Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3234203d3e203237383730.roa
File:                     3137392e36302e3232302e302f32322d3234203d3e203237383730.roa (raw, json)
Hash identifier:          pkHu/O83Ae7jMkNOliHLToah+sbUymVUMZ5Mr5Sckrg=
Subject key identifier:   17:B7:DF:09:82:42:FA:F6:DA:0F:12:EA:F3:7C:53:82:D5:47:83:3A
Certificate issuer:       /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial:       5AFB76E7BF61FA3D8550274424DDFCD86C13B6E9
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3234203d3e203237383730.roa
Signing time:             Fri 28 Feb 2025 16:35:00 +0000
ROA not before:           Fri 28 Feb 2025 16:30:00 +0000
ROA not after:            Fri 27 Feb 2026 16:35:00 +0000
asID:                     27870
IP address blocks:        179.60.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:76:e7:bf:61:fa:3d:85:50:27:44:24:dd:fc:d8:6c:13:b6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
        Validity
            Not Before: Feb 28 16:30:00 2025 GMT
            Not After : Feb 27 16:35:00 2026 GMT
        Subject: CN=17B7DF098242FAF6DA0F12EAF37C5382D547833A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:f3:ae:3d:ee:88:e4:3f:30:4f:4d:74:d9:
                    fa:95:f3:de:3e:32:70:45:a5:c3:db:65:f3:61:f6:
                    9f:2a:68:6f:5d:15:03:50:de:34:37:cd:f6:ac:21:
                    9c:8f:74:60:77:fe:4a:91:89:43:67:be:ae:57:76:
                    47:12:ed:71:48:b9:97:2f:42:e8:d8:b5:c2:2c:ae:
                    a6:87:1d:33:2a:81:4b:e7:85:f6:3f:a1:bd:b0:e8:
                    d0:70:4e:c5:66:97:77:96:90:71:5e:01:58:ab:09:
                    ec:e5:77:6e:0c:1c:3a:3c:fd:e8:ad:aa:2d:1f:0a:
                    48:f2:94:5e:d8:35:34:17:17:68:7b:02:3e:1d:e1:
                    4e:b6:8f:36:1d:e5:78:13:f7:91:b4:f5:0b:e6:0f:
                    93:d1:59:64:e0:96:42:fb:9f:c8:b1:50:b1:6e:56:
                    8f:1b:80:01:51:2e:c2:36:a9:08:13:37:96:fb:d5:
                    6f:f0:91:96:52:a8:df:6b:de:1c:31:c8:6e:b8:aa:
                    3a:bd:78:c3:db:5c:b5:70:e2:bf:eb:2a:c1:19:98:
                    45:de:e4:d6:d8:20:33:45:d3:27:de:cd:09:5a:e1:
                    ad:26:e7:3a:79:68:ed:71:29:31:80:f8:56:5a:d3:
                    02:c7:57:62:19:16:c5:88:23:a3:c1:eb:ad:8b:4c:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B7:DF:09:82:42:FA:F6:DA:0F:12:EA:F3:7C:53:82:D5:47:83:3A
            X509v3 Authority Key Identifier:
                keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3137392e36302e3232302e302f32322d3234203d3e203237383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:85:02:d7:a0:93:ac:e8:4f:b3:03:47:e7:ab:0e:85:dc:47:
         20:8d:29:5d:f0:c3:da:3c:ab:c3:8f:66:43:bf:18:2c:2b:81:
         53:f8:4a:49:12:89:fb:2e:3c:23:24:f4:71:ac:f6:95:ad:c9:
         11:ea:e4:32:1f:4d:45:87:fc:d7:05:d9:d7:7b:47:06:bc:e8:
         a8:79:c7:6e:33:1f:83:b3:00:a6:0f:af:22:a8:54:2b:42:fa:
         d6:ff:1c:b1:f2:fc:b1:79:cb:1f:5e:bf:8d:44:24:54:0b:e7:
         20:82:77:9f:4c:7e:2e:99:ef:be:07:45:fe:48:38:67:15:fd:
         4e:8c:25:d4:8c:e7:6d:97:71:b0:c4:07:29:a5:ea:d1:4f:f6:
         81:57:67:ec:f3:2a:54:c8:5f:02:9a:bb:76:5d:6b:79:23:d9:
         31:c4:53:d6:bc:73:64:b0:fb:25:fa:1f:6e:b3:38:ec:90:09:
         a1:59:e2:ba:a2:0d:e8:2d:60:0b:8f:3c:cd:01:68:22:81:0f:
         82:be:6e:62:28:27:2a:a4:7b:37:b7:e9:8b:d7:b6:3d:d9:6e:
         10:95:72:9f:87:59:42:f0:3f:fd:4f:a3:d1:0e:f7:78:11:2f:
         a7:72:af:af:79:0a:1e:51:e1:1c:c4:d6:d5:40:de:1a:39:07:
         b4:94:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:09 2025 by rpki-client