Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137392e36302e36342e302f31392d3234203d3e203237393031.roa
File:                     3137392e36302e36342e302f31392d3234203d3e203237393031.roa (raw, json)
Hash identifier:          fiwXEXgm8f2qAZ/2khz+nisDzfQAJ5ztN2gsxxPQerc=
Subject key identifier:   B0:23:70:52:43:33:EA:8B:6E:19:7D:E4:CA:53:6D:AC:27:DB:19:9E
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       1C11FEA0EEA55907FDD0234E852B9A47B60ACB90
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137392e36302e36342e302f31392d3234203d3e203237393031.roa
Signing time:             Tue 04 Feb 2025 18:54:14 +0000
ROA not before:           Tue 04 Feb 2025 18:49:14 +0000
ROA not after:            Tue 03 Feb 2026 18:54:14 +0000
asID:                     27901
IP address blocks:        179.60.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:fe:a0:ee:a5:59:07:fd:d0:23:4e:85:2b:9a:47:b6:0a:cb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Feb  4 18:49:14 2025 GMT
            Not After : Feb  3 18:54:14 2026 GMT
        Subject: CN=B02370524333EA8B6E197DE4CA536DAC27DB199E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:cd:3e:01:83:8c:63:d4:b0:ec:f4:18:8e:
                    6d:fb:b8:9e:43:d4:40:25:09:62:ab:27:db:95:e1:
                    9d:de:7f:67:2a:67:de:8a:7f:5e:17:d7:c7:35:63:
                    ee:ac:97:bb:9e:ae:1d:f7:5d:c6:e3:21:57:d7:52:
                    c8:ef:42:26:a6:18:64:45:9a:1e:57:0b:ee:1c:b3:
                    fd:57:0b:94:c5:83:86:ca:e0:35:76:16:34:6e:a4:
                    3d:ca:a3:87:a9:5c:ec:10:7b:20:e9:56:42:15:9d:
                    24:6a:55:b0:6a:13:b9:5a:79:da:34:ee:c0:dd:d0:
                    6a:d8:b6:e4:b5:48:77:ec:1c:67:e0:6b:a1:d9:5a:
                    94:06:e9:9e:1b:17:b5:68:a3:2b:6a:96:f4:e8:f7:
                    d3:cc:ab:2c:39:ae:8f:87:9a:bc:6c:3a:25:62:8a:
                    76:0a:56:1e:c9:ae:7a:f1:43:01:9b:4c:5f:13:70:
                    87:30:e7:80:58:df:6d:33:c6:f5:5f:1a:0f:aa:07:
                    92:39:49:b6:d1:af:2c:80:8f:1b:c9:2b:36:ce:91:
                    9a:76:85:53:c7:ab:de:35:f4:a5:e3:49:d9:b0:0b:
                    21:68:00:f2:ad:3f:ae:d1:b4:de:66:6c:d5:48:c1:
                    69:cc:49:44:00:9c:55:4d:f7:93:84:03:fe:1e:67:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:23:70:52:43:33:EA:8B:6E:19:7D:E4:CA:53:6D:AC:27:DB:19:9E
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3137392e36302e36342e302f31392d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:62:37:dd:a3:d4:a0:fa:78:de:4d:09:a3:9d:25:ea:f5:
         6a:78:9b:19:f9:20:ec:10:ff:97:a0:6c:0a:b9:88:d4:9f:3a:
         15:ab:a2:39:87:85:1c:5c:9a:65:79:37:ff:f8:57:ad:06:74:
         f3:4c:bc:c9:b6:86:99:d4:f2:d4:c7:b0:d7:01:15:72:f7:9d:
         03:5a:ca:e2:82:67:a2:81:2e:ff:39:90:6d:af:bb:b4:26:27:
         59:38:61:44:5b:64:4e:3c:24:c3:e3:c6:a7:c2:ce:95:62:0f:
         50:61:60:e2:03:03:7d:e4:69:bb:99:a4:c7:ba:4b:09:37:7b:
         b8:24:07:49:50:73:99:44:cb:dd:f0:8d:6b:1f:6d:04:1b:ad:
         77:16:26:d9:fc:79:1d:ad:26:b8:3f:8c:49:1b:23:ab:b6:76:
         6d:9a:f6:2b:38:93:5f:7b:64:81:16:80:2b:5e:25:bc:cf:73:
         67:69:3c:70:3f:f4:98:6c:6e:36:66:3d:28:c2:ba:be:a2:64:
         26:79:3a:90:01:1a:dc:6f:df:16:69:0f:f8:0c:c7:0a:70:9f:
         b4:bc:35:a0:24:21:64:65:25:70:e8:c4:20:5a:d9:28:52:34:
         2c:cb:4b:6b:26:b3:b5:ce:19:62:60:f2:24:6c:fc:c2:24:16:
         3d:a5:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:44 2025 by rpki-client