Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137392e36302e3234382e302f32312d3234203d3e20323633373639.roa
File:                     3137392e36302e3234382e302f32312d3234203d3e20323633373639.roa (raw, json)
Hash identifier:          OQUGghoCQdTRLNEd1qqwufiL5fT7Gipua315Renn2hQ=
Subject key identifier:   F0:64:B1:BF:50:43:E4:57:1F:CB:A6:90:AA:8D:1C:48:1B:F1:71:C4
Certificate issuer:       /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial:       1BB88353ADC5F5EB42A7A7676CB57CEFC89E240B
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137392e36302e3234382e302f32312d3234203d3e20323633373639.roa
Signing time:             Tue 04 Feb 2025 18:26:14 +0000
ROA not before:           Tue 04 Feb 2025 18:21:14 +0000
ROA not after:            Tue 03 Feb 2026 18:26:14 +0000
asID:                     263769
IP address blocks:        179.60.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b8:83:53:ad:c5:f5:eb:42:a7:a7:67:6c:b5:7c:ef:c8:9e:24:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
        Validity
            Not Before: Feb  4 18:21:14 2025 GMT
            Not After : Feb  3 18:26:14 2026 GMT
        Subject: CN=F064B1BF5043E4571FCBA690AA8D1C481BF171C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:b1:fd:b1:17:3a:63:34:0b:0a:36:7d:f5:
                    dc:aa:97:9a:b7:38:f1:76:73:38:ce:eb:94:c4:3d:
                    bc:a0:fb:2a:2e:26:38:e1:10:2f:2d:b8:cb:f9:86:
                    61:cf:74:d7:d2:6c:72:02:47:43:1c:aa:e8:02:6e:
                    e7:d2:e2:34:99:16:72:55:e0:7e:c5:00:a3:61:92:
                    1d:3e:aa:48:b5:f4:c3:94:99:d4:d1:9b:ff:af:be:
                    f7:2a:c3:df:b6:50:f7:db:bb:a9:50:e8:a0:11:4a:
                    a8:b2:39:c9:90:bb:47:b9:2a:ee:20:27:7a:3c:86:
                    85:75:a6:e4:81:bc:8c:d5:ed:05:30:43:79:eb:3b:
                    50:9d:e5:24:15:54:05:97:6d:a7:0e:22:91:ad:bc:
                    e8:b8:ec:43:7c:e3:ea:7c:06:7d:d3:93:08:b2:88:
                    08:64:95:00:65:ff:af:b7:55:1f:b7:c2:da:49:72:
                    ba:9e:2b:be:ef:f3:80:47:23:e3:0a:4d:8d:35:f8:
                    29:d2:51:19:b4:9b:ad:6b:f7:96:c1:f8:a9:8d:d7:
                    64:7e:54:82:42:61:0d:79:69:30:b3:a0:1f:46:6b:
                    16:bf:5f:ec:84:75:d9:3f:c8:65:7d:c1:dc:2b:45:
                    a6:e3:ad:44:2f:60:fb:88:cf:65:60:cf:e7:f7:ea:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:B1:BF:50:43:E4:57:1F:CB:A6:90:AA:8D:1C:48:1B:F1:71:C4
            X509v3 Authority Key Identifier:
                keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137392e36302e3234382e302f32312d3234203d3e20323633373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:42:53:e3:e8:92:02:e0:83:81:68:db:a3:cf:93:84:f8:
         72:57:48:09:ba:1a:8b:34:01:ca:5d:ce:4b:0e:9a:57:d9:b7:
         52:f5:ac:44:76:4a:a1:1c:70:d9:24:e0:d3:53:41:22:cb:b5:
         46:16:b1:07:63:73:37:d2:7b:2a:10:39:56:8b:66:3e:7d:c7:
         2f:91:28:c9:07:c6:73:e7:82:9c:e7:99:29:59:c8:e7:e4:a4:
         e5:c9:57:e5:d1:3a:f0:b0:ba:db:cf:c6:c0:06:77:b0:f6:fe:
         4c:d4:3a:2c:66:34:c4:b1:cc:f4:b5:36:72:57:11:93:9a:cc:
         79:2f:ba:b4:e5:ba:0a:90:33:c7:5d:ef:fa:d6:60:99:74:77:
         e1:ba:f3:73:1b:e0:b8:86:33:b3:fb:28:f3:26:27:14:40:25:
         3d:49:31:05:ca:e9:51:f7:64:ce:c9:ec:2f:83:ba:f7:e5:5f:
         bf:e3:d4:31:5d:d1:0f:ed:63:12:c7:b4:53:b4:0c:f1:3d:d4:
         b7:d7:77:d4:a7:dc:be:8b:45:9f:bc:cb:8b:c5:0e:b8:6d:cf:
         2f:fb:10:03:1b:4c:33:52:99:3c:c4:e6:68:84:93:87:20:7c:
         85:35:ed:de:52:4c:64:8d:5e:94:4e:f5:8c:c3:28:28:8a:e8:
         71:f5:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client