Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa
File:                     3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa (raw, json)
Hash identifier:          12IP9YcMgs+TM/N6o6rz5Wgfl7/CPKYnyqptcHQVU+Q=
Subject key identifier:   91:D4:39:3D:12:C5:D8:C3:F7:4E:E7:6E:67:36:E3:4F:DC:86:79:0E
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       751DFCF40580CFBE4EBE74C272D32F8A5F3C64CC
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa
Signing time:             Tue 04 Feb 2025 18:15:08 +0000
ROA not before:           Tue 04 Feb 2025 18:10:08 +0000
ROA not after:            Tue 03 Feb 2026 18:15:08 +0000
asID:                     271903
IP address blocks:        179.49.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1d:fc:f4:05:80:cf:be:4e:be:74:c2:72:d3:2f:8a:5f:3c:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Feb  4 18:10:08 2025 GMT
            Not After : Feb  3 18:15:08 2026 GMT
        Subject: CN=91D4393D12C5D8C3F74EE76E6736E34FDC86790E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8e:11:72:4f:b5:22:20:32:c8:ea:49:f9:b0:
                    6c:4d:db:b9:d2:40:56:3d:6f:a3:10:b0:7e:20:ca:
                    44:1a:e9:4b:89:53:37:83:6e:13:2b:17:54:18:93:
                    11:9a:c5:1c:69:92:9d:f1:24:fb:fd:91:df:9f:60:
                    c6:2f:46:58:bb:69:2e:66:a0:d8:15:8e:5e:bf:39:
                    58:60:27:1b:a0:2c:ed:26:59:25:8b:98:32:ad:d7:
                    0d:5b:16:92:b8:fe:60:ee:ff:0c:18:20:74:40:f0:
                    64:60:5e:5d:f3:28:50:bb:88:c8:14:c5:c3:1f:28:
                    79:f4:ed:a1:77:e2:1b:a8:a5:56:c3:a9:26:11:2a:
                    a9:03:82:8c:4a:1d:e5:3c:18:15:49:74:cf:55:de:
                    b2:31:f3:24:e8:63:57:1c:fb:fa:9c:c1:1b:69:5e:
                    97:ff:24:1b:60:ac:b0:9d:84:1d:b4:c8:82:a2:57:
                    3e:27:20:65:da:6e:20:77:d2:87:07:e7:8d:46:18:
                    f1:eb:e0:a0:c3:de:9a:22:f0:3d:04:d7:15:ad:78:
                    40:ff:8a:dc:e4:9c:f4:5b:3e:26:2f:3d:d0:76:5a:
                    aa:2c:b1:c4:06:fa:5a:d2:58:8e:32:71:e1:73:82:
                    e1:ad:d1:97:8a:b8:43:9e:b8:13:c6:a6:8c:07:51:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D4:39:3D:12:C5:D8:C3:F7:4E:E7:6E:67:36:E3:4F:DC:86:79:0E
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/3137392e34392e3232342e302f32322d3234203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:bb:87:46:34:3b:93:44:dc:a2:80:36:55:ec:29:c4:17:
         9b:79:3b:71:5a:cd:3a:67:ee:ae:71:3d:a4:32:4b:31:7a:e9:
         a3:30:0c:a7:27:31:4b:b4:8c:35:53:c5:c8:a9:f9:0b:95:07:
         ab:54:2e:84:a7:29:35:46:a5:21:3e:76:42:65:13:91:e2:84:
         22:f5:f9:19:80:15:80:c4:b2:7c:1d:d3:75:37:66:2f:a4:85:
         2d:c3:22:0a:58:b4:a0:62:83:52:d3:92:1d:bf:1e:af:8a:57:
         46:05:11:67:87:45:e1:fc:a5:f7:d2:fe:1d:9a:d4:47:40:4d:
         4c:74:ef:4d:07:c3:53:0a:22:af:94:1d:11:e9:f2:34:4c:72:
         31:bf:d5:8c:37:d6:42:5e:4d:f2:e5:33:8b:8b:85:fb:ba:0d:
         ba:08:c8:c7:18:a5:82:9a:84:3e:17:aa:41:db:a5:93:76:c9:
         06:85:5f:58:4a:f6:bd:8a:f1:e9:2d:90:29:b6:55:bf:8f:99:
         11:49:65:91:5e:5c:44:f8:69:8a:7f:5d:d7:c4:07:d8:2b:1b:
         b6:6f:58:27:7f:a9:6d:ea:1c:50:74:19:51:14:a1:95:59:17:
         26:d9:da:87:05:ed:89:f0:3f:37:b0:1a:ed:2c:7d:6b:e5:35:
         aa:1b:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:37:29 2025 by rpki-client