Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230322e302f32332d3233203d3e20323732313132.roa
File:                     3137392e34392e3230322e302f32332d3233203d3e20323732313132.roa (raw, json)
Hash identifier:          +6oDNQ/zy0cV7QmP+b2RVS403b+nfpxSqyxiitCAgM4=
Subject key identifier:   15:86:64:DB:39:EE:AC:2A:E7:94:5C:DF:70:1D:C5:0F:C7:79:40:6B
Certificate issuer:       /CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
Certificate serial:       11836ABDDAACB3D842B41007DE93C92CF18517C2
Authority key identifier: 25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230322e302f32332d3233203d3e20323732313132.roa
Signing time:             Fri 22 Nov 2024 23:35:00 +0000
ROA not before:           Fri 22 Nov 2024 23:30:00 +0000
ROA not after:            Fri 21 Nov 2025 23:35:00 +0000
asID:                     272112
IP address blocks:        179.49.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:83:6a:bd:da:ac:b3:d8:42:b4:10:07:de:93:c9:2c:f1:85:17:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
        Validity
            Not Before: Nov 22 23:30:00 2024 GMT
            Not After : Nov 21 23:35:00 2025 GMT
        Subject: CN=158664DB39EEAC2AE7945CDF701DC50FC779406B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:ce:40:8c:4e:55:53:7d:eb:ad:a3:d0:cc:
                    36:78:0c:6b:65:ca:74:89:53:a4:1b:69:81:ba:84:
                    ec:6d:07:3e:0c:d0:b9:c0:10:57:e2:72:1c:71:c7:
                    c6:54:80:6c:60:f2:ec:55:9c:ac:28:3c:aa:8b:ea:
                    02:ab:f0:de:60:08:3a:ab:c1:d1:77:30:3b:1c:19:
                    b8:2a:0a:a3:f1:be:96:84:57:d3:cd:54:1c:86:16:
                    d3:64:e2:cb:f6:f8:0d:53:5a:bd:18:78:1a:8c:13:
                    a9:db:5a:a6:4f:1d:97:bf:33:91:43:e8:a5:80:47:
                    8d:e0:ea:b3:84:00:c3:f0:e4:4d:94:75:67:b2:3f:
                    2a:f6:87:08:83:f9:52:25:cf:e9:9c:14:75:97:f9:
                    b0:61:4f:d2:ad:76:01:bc:63:92:c8:cd:b3:5a:a4:
                    de:48:f9:6b:e4:ac:7c:fe:a8:f9:6d:b4:b8:22:5b:
                    33:a3:87:37:dc:aa:88:e5:f1:4d:1b:1c:47:40:fa:
                    6b:1f:1c:14:ef:31:f6:76:9d:53:8e:32:e4:e0:52:
                    73:94:ef:fd:63:ab:b9:d6:0e:db:a3:24:86:94:79:
                    3d:08:db:e8:6a:ce:10:cb:ab:83:c6:a7:5f:df:e7:
                    d6:02:e6:7d:92:36:cf:7d:bb:c0:0c:6e:23:c1:d1:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:86:64:DB:39:EE:AC:2A:E7:94:5C:DF:70:1D:C5:0F:C7:79:40:6B
            X509v3 Authority Key Identifier:
                keyid:25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230322e302f32332d3233203d3e20323732313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:de:43:3f:50:37:ba:ad:6f:6b:04:b6:08:94:f0:ac:d0:ad:
         c1:cd:a3:96:80:c4:e8:42:ec:d8:f4:ad:e7:15:06:71:13:3c:
         9a:d7:d4:04:2c:8d:bd:ea:51:72:1c:2e:9a:39:50:a7:41:0a:
         b3:d5:0a:b7:01:a3:e4:18:e1:c9:b6:57:00:cf:97:7d:1d:b0:
         40:6d:5e:b7:b1:72:73:be:95:b3:02:3d:c6:68:11:07:11:26:
         07:c7:c6:49:96:15:85:28:4b:72:5c:0c:97:d3:c2:1e:10:db:
         29:7d:c1:ce:f6:3b:e6:6c:64:10:29:a3:3c:17:5d:15:86:0c:
         33:ed:5c:6e:85:d1:dd:a2:d9:c3:df:22:70:b0:75:1f:9a:cc:
         79:95:b5:ff:1a:e3:de:31:bc:ba:54:90:80:ee:b1:a6:2a:0b:
         fd:1d:64:e3:3b:cd:46:96:fe:9c:72:0a:a5:07:97:5e:06:a8:
         ca:00:fa:d0:12:d6:d5:94:9f:0b:6a:e5:17:48:52:6b:5a:f5:
         38:fc:10:3b:c5:68:93:da:d2:64:59:cb:bc:d3:c5:bd:61:b3:
         aa:eb:b1:c6:a8:aa:36:2e:71:52:83:05:62:72:dd:23:7a:05:
         54:cf:c0:d8:b5:c3:22:cc:a0:67:d2:6a:3a:fe:f6:82:e4:e7:
         bc:0d:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:10 2025 by rpki-client