMUUoQvoxcwmAdGpIkmo+WVKNSBmShhOodDGUZc+GqCtKcyjy1Enb
v/bDNWZeDv1WCkXGd41HfBssg0LpADZ6gC0rgIverXFCqR5loTh1E28C+gAzHwGH
FJKJmBOTSEe3g4eU6cNnAwhBGJSE/115DJFlFA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:58 2025 by rpki-client