Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3137392e312e3136302e302f32302d3234203d3e20323632353839.roa
File:                     3137392e312e3136302e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          hbclqZUT1zlo0BpeMsjjT8SujqxcKKUsM1F4G5Xba9k=
Subject key identifier:   27:03:00:D1:8D:69:1B:08:08:97:48:A9:DE:E5:C7:7F:AC:9E:88:E8
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       7062ED16AC2C7FD562843F9BA57EAA507E340636
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3137392e312e3136302e302f32302d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:35:31 +0000
ROA not before:           Tue 04 Feb 2025 18:30:31 +0000
ROA not after:            Tue 03 Feb 2026 18:35:31 +0000
asID:                     262589
IP address blocks:        179.1.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:62:ed:16:ac:2c:7f:d5:62:84:3f:9b:a5:7e:aa:50:7e:34:06:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Feb  4 18:30:31 2025 GMT
            Not After : Feb  3 18:35:31 2026 GMT
        Subject: CN=270300D18D691B08089748A9DEE5C77FAC9E88E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:29:4f:59:e6:84:0b:1a:48:45:af:d0:94:
                    83:2b:e9:14:a2:62:27:ba:2f:a5:78:0f:ab:ce:59:
                    ce:5e:6b:69:63:7d:81:ff:66:0e:76:d5:09:7a:52:
                    99:76:31:38:34:0d:34:c4:7c:4f:05:93:db:f8:fb:
                    d6:ad:92:97:bc:84:5b:37:5a:3c:86:55:2a:75:8f:
                    5c:f5:21:19:5a:f2:c9:8a:90:66:d1:e7:73:a5:84:
                    34:e8:91:74:39:ce:e9:ff:d5:2d:ad:5e:49:fc:13:
                    19:96:11:b4:65:8b:e8:bb:5d:85:80:ee:85:45:08:
                    08:bd:b1:e8:85:60:4b:4c:d8:84:b7:77:92:0d:42:
                    11:52:48:35:1d:66:62:8b:3b:67:e1:9c:ea:66:44:
                    cc:e6:24:6f:ac:59:0b:7a:e9:f0:34:a4:41:66:f0:
                    df:a9:dd:1e:89:cf:0d:e0:11:fa:29:a1:5d:e1:e0:
                    a1:33:c9:90:df:da:14:c0:6d:7a:89:53:04:4f:50:
                    98:b2:12:b1:92:68:84:48:ec:ce:e8:1d:ce:b8:66:
                    46:7d:99:6e:07:bb:d1:d3:bf:75:4b:4c:c7:52:fa:
                    0e:9c:86:f3:ab:32:f6:d6:75:d1:4c:c7:81:93:d4:
                    62:49:84:45:90:26:e2:f9:80:37:91:c6:ab:59:20:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:00:D1:8D:69:1B:08:08:97:48:A9:DE:E5:C7:7F:AC:9E:88:E8
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3137392e312e3136302e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:99:dd:6b:11:31:21:07:c1:26:71:29:96:78:15:f4:7c:
         f4:f8:4e:d5:95:84:ea:1f:e3:55:52:3e:37:5d:6d:85:3d:ec:
         cf:c1:91:4c:16:8d:1e:59:63:58:f0:fa:de:93:f8:9c:5c:0a:
         20:57:17:b7:99:53:52:50:de:b3:a0:12:ca:10:a1:6a:a0:a9:
         85:6d:23:2a:4a:31:ce:0e:c7:57:3f:24:fd:bb:6a:24:46:66:
         03:69:e1:64:38:94:71:98:ca:8d:58:09:5f:98:aa:c5:65:37:
         09:62:6b:c0:55:04:0d:1d:fa:f8:7e:c5:b5:12:44:95:de:d9:
         65:76:db:84:16:4c:70:3f:90:ea:6a:c2:96:70:36:b5:66:14:
         2b:a3:d2:fd:b7:99:94:f0:14:5b:c6:a8:3b:61:04:86:74:a4:
         f6:3c:3c:e5:a9:25:d1:b1:a5:98:09:69:cb:34:7b:02:0e:4b:
         38:cb:9f:9b:9d:f4:12:05:12:94:d4:23:ee:36:71:a8:48:bd:
         1c:66:50:17:d9:8b:93:3c:37:c3:16:19:39:e4:7a:59:00:5e:
         36:da:15:e8:09:e3:b6:ca:19:96:b4:a5:0c:a4:6d:47:e0:3f:
         51:87:2b:36:28:b9:ac:2c:dd:37:f6:5b:a7:d7:5d:bc:9f:ba:
         3a:e3:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:25 2025 by rpki-client