Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa
File:                     3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa (raw, json)
Hash identifier:          ZVZnIgxmz3Hj//RaHYU8YZ86YQx3qwwPJuADD7RJiB8=
Subject key identifier:   64:29:A8:A9:CF:BF:31:B0:65:E2:02:BC:33:FF:71:B0:4C:90:7E:FF
Certificate issuer:       /CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
Certificate serial:       682C3F503FB1D35B38AB7173F13098B4D21E50CB
Authority key identifier: 25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa
Signing time:             Fri 22 Nov 2024 23:40:00 +0000
ROA not before:           Fri 22 Nov 2024 23:35:00 +0000
ROA not after:            Fri 21 Nov 2025 23:40:00 +0000
asID:                     272112
IP address blocks:        179.49.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2c:3f:50:3f:b1:d3:5b:38:ab:71:73:f1:30:98:b4:d2:1e:50:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D394E1B00C22B26AB000202E7D9DCB3A00BA81
        Validity
            Not Before: Nov 22 23:35:00 2024 GMT
            Not After : Nov 21 23:40:00 2025 GMT
        Subject: CN=6429A8A9CFBF31B065E202BC33FF71B04C907EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:e8:ae:24:f3:7f:05:ea:c8:e2:a7:07:7f:
                    ff:36:22:bb:43:58:11:58:4f:0d:d3:64:12:f2:93:
                    ec:78:7d:48:d6:5b:f9:ec:e3:82:ae:2d:a6:4f:35:
                    27:e6:ba:88:18:02:26:18:7a:ac:a4:4d:ba:0b:f0:
                    78:84:23:23:ad:83:3b:83:b4:25:73:cc:1b:54:e9:
                    81:15:dd:08:62:75:1a:ca:e5:21:8e:2a:ea:33:83:
                    51:ea:df:e6:c7:26:37:17:fe:c1:8c:7a:d9:f2:c4:
                    86:ab:ae:b7:59:e3:c5:fa:cc:a0:8a:e8:66:b5:bf:
                    2e:05:ab:85:41:2f:d2:9f:be:f4:71:29:97:85:63:
                    96:41:ed:35:81:63:51:49:df:cb:bf:dc:3a:e3:b7:
                    57:6d:ee:94:dd:64:03:44:df:0a:a3:4f:ea:46:cc:
                    a6:fc:e0:a0:2a:f2:0d:c4:e4:97:60:68:f2:83:2d:
                    b6:dc:93:82:49:19:e1:4c:34:1d:08:80:47:ef:ab:
                    9b:b7:19:0c:82:ae:1b:c4:50:f7:3c:69:64:0e:ee:
                    23:2b:26:08:5b:72:3c:fe:7a:37:70:18:5d:ff:b1:
                    3a:50:48:fb:5a:7d:d9:1e:75:1f:cc:30:99:dd:13:
                    f4:3f:73:8f:33:62:77:c6:7d:40:31:50:78:c2:fe:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:A8:A9:CF:BF:31:B0:65:E2:02:BC:33:FF:71:B0:4C:90:7E:FF
            X509v3 Authority Key Identifier:
                keyid:25:D3:94:E1:B0:0C:22:B2:6A:B0:00:20:2E:7D:9D:CB:3A:00:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25D394E1B00C22B26AB000202E7D9DCB3A00BA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53363A3E2E26F6C6ED0FE15654876A85AE69CB74593096D00D14040295D299F4/0/3137392e34392e3230332e302f32342d3234203d3e20323732313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:96:a8:41:19:96:e2:8b:fb:b2:11:62:8f:b5:4e:1f:b6:
         cd:a2:77:4d:b5:e4:ac:bb:9b:7e:a6:2d:ea:09:e7:4d:5c:bb:
         d6:e2:35:f5:97:ad:a5:a4:a1:73:58:a0:45:08:75:ab:e8:13:
         13:1f:06:3d:45:00:79:67:a0:1e:8f:b0:7b:e4:9f:45:f8:34:
         c0:fb:43:c2:3c:3e:c9:dc:09:de:36:06:2b:ea:ec:54:0b:4d:
         08:18:41:d5:23:e9:24:aa:f0:a8:b6:cf:ca:d7:43:3b:a3:18:
         b0:3e:78:56:04:fb:94:67:1d:52:3a:e2:b5:27:69:d7:56:49:
         f0:01:25:96:9e:62:37:cb:10:07:f7:39:02:b5:9b:2b:f6:7f:
         d2:16:c6:34:d5:fa:2a:49:ba:81:79:a8:45:b3:62:42:7a:9a:
         a5:88:f9:29:f7:9f:e4:35:28:50:7e:da:b0:59:43:aa:ed:0f:
         08:2c:00:4f:99:7c:40:d6:f6:60:42:c4:b3:c1:f8:7c:c2:77:
         1a:7d:b5:ea:8c:7c:89:b2:e4:86:89:70:1d:3d:5e:cc:92:60:
         f0:53:65:e0:b8:ae:ef:32:ae:01:30:8a:46:27:b2:a1:b4:39:
         fb:eb:af:18:76:b4:3a:9b:7b:18:13:79:e9:15:2f:cb:04:4e:
         9c:5f:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:43 2025 by rpki-client