Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230322e302f32342d3234203d3e20323732313132.roa
File:                     3137392e34392e3230322e302f32342d3234203d3e20323732313132.roa (raw, json)
Hash identifier:          k4ZmHDCKORstyVrmwDt0DM/xmUnH2iyJiFRWVWyNTKY=
Subject key identifier:   E7:15:4C:9D:87:9E:F6:D6:70:D1:BC:58:29:2E:1B:9C:7A:32:18:71
Certificate issuer:       /CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
Certificate serial:       181ED91E4CCF61C113C02F352415FDB944051B5F
Authority key identifier: 25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230322e302f32342d3234203d3e20323732313132.roa
Signing time:             Fri 22 Nov 2024 23:35:00 +0000
ROA not before:           Fri 22 Nov 2024 23:30:00 +0000
ROA not after:            Fri 21 Nov 2025 23:35:00 +0000
asID:                     272112
IP address blocks:        179.49.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1e:d9:1e:4c:cf:61:c1:13:c0:2f:35:24:15:fd:b9:44:05:1b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
        Validity
            Not Before: Nov 22 23:30:00 2024 GMT
            Not After : Nov 21 23:35:00 2025 GMT
        Subject: CN=E7154C9D879EF6D670D1BC58292E1B9C7A321871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:8e:be:84:8a:ac:c6:52:6e:a5:62:cc:31:
                    c0:01:67:93:f0:78:f5:5a:9a:ab:c2:0d:8f:33:1c:
                    32:22:95:c2:6e:1f:f6:03:8b:18:ee:23:15:29:81:
                    24:f6:24:8c:18:86:52:16:e4:a0:2d:6b:0f:52:43:
                    ae:61:17:ce:f3:14:25:ba:3f:ee:7f:d4:6b:48:2e:
                    8c:db:f3:53:75:ed:27:d2:54:c7:05:8b:57:83:bd:
                    e1:01:b5:0f:42:40:4a:ef:35:27:35:d4:0b:36:5e:
                    fd:54:9d:a8:14:b4:90:85:04:54:a0:17:33:28:23:
                    69:2d:8e:14:d4:51:48:eb:cf:c0:c5:58:ca:16:d9:
                    c7:6d:dd:a3:6b:b0:8a:c2:ef:e9:f1:78:70:e2:c3:
                    9a:5b:22:ff:0c:98:9e:8d:55:ff:1b:15:71:03:98:
                    d9:92:61:b9:5e:65:b8:8d:d5:23:1c:3d:7c:5c:1f:
                    0e:e9:a2:4f:d4:1e:16:fb:d5:c1:4c:c9:a8:c1:2d:
                    46:56:f2:3b:f3:30:ef:e2:63:13:71:25:18:3a:8c:
                    26:f6:46:56:ee:08:5f:25:c9:75:c8:a4:d8:ab:6b:
                    12:35:18:34:79:49:98:de:0a:8b:bb:e9:f2:19:bb:
                    e7:da:3d:c7:1c:c3:2d:f5:4c:12:b2:1f:ee:56:79:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:4C:9D:87:9E:F6:D6:70:D1:BC:58:29:2E:1B:9C:7A:32:18:71
            X509v3 Authority Key Identifier:
                keyid:25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230322e302f32342d3234203d3e20323732313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:8c:f8:31:cc:ba:b8:39:ee:5e:75:f7:95:83:07:61:54:
         88:43:8b:50:53:c1:18:22:bf:3b:25:23:74:4b:0a:78:c6:16:
         7b:b8:b6:a4:2c:13:d8:d1:04:2f:1d:07:58:0a:1a:88:02:38:
         0e:15:f9:2e:6b:a4:95:ee:5f:7d:cb:cd:14:49:75:e2:6c:df:
         6f:a2:7e:fa:4c:fe:50:28:e0:1c:72:c7:ae:03:ec:96:8a:bb:
         88:ef:17:af:a6:da:ce:a6:9a:82:de:41:0e:9c:dd:64:2b:ec:
         f4:19:83:7f:6d:25:91:d4:5d:f5:2e:86:ba:df:9e:70:73:db:
         f6:db:dd:e6:c0:cf:f2:31:ee:fa:54:94:f8:5d:db:e3:7f:f0:
         bd:49:25:b5:2c:81:b4:2c:9a:ee:b0:85:87:e4:ed:dc:27:53:
         4a:35:2d:e1:04:a9:db:c2:7c:89:af:f3:28:97:99:e2:af:6c:
         08:04:95:d7:5e:dc:5e:f1:d1:3e:9f:62:e0:a2:8e:96:72:78:
         65:24:81:72:a4:01:04:de:0e:3e:71:a9:68:bd:b4:c6:6c:88:
         a0:0c:c6:0b:e3:7f:c7:53:9c:94:3c:8d:75:22:01:2d:7c:4d:
         fb:51:64:fc:d9:ca:90:a6:3e:c1:b0:0f:70:91:99:5c:91:65:
         70:a5:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:22 2025 by rpki-client