Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3232203d3e203237383730.roa
File:                     3137392e36302e3232302e302f32322d3232203d3e203237383730.roa (raw, json)
Hash identifier:          Y5bRdjtN7dtrou7+nwMwEJnpzL0/gxCzRVx7BBiUoBo=
Subject key identifier:   22:18:40:6E:D7:DE:BD:EB:67:23:24:A8:AB:05:88:B1:AB:ED:3F:44
Certificate issuer:       /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial:       62604E49DA6E3691114766CB88718715FBE863C4
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3232203d3e203237383730.roa
Signing time:             Fri 28 Feb 2025 15:10:00 +0000
ROA not before:           Fri 28 Feb 2025 15:05:00 +0000
ROA not after:            Fri 27 Feb 2026 15:10:00 +0000
asID:                     27870
IP address blocks:        179.60.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:60:4e:49:da:6e:36:91:11:47:66:cb:88:71:87:15:fb:e8:63:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
        Validity
            Not Before: Feb 28 15:05:00 2025 GMT
            Not After : Feb 27 15:10:00 2026 GMT
        Subject: CN=2218406ED7DEBDEB672324A8AB0588B1ABED3F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:fa:d7:33:78:57:e1:88:09:3c:29:22:d8:
                    a9:19:0a:87:d0:af:31:af:ca:c5:29:36:be:20:2e:
                    db:74:e4:64:b7:65:3f:aa:68:14:aa:58:c6:7c:8e:
                    30:05:17:2e:4d:bf:b9:29:82:2a:23:c9:76:ab:43:
                    ad:97:9f:32:6f:ba:4c:f1:cb:0d:54:f9:f2:a5:cd:
                    b9:0e:35:f0:74:7d:9b:5f:57:41:d3:44:d2:d5:91:
                    d0:83:81:44:85:f5:e4:e4:9b:60:5f:29:6d:61:e8:
                    1b:80:3a:d3:63:5c:01:51:db:b8:b9:66:b5:b3:1a:
                    52:f2:1c:9c:9e:d4:b1:e3:20:68:8e:a5:ec:6a:b2:
                    40:aa:e3:7f:9f:44:39:a9:a3:d9:0b:c0:26:19:24:
                    0f:73:ab:d4:7e:2f:6a:d8:ad:5a:8b:e3:23:b2:30:
                    f3:87:13:50:76:53:0f:b0:4f:7c:cf:1a:90:f7:44:
                    ea:87:07:4b:d9:74:fc:1e:09:84:10:8e:b0:0f:c9:
                    09:a4:e4:7d:f2:e5:e9:68:2e:44:b6:77:ab:83:8a:
                    1a:5f:d8:06:ab:ee:63:67:2c:44:80:65:b4:76:26:
                    7e:25:2d:9d:a6:bd:1c:bb:5b:a6:ea:77:09:fe:56:
                    68:3a:e4:7a:91:85:0a:c4:9a:c3:4c:c9:df:a8:05:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:40:6E:D7:DE:BD:EB:67:23:24:A8:AB:05:88:B1:AB:ED:3F:44
            X509v3 Authority Key Identifier:
                keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3232203d3e203237383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:b8:b4:ac:ec:6b:97:37:a1:54:8e:93:52:16:6f:24:0e:
         2c:47:cc:e0:59:a5:b9:92:33:91:4c:2a:fb:5e:ba:16:1d:47:
         eb:83:e2:dc:b9:8e:59:56:c8:87:e9:ed:fe:2f:b2:15:ad:c0:
         ea:3e:46:de:77:3f:3d:5b:31:a6:48:f4:1c:19:b2:b3:63:d8:
         57:ad:f0:9a:17:c3:be:dd:e1:0a:72:45:3e:03:68:6c:00:ce:
         ea:8d:0d:33:2b:39:ae:07:84:0c:1d:2f:00:da:6d:1a:b7:3f:
         a0:26:7a:0b:b3:db:c6:0e:e7:94:7a:d9:af:09:4a:5b:58:2f:
         20:a5:f6:d7:37:c5:75:b6:17:69:a4:e9:31:49:34:2d:3e:a8:
         28:8d:9e:22:2f:6f:8d:91:3f:43:29:97:e3:57:54:1c:77:fb:
         bc:87:1e:8d:fb:61:1b:2a:77:f9:c6:70:b2:7f:38:26:5d:0a:
         04:97:2a:e2:88:f2:77:6f:aa:41:b4:8b:48:91:ef:3e:b3:57:
         1d:da:e1:1c:76:02:d4:2e:f2:f2:a2:b1:eb:b5:64:04:5a:e9:
         60:f3:23:94:e6:2a:6c:a2:b2:71:da:32:e5:0b:3a:1b:8b:82:
         8e:58:5b:86:2a:09:a7:bc:3c:ed:36:ad:02:80:dc:f5:3a:e6:
         83:a4:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:47 2025 by rpki-client