Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa
File:                     3137392e35382e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          oFoMTNX5AQhgZ2abGhSOKlhhl4k3hfmMPzrn5C94/jo=
Subject key identifier:   B0:9A:B6:07:05:CC:D8:ED:D0:C4:E0:06:C3:1B:E1:0A:12:70:26:91
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       2B266921F25EBB844069CE0215BF6D77D091E0ED
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:00 +0000
ROA not before:           Tue 04 Feb 2025 17:58:00 +0000
ROA not after:            Tue 03 Feb 2026 18:03:00 +0000
asID:                     28024
IP address blocks:        179.58.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:26:69:21:f2:5e:bb:84:40:69:ce:02:15:bf:6d:77:d0:91:e0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:00 2025 GMT
            Not After : Feb  3 18:03:00 2026 GMT
        Subject: CN=B09AB60705CCD8EDD0C4E006C31BE10A12702691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:10:c4:a4:a2:fc:8b:fe:9c:d2:70:b5:a7:
                    db:39:4a:a8:09:a3:df:42:4b:4f:e3:41:19:29:0a:
                    d6:c6:f9:81:4b:33:58:f0:2d:dc:64:cd:39:1f:be:
                    97:31:0c:a5:13:c7:30:75:6b:c1:85:ac:6b:99:18:
                    e8:10:4a:f8:39:94:87:66:d6:ed:36:85:07:e9:e7:
                    86:29:ca:52:59:8f:a8:d1:d1:76:84:77:87:3f:ca:
                    55:f3:92:a4:18:eb:66:71:1d:1c:d7:d1:af:37:1b:
                    d5:a0:27:53:e1:25:ab:60:a4:41:cb:76:21:46:65:
                    81:d6:5f:68:f2:ed:af:c6:e1:d1:5a:bc:a7:63:52:
                    e9:17:75:8e:93:0d:39:18:7a:33:5f:21:9d:6f:55:
                    70:b3:fe:94:9e:c0:57:ed:b3:97:a9:7d:3f:25:7a:
                    93:45:13:0d:56:70:17:0a:e5:84:45:ba:22:6a:33:
                    dd:61:73:e9:02:ae:98:1b:ce:f0:23:10:f3:74:94:
                    84:53:f5:c7:61:12:09:bc:32:7b:35:56:50:04:8b:
                    ba:c0:13:4a:53:11:71:99:07:48:bf:71:51:fd:fd:
                    c5:eb:89:aa:ce:67:5f:dd:79:1d:fb:64:d1:63:58:
                    7f:8d:e7:31:48:fd:4a:a7:5a:1b:d9:25:56:b7:35:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9A:B6:07:05:CC:D8:ED:D0:C4:E0:06:C3:1B:E1:0A:12:70:26:91
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35382e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.58.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:15:c8:9c:a0:8a:bc:4f:79:1a:ac:ae:d6:b6:ed:2f:c8:a9:
         2b:e5:50:be:46:82:96:80:b6:90:aa:c4:85:04:7d:48:0e:b1:
         66:00:8a:b9:97:dd:3b:ff:ba:08:04:0e:8a:c1:2a:75:93:8c:
         bb:73:f1:93:aa:7f:95:f1:bb:60:97:de:a4:c5:48:e3:6b:75:
         47:cc:eb:9a:ed:9e:4e:80:cf:b0:6b:73:a7:3f:e7:08:0c:5a:
         36:bb:77:76:24:a4:4d:77:72:64:97:21:9e:4e:6f:aa:bf:68:
         4c:ae:d6:81:9a:1e:2b:a4:ff:fb:bf:80:07:70:23:1b:08:e6:
         de:80:fe:a4:a7:8e:1c:83:03:4a:82:26:0e:84:b0:43:f2:42:
         a0:48:28:2b:29:9c:e2:c1:98:a5:20:ab:cf:a7:5a:a6:c2:d6:
         ed:c1:37:7c:cb:81:73:e9:45:a7:7c:41:07:e1:50:a4:5b:92:
         8f:85:d7:d3:0b:cf:b6:e9:45:72:c0:98:33:18:fe:11:b8:03:
         29:61:e6:c2:0e:7c:24:e5:00:0b:ac:fc:1d:18:cf:82:ee:61:
         08:34:1a:d2:36:b5:f2:f2:10:27:16:01:c6:bb:f5:73:21:82:
         73:d4:ad:5a:b1:4f:bd:c4:33:cc:1f:7f:42:e3:cc:69:f7:49:
         f3:6c:98:b5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKyZpIfJeu4RAac4CFb9td9CR4O0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNTAyMDQxNzU4MDBaFw0yNjAyMDMxODAzMDBaMDMxMTAvBgNV
BAMTKEIwOUFCNjA3MDVDQ0Q4RUREMEM0RTAwNkMzMUJFMTBBMTI3MDI2OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrRDEpKL8i/6c0nC1p9s5SqgJ
o99CS0/jQRkpCtbG+YFLM1jwLdxkzTkfvpcxDKUTxzB1a8GFrGuZGOgQSvg5lIdm
1u02hQfp54YpylJZj6jR0XaEd4c/ylXzkqQY62ZxHRzX0a83G9WgJ1PhJatgpEHL
diFGZYHWX2jy7a/G4dFavKdjUukXdY6TDTkYejNfIZ1vVXCz/pSewFfts5epfT8l
epNFEw1WcBcK5YRFuiJqM91hc+kCrpgbzvAjEPN0lIRT9cdhEgm8Mns1VlAEi7rA
E0pTEXGZB0i/cVH9/cXriarOZ1/deR37ZNFjWH+N5zFI/UqnWhvZJVa3NRc3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUsJq2BwXM2O3QxOAGwxvhChJwJpEwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzczOTJlMzUzODJlMzYzNDJlMzAy
ZjMxMzgyZDMxMzgyMDNkM2UyMDMyMzgzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAazOkAwDQYJ
KoZIhvcNAQELBQADggEBAJAVyJygirxPeRqsrta27S/IqSvlUL5GgpaAtpCqxIUE
fUgOsWYAirmX3Tv/uggEDorBKnWTjLtz8ZOqf5Xxu2CX3qTFSONrdUfM65rtnk6A
z7Brc6c/5wgMWja7d3YkpE13cmSXIZ5Ob6q/aEyu1oGaHiuk//u/gAdwIxsI5t6A
/qSnjhyDA0qCJg6EsEPyQqBIKCspnOLBmKUgq8+nWqbC1u3BN3zLgXPpRad8QQfh
UKRbko+F19MLz7bpRXLAmDMY/hG4Aylh5sIOfCTlAAus/B0Yz4LuYQg0GtI2tfLy
ECcWAca79XMhgnPUrVqxT73EM8wff0LjzGn3SfNsmLU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:40:08 2025 by rpki-client