Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e302e302f31362d3136203d3e203238303234.roa
File:                     3137392e35382e302e302f31362d3136203d3e203238303234.roa (raw, json)
Hash identifier:          FvdTKsTxY9Rwdp8tisYRK4hfKsruyzk1pZCroMkGcbk=
Subject key identifier:   63:65:70:F3:8E:95:2A:AB:5E:3B:16:7A:D3:2C:13:B8:B8:E8:5D:26
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       2677046647965CD53CE032FD128BFD14B4F70F47
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e302e302f31362d3136203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:05 +0000
ROA not before:           Tue 04 Feb 2025 17:58:05 +0000
ROA not after:            Tue 03 Feb 2026 18:03:05 +0000
asID:                     28024
IP address blocks:        179.58.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:77:04:66:47:96:5c:d5:3c:e0:32:fd:12:8b:fd:14:b4:f7:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:05 2025 GMT
            Not After : Feb  3 18:03:05 2026 GMT
        Subject: CN=636570F38E952AAB5E3B167AD32C13B8B8E85D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:42:02:67:bb:ce:ef:f5:54:01:23:4d:c0:
                    14:d8:ef:7c:40:e6:e9:fb:ff:81:fa:35:ed:6b:17:
                    97:fe:58:88:a4:d8:18:05:f2:7a:53:8a:77:6a:e1:
                    c6:42:c2:81:46:80:1f:13:5d:72:07:a2:ec:f7:71:
                    3f:ec:7a:1f:63:d4:c5:f4:8f:6f:17:fa:e4:6d:d7:
                    f5:c2:ef:ea:b1:ca:29:a9:c1:12:30:40:19:4d:68:
                    ba:c6:41:32:6c:61:c6:74:dc:1c:2a:4e:e6:f7:11:
                    8b:77:19:fc:87:c6:25:7f:99:9e:b3:59:0d:32:45:
                    7a:eb:fd:ff:9e:31:68:9a:fb:89:6e:b7:07:f8:6c:
                    ee:d2:a5:51:a8:f6:b1:25:0d:72:58:8a:e9:f3:02:
                    5e:44:c6:f4:39:9e:30:c4:ce:65:33:4a:d0:43:ba:
                    a7:a1:ef:9e:98:32:b7:ea:fb:37:c2:d7:b7:ef:fd:
                    d5:b6:f9:63:60:fa:79:fa:53:80:ee:6b:40:81:e5:
                    11:24:92:dd:48:c9:44:f6:69:db:76:74:3a:70:83:
                    c0:b0:71:53:88:ec:dc:98:db:87:50:24:92:d5:98:
                    6d:ad:1f:65:d8:8d:a1:6d:55:9c:b8:4e:56:5b:91:
                    e4:09:b5:51:36:84:0c:18:9a:4a:6a:00:08:19:75:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:65:70:F3:8E:95:2A:AB:5E:3B:16:7A:D3:2C:13:B8:B8:E8:5D:26
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e302e302f31362d3136203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:47:32:de:a0:30:51:ff:3b:dc:19:4e:a3:b3:3d:73:e8:63:
         d7:60:05:ea:5d:c3:06:f1:a9:89:1a:1a:50:8a:d8:1f:5c:5b:
         58:43:22:27:73:6c:ac:b6:f4:51:98:26:a9:76:3c:e1:bc:10:
         f3:77:46:d4:89:42:54:86:9e:39:75:16:be:4e:6a:58:39:bd:
         f4:34:0f:f9:3e:4e:ec:83:c4:33:ae:78:a1:40:08:db:dc:42:
         10:e7:bf:76:d4:05:95:00:f6:87:3d:02:ec:fa:75:a9:89:ea:
         90:84:f8:a8:64:44:0c:d7:66:4c:18:8a:ad:a0:c5:96:10:fb:
         3a:4e:b8:e7:ae:b6:b9:05:1f:2a:51:c4:53:40:66:6a:fb:d6:
         dd:da:e7:eb:e6:67:2f:dc:45:f7:bb:33:bf:de:b2:66:8a:44:
         15:6a:93:9e:46:37:e7:63:0a:58:39:a9:0a:0a:fe:25:60:85:
         2e:39:5d:49:da:d4:d4:ef:d9:49:35:41:94:df:bc:01:5b:02:
         42:1b:3b:ec:3d:9a:89:da:9b:c7:62:d1:6c:60:4b:f8:b1:f9:
         db:6c:43:2c:3d:1e:ff:b8:20:87:71:0c:e5:26:68:de:c6:bb:
         7b:b9:9a:50:80:7d:f1:c1:fc:6a:d8:ef:a6:9a:55:01:17:2e:
         0b:ff:99:f5
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUJncEZkeWXNU84DL9Eov9FLT3D0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNTAyMDQxNzU4MDVaFw0yNjAyMDMxODAzMDVaMDMxMTAvBgNV
BAMTKDYzNjU3MEYzOEU5NTJBQUI1RTNCMTY3QUQzMkMxM0I4QjhFODVEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvA0ICZ7vO7/VUASNNwBTY73xA
5un7/4H6Ne1rF5f+WIik2BgF8npTindq4cZCwoFGgB8TXXIHouz3cT/seh9j1MX0
j28X+uRt1/XC7+qxyimpwRIwQBlNaLrGQTJsYcZ03BwqTub3EYt3GfyHxiV/mZ6z
WQ0yRXrr/f+eMWia+4lutwf4bO7SpVGo9rElDXJYiunzAl5ExvQ5njDEzmUzStBD
uqeh756YMrfq+zfC17fv/dW2+WNg+nn6U4Dua0CB5REkkt1IyUT2adt2dDpwg8Cw
cVOI7NyY24dQJJLVmG2tH2XYjaFtVZy4TlZbkeQJtVE2hAwYmkpqAAgZdVAhAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUY2Vw846VKqteOxZ60ywTuLjoXSYwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzczOTJlMzUzODJlMzAyZTMwMmYz
MTM2MmQzMTM2MjAzZDNlMjAzMjM4MzAzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAszowDQYJKoZI
hvcNAQELBQADggEBACVHMt6gMFH/O9wZTqOzPXPoY9dgBepdwwbxqYkaGlCK2B9c
W1hDIidzbKy29FGYJql2POG8EPN3RtSJQlSGnjl1Fr5Oalg5vfQ0D/k+TuyDxDOu
eKFACNvcQhDnv3bUBZUA9oc9Auz6damJ6pCE+KhkRAzXZkwYiq2gxZYQ+zpOuOeu
trkFHypRxFNAZmr71t3a5+vmZy/cRfe7M7/esmaKRBVqk55GN+djClg5qQoK/iVg
hS45XUna1NTv2Uk1QZTfvAFbAkIbO+w9monam8di0WxgS/ix+dtsQyw9Hv+4IIdx
DOUmaN7Gu3u5mlCAffHB/GrY76aaVQEXLgv/mfU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:52 2025 by rpki-client