Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e302e302f31362d3136203d3e203238303234.roa
File:                     3137392e35392e302e302f31362d3136203d3e203238303234.roa (raw, json)
Hash identifier:          8/j4g/EfZ+aJjPcWc4zHCJGJkQlKkglbBXN3LETSB78=
Subject key identifier:   AE:88:A2:12:2F:9D:4F:4C:F8:26:8C:72:39:C0:0D:7F:AB:54:28:51
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       632B99357C024299EF3CC156FE1DB8EC347AE23B
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e302e302f31362d3136203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:04 +0000
ROA not before:           Tue 04 Feb 2025 17:58:04 +0000
ROA not after:            Tue 03 Feb 2026 18:03:04 +0000
asID:                     28024
IP address blocks:        179.59.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2b:99:35:7c:02:42:99:ef:3c:c1:56:fe:1d:b8:ec:34:7a:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:04 2025 GMT
            Not After : Feb  3 18:03:04 2026 GMT
        Subject: CN=AE88A2122F9D4F4CF8268C7239C00D7FAB542851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:cd:a7:53:f7:f1:a3:de:10:5c:ea:62:13:
                    8a:8a:87:e8:4c:4e:d5:b1:a4:f7:32:a1:e2:5b:de:
                    7d:de:43:38:82:13:e8:9a:e2:78:18:e5:f1:d3:2c:
                    05:5a:f7:8c:57:46:b4:3f:c9:07:7d:67:30:2e:b2:
                    3d:11:f9:3f:52:8f:a4:ec:4d:05:ec:ac:74:25:58:
                    12:1b:99:1a:de:6a:92:27:a4:95:86:75:82:eb:24:
                    2a:9a:80:7f:2c:22:80:c6:f8:10:08:47:14:11:9c:
                    d6:21:4f:9e:e1:6b:35:b0:db:59:66:a7:95:e0:db:
                    6d:5b:1e:cd:1f:7a:3d:a6:a5:f7:98:aa:a0:fb:f9:
                    7c:68:1c:4a:6f:82:c0:58:27:a2:93:78:63:90:c6:
                    fa:49:53:7a:f0:67:87:62:be:01:53:fd:66:8d:ce:
                    da:f0:a8:ce:0e:d4:9b:f6:18:38:5c:42:59:91:c6:
                    73:0b:6b:68:13:2b:2a:c4:cd:4a:79:09:4f:b3:a9:
                    3f:d6:39:87:0c:5d:71:7f:0b:c1:90:aa:ad:e1:5a:
                    bd:55:da:d2:d8:85:bc:5b:8a:f9:48:b1:60:1b:3a:
                    83:d7:45:2a:28:17:5b:5e:69:cf:7f:6c:5f:54:c5:
                    d0:7a:ee:90:aa:19:08:13:93:b5:f2:93:39:04:34:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:A2:12:2F:9D:4F:4C:F8:26:8C:72:39:C0:0D:7F:AB:54:28:51
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e302e302f31362d3136203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:be:b9:aa:06:a5:0f:d3:3a:03:f2:e4:1d:1e:87:ac:d2:8f:
         25:68:da:ee:3f:79:8d:24:a5:2f:a5:7c:a7:6e:05:7d:38:d4:
         44:b3:c4:c7:7b:bb:fa:71:52:61:5e:fe:05:19:3a:e7:7a:eb:
         6a:fd:d5:24:60:df:16:e1:49:d6:3c:0d:08:37:f3:00:c2:65:
         47:1a:b7:e1:48:2b:98:32:df:36:c0:e9:57:cc:97:6c:cb:02:
         f0:69:bc:ce:3d:23:93:cb:4e:ad:ed:18:c6:8c:1b:49:0e:31:
         f1:f1:85:e8:d2:29:00:ab:fb:64:53:5c:ff:c5:20:17:93:18:
         cb:6d:d7:92:b9:d2:e8:72:b9:e9:5d:71:e7:30:85:69:f3:e5:
         db:9b:97:8d:ba:3e:b3:eb:9a:b1:13:2d:5f:24:8e:ce:68:38:
         0b:63:72:34:1e:ea:2d:61:db:d6:9c:bd:f9:00:93:77:5d:8b:
         9b:fe:6b:44:1a:eb:04:66:e4:fc:dc:cf:3a:10:37:b9:09:a2:
         14:41:98:60:67:67:75:ed:a8:69:51:ce:5d:21:ba:41:2a:42:
         ff:8f:e0:cc:21:33:0b:11:ae:41:24:b2:04:53:fe:f5:89:5b:
         c8:2b:ff:e7:d7:cc:c7:b2:6d:03:04:77:29:df:96:8a:c3:f0:
         22:18:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:39:08 2025 by rpki-client