Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3132382e302f31382d3138203d3e203238303234.roa
File:                     3137392e35392e3132382e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          vhxdkTP8/WD8Bup+KlZ/tXMc+dUbTRmFb6MOzwS82Z0=
Subject key identifier:   A4:C8:90:A9:59:EC:BC:3F:9A:76:84:11:FD:DE:44:9D:1A:A2:1A:69
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       3F7B12ECF1CF5405D3866E61766BD60973266D53
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3132382e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:02 +0000
ROA not before:           Tue 04 Feb 2025 17:58:02 +0000
ROA not after:            Tue 03 Feb 2026 18:03:02 +0000
asID:                     28024
IP address blocks:        179.59.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7b:12:ec:f1:cf:54:05:d3:86:6e:61:76:6b:d6:09:73:26:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:02 2025 GMT
            Not After : Feb  3 18:03:02 2026 GMT
        Subject: CN=A4C890A959ECBC3F9A768411FDDE449D1AA21A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:04:51:dd:08:d2:db:0b:85:1a:14:ad:23:
                    1f:d1:e7:ac:8d:ec:9c:17:59:58:de:ba:f5:70:fd:
                    b8:81:93:3d:5b:14:d2:f6:4f:6d:3a:52:4b:3a:59:
                    6e:25:34:f5:7c:4f:e4:0a:a5:40:a6:6b:7d:df:c6:
                    0f:d0:51:f6:e9:15:55:20:27:a3:47:62:f3:82:d3:
                    81:55:70:93:62:cf:44:4e:b4:9e:f3:1b:f2:1d:f3:
                    91:f0:7c:42:25:d1:cf:67:19:fa:74:7f:87:1b:96:
                    27:f4:42:67:76:b7:36:60:1a:00:c2:e5:00:98:26:
                    fc:2b:51:47:d2:af:3b:18:9c:9b:4f:8c:21:15:4c:
                    01:b6:c5:d0:9e:43:de:56:93:f1:62:47:6a:6d:15:
                    a8:90:74:7b:e8:ab:8b:6c:dc:74:2f:dd:01:c1:46:
                    e3:09:7b:f6:19:62:f7:2b:b3:20:32:79:f6:56:36:
                    96:49:a4:b8:ed:65:32:df:b3:08:1a:b0:d3:2b:4c:
                    fd:0f:9e:ba:ee:d9:f2:fe:bd:59:77:a8:21:8d:29:
                    9f:0a:c9:55:8a:c7:37:5c:1b:c8:fd:a0:56:1b:89:
                    b2:6a:26:25:20:4a:6a:7c:0d:36:a9:cb:fa:41:74:
                    0e:82:dd:ee:d8:88:3a:0b:09:35:24:2e:c7:6b:71:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C8:90:A9:59:EC:BC:3F:9A:76:84:11:FD:DE:44:9D:1A:A2:1A:69
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3132382e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.59.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:6f:8f:1a:78:a5:29:c5:22:84:c0:dd:49:16:b6:ef:00:
         16:89:71:5f:5e:2b:c4:77:96:f8:30:5d:e6:32:cd:84:21:fb:
         17:3a:a6:84:36:f1:6a:1d:b3:de:59:be:2e:17:75:9d:e3:49:
         d9:2f:5e:c3:fc:85:f8:2d:5f:c8:ea:e1:46:70:c8:a8:0a:20:
         9b:92:b2:4f:64:31:b3:49:7d:6b:3c:2d:3f:1c:eb:a7:4e:34:
         9c:1b:cc:07:cb:31:06:7b:64:3b:bf:89:54:d9:a5:14:90:f6:
         21:13:9c:3c:5a:d3:7a:c8:14:b2:86:51:58:02:a6:41:19:fb:
         8b:9e:76:06:a0:10:0f:41:0e:73:f3:8a:48:a4:0d:d5:57:87:
         80:21:25:17:a7:3d:bc:1e:5e:46:16:68:c4:79:a8:02:f6:d1:
         3c:c5:e9:11:bf:57:a8:32:0d:8f:9f:c0:af:7d:3a:10:62:d7:
         93:5a:9a:dc:69:fb:ac:86:6c:c7:bd:c1:e8:55:11:19:0f:9e:
         5d:0a:60:7e:e8:b0:b0:9e:94:77:73:3f:42:f1:2d:93:c2:28:
         94:53:03:87:f1:2e:2b:ca:e8:af:3a:e4:14:b8:4c:d7:e9:ea:
         c8:6a:fd:8d:16:ad:f9:f3:9b:59:1d:fe:47:87:8b:fd:32:52:
         7c:92:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:23 2025 by rpki-client