Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3137302e37392e33362e302f32322d3234203d3e2036313437.roa
File:                     3137302e37392e33362e302f32322d3234203d3e2036313437.roa (raw, json)
Hash identifier:          6jVfpFeMv1RIu8im7qKuDJcXL59WFoB26m/9rAqo1NQ=
Subject key identifier:   C9:04:6D:29:54:23:F8:CF:43:DB:E4:1D:A0:BA:F1:08:13:89:E6:F6
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       03FC3307062235ED95CC2B50AA5614F0BA80022C
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3137302e37392e33362e302f32322d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:08 +0000
ROA not before:           Tue 04 Feb 2025 20:00:08 +0000
ROA not after:            Tue 03 Feb 2026 20:05:08 +0000
asID:                     6147
IP address blocks:        170.79.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:33:07:06:22:35:ed:95:cc:2b:50:aa:56:14:f0:ba:80:02:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:08 2025 GMT
            Not After : Feb  3 20:05:08 2026 GMT
        Subject: CN=C9046D295423F8CF43DBE41DA0BAF1081389E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:26:1b:d0:22:fe:ce:c5:d7:11:6f:13:d8:
                    bb:15:e8:f2:05:f9:bc:e8:65:bc:5d:cb:00:3c:cb:
                    c2:19:5a:db:fc:32:25:09:f4:64:7d:50:d8:cf:e9:
                    81:4d:ac:64:73:7d:d9:ac:a3:02:fa:57:e2:0e:2c:
                    37:45:e1:52:6c:3f:c5:b6:f5:b5:bc:75:03:4c:d1:
                    f0:f1:62:af:e1:42:fd:f2:58:20:d5:5e:a2:2c:ff:
                    09:57:e6:4c:55:a2:e1:3c:bf:b5:d6:37:26:52:d0:
                    53:fe:7c:95:d0:11:c5:22:b4:cf:dc:14:13:fc:5e:
                    86:f1:62:3d:0e:5d:8f:ee:d2:47:d5:c0:54:91:9a:
                    58:c2:c9:1d:19:ba:cb:b1:7d:18:ed:42:9c:96:f7:
                    a6:8b:ad:5f:b1:92:4c:79:b0:94:db:34:fa:17:55:
                    82:81:c6:87:78:36:c1:2f:f1:d1:f6:37:7e:0c:06:
                    0b:1b:aa:2c:b4:f2:16:ab:11:c2:7b:45:9d:bb:b4:
                    19:2d:18:2f:3e:f2:82:f6:50:84:2f:67:09:d1:e4:
                    02:47:05:1b:d5:37:63:3d:9f:39:cc:f5:46:fe:1d:
                    6a:fc:8f:fd:d8:f7:ac:0c:f0:eb:2c:53:3e:bb:e3:
                    27:8d:42:33:0b:5d:00:ae:e3:ca:96:9c:c7:95:ec:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:04:6D:29:54:23:F8:CF:43:DB:E4:1D:A0:BA:F1:08:13:89:E6:F6
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3137302e37392e33362e302f32322d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:80:cd:f9:a9:2c:b8:db:4e:5b:54:7c:99:a1:24:62:2f:
         48:72:19:ea:5c:30:3b:3e:1f:dd:42:c6:76:ab:c5:19:a0:fc:
         10:cd:93:fa:a8:eb:cc:e9:18:42:0c:09:86:37:f3:a9:4e:d6:
         0e:8e:2f:7f:4b:3d:54:ad:2b:50:2c:e7:74:74:68:a1:39:ba:
         a5:7c:f9:c4:2b:12:2b:45:41:63:04:d1:91:f6:29:11:68:a0:
         84:37:b9:78:d3:42:50:b2:0b:50:6d:dd:b3:a2:33:64:e9:d2:
         38:b1:22:4a:05:c7:2a:61:71:96:0d:45:c6:f0:f5:bf:c4:9b:
         01:c4:52:3a:2d:aa:e3:df:10:be:fb:79:1e:47:e7:9f:75:73:
         c0:c3:f4:3c:87:91:b5:18:56:3c:82:13:cb:ef:3d:17:cb:da:
         b7:f4:06:0a:59:17:85:b8:92:ca:76:cc:f8:84:c7:98:80:95:
         a0:8f:78:1b:e2:ea:43:70:e0:d3:1d:31:ad:ca:e7:56:6f:3c:
         fa:2e:12:57:90:23:8b:82:dd:a5:74:2a:fe:3e:8b:fc:e4:ae:
         86:bb:29:ab:d5:1d:2a:0c:f9:80:f4:36:96:a4:79:04:1e:d3:
         0f:d3:71:40:ea:86:47:43:27:9a:d2:fe:04:e4:f5:d2:ee:60:
         6b:1f:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:13 2025 by rpki-client