Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa
File:                     3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa (raw, json)
Hash identifier:          frR2f8T+fqlZWfSvxHf8QE/IRinQSKB0YbmUWVp0XV0=
Subject key identifier:   3F:E4:E1:13:D0:E8:A4:90:50:49:D7:5C:0C:5E:86:B0:F8:9B:56:27
Certificate issuer:       /CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
Certificate serial:       24917B4B0D310FAD170B92C44F260EF4CED269BB
Authority key identifier: A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa
Signing time:             Tue 04 Feb 2025 20:04:18 +0000
ROA not before:           Tue 04 Feb 2025 19:59:18 +0000
ROA not after:            Tue 03 Feb 2026 20:04:18 +0000
asID:                     272028
IP address blocks:        179.189.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:91:7b:4b:0d:31:0f:ad:17:0b:92:c4:4f:26:0e:f4:ce:d2:69:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
        Validity
            Not Before: Feb  4 19:59:18 2025 GMT
            Not After : Feb  3 20:04:18 2026 GMT
        Subject: CN=3FE4E113D0E8A4905049D75C0C5E86B0F89B5627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:08:62:53:d1:ce:fd:13:d1:4f:9b:66:f8:
                    4c:c8:cf:48:e2:8f:b0:7d:c8:5a:40:18:53:49:e4:
                    f3:32:ac:50:fe:18:a4:50:ea:fd:cc:8b:f1:2e:9a:
                    d3:14:da:64:2d:16:06:f1:a5:ae:fa:89:f2:af:cf:
                    d6:93:65:5d:04:fe:ee:ab:dd:ad:f9:94:f6:10:d2:
                    50:d6:ad:ca:9f:49:4c:dd:ff:a7:d8:42:29:15:36:
                    b2:ea:70:84:cc:d0:77:f9:ba:f4:70:85:f1:b3:83:
                    55:5d:24:6d:95:a6:b2:e9:31:74:5a:ac:9b:51:f5:
                    ab:8b:97:79:8d:90:36:7a:f9:33:7e:ad:a5:95:6e:
                    7e:cd:bc:95:5f:cb:73:c3:10:c5:2e:55:26:21:db:
                    32:5f:7b:ee:c9:81:f5:eb:75:c2:94:59:e3:a4:09:
                    28:0a:14:d9:c2:dc:5e:f6:ab:c4:93:33:fa:01:34:
                    37:23:c6:bf:01:ca:7a:1c:d1:41:65:4f:73:af:0e:
                    4f:8e:5e:1c:b0:f1:46:e9:22:06:8f:ac:10:5f:f6:
                    34:e6:a8:09:e7:18:63:ca:34:b6:d6:3d:ce:27:cb:
                    b8:84:3b:44:88:57:5d:95:50:a5:2e:0f:23:29:de:
                    ef:45:ec:eb:6c:4e:dc:98:bf:a8:92:d2:0c:ba:8f:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:E1:13:D0:E8:A4:90:50:49:D7:5C:0C:5E:86:B0:F8:9B:56:27
            X509v3 Authority Key Identifier:
                keyid:A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:c3:93:49:8d:86:16:9f:4f:2d:dd:82:18:19:75:81:91:
         85:d8:31:94:4a:b7:69:14:8f:05:ce:bf:78:f5:4b:57:20:5e:
         20:01:cd:e1:66:d0:ea:c2:c1:3c:08:61:6a:3c:bd:7a:f5:20:
         08:cb:4e:be:7f:c3:39:df:e9:fa:ce:24:84:87:52:24:7a:44:
         63:f7:60:7c:80:c5:84:fb:5b:5b:fc:6f:7a:da:8a:4d:d5:76:
         30:f3:5c:f6:8e:88:87:39:16:20:b6:1e:d9:a7:9a:b9:1b:b8:
         8c:99:4b:1a:54:77:25:84:af:f8:07:56:d3:05:54:f4:35:33:
         65:4e:c3:d5:06:ba:f0:be:86:f1:a8:82:52:1e:4e:43:4d:1b:
         c9:1f:a7:5b:8d:01:a9:ca:25:05:52:9a:77:ac:50:c0:61:66:
         6c:b6:fb:73:23:cd:26:56:12:a9:3b:f7:7c:ad:f8:d5:15:00:
         d9:b0:a1:29:72:21:ba:d0:95:67:b0:0c:5b:aa:dd:f9:66:07:
         7c:25:c9:98:c3:ee:09:f0:89:7e:4a:fe:4f:e2:83:60:85:f8:
         5f:fd:91:f5:84:69:fa:99:fa:d1:c8:b5:58:c1:bb:a7:6b:2a:
         22:30:a9:c6:c5:e6:c4:de:8a:a2:11:2c:db:3f:7b:3d:3e:d9:
         eb:b8:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:30 2025 by rpki-client