Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32332d3233203d3e203532343933.roa
File:                     3137392e36302e3232382e302f32332d3233203d3e203532343933.roa (raw, json)
Hash identifier:          /vzZNpmBeo9RY71yZtj1dGvLIkiElr6b/9HCwikH9pQ=
Subject key identifier:   2A:64:9A:65:5E:6E:4D:A3:AE:0B:F0:23:4A:3F:A0:C9:35:DA:92:96
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       23AA0CDA9B107BF057A1F7DBA156A97C3AC039F8
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32332d3233203d3e203532343933.roa
Signing time:             Tue 04 Feb 2025 18:13:36 +0000
ROA not before:           Tue 04 Feb 2025 18:08:36 +0000
ROA not after:            Tue 03 Feb 2026 18:13:36 +0000
asID:                     52493
IP address blocks:        179.60.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:aa:0c:da:9b:10:7b:f0:57:a1:f7:db:a1:56:a9:7c:3a:c0:39:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Feb  4 18:08:36 2025 GMT
            Not After : Feb  3 18:13:36 2026 GMT
        Subject: CN=2A649A655E6E4DA3AE0BF0234A3FA0C935DA9296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:f1:25:22:73:14:03:d2:f1:e8:15:f7:f2:
                    ea:1a:b7:a6:62:54:b2:9f:bc:33:bf:92:f5:98:68:
                    26:cf:ef:13:40:31:ba:1d:3e:9d:48:2a:e4:e9:4f:
                    46:f6:d4:e4:83:94:71:17:13:00:06:f0:d3:77:99:
                    af:ed:a3:b8:1c:88:0e:a6:57:e8:ae:39:ca:55:d8:
                    41:3b:02:d5:c8:03:d8:d3:a7:a7:8a:0c:ad:a6:b0:
                    ce:98:f6:ef:1d:a0:73:41:d2:2c:0d:39:15:02:3d:
                    4d:de:88:7f:39:1b:46:e3:b2:70:d5:05:25:f9:b1:
                    e4:06:b2:05:3f:ef:fa:28:85:92:d4:db:83:2f:79:
                    50:f4:47:83:8a:b3:e3:7f:2d:0b:64:7e:f5:d8:3b:
                    e4:00:95:25:c4:e8:dd:c7:29:1c:4a:e8:e9:48:3c:
                    40:b0:55:48:c3:79:71:18:25:97:df:a0:bf:da:a1:
                    0b:b9:74:64:68:16:d4:06:af:15:88:93:40:36:c6:
                    ec:aa:8e:71:5e:c6:f2:0f:cc:47:14:85:9a:63:1d:
                    ff:04:e3:f7:bd:a7:d2:55:a3:ef:f6:ee:dc:72:8d:
                    66:e6:46:e1:c5:16:9a:b8:6c:4c:43:17:3e:eb:27:
                    2c:9d:f2:28:26:ee:4b:bc:01:94:6b:2f:ee:bb:b0:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:9A:65:5E:6E:4D:A3:AE:0B:F0:23:4A:3F:A0:C9:35:DA:92:96
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32332d3233203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:51:b4:de:1c:84:ee:44:48:59:4f:48:e3:de:6f:7e:01:
         fd:c4:99:d0:ac:c6:1a:16:ab:73:16:70:10:ec:e2:55:2b:c0:
         5c:de:f5:f6:96:b9:ae:83:c8:e0:db:b1:f4:53:c6:ef:38:16:
         5b:f1:47:04:88:5f:fc:68:8c:4e:91:34:43:a7:6a:56:23:3d:
         7a:28:a7:7f:af:20:a4:2c:a2:43:ec:9e:65:bf:ba:ef:9d:4e:
         5d:60:6a:88:98:a0:46:92:f5:4c:5a:65:b6:a8:6c:1d:1e:05:
         a6:79:fe:57:0c:16:43:ef:15:c7:7b:f0:55:db:50:36:78:dc:
         5d:06:41:5a:e2:1f:1c:1e:4f:cf:0f:34:a7:20:0f:6a:ed:78:
         ec:d2:7f:ca:4f:66:24:a2:02:37:d3:ce:7b:a5:89:6e:85:76:
         0a:41:be:d6:70:f4:7a:0a:d9:42:da:8c:e5:34:c9:ab:ed:01:
         dd:95:49:14:e6:77:a5:90:9a:d8:d1:7f:7a:f5:85:be:53:1f:
         13:47:75:93:77:58:8b:70:62:e3:00:d5:bb:bc:ee:09:84:93:
         64:e5:71:c8:fa:4f:1e:92:a2:01:95:3a:73:08:36:31:27:b1:
         f6:16:b7:ae:81:c2:e4:bf:6a:ce:69:18:2f:83:c6:65:2c:be:
         9e:4b:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:44 2025 by rpki-client