Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3139322e302f31382d3138203d3e203238303234.roa
File:                     3137392e35392e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          fKcf5i8aIa+OwddDyBiODKksgoX/ENHCWjLZmfWBc+k=
Subject key identifier:   4A:A1:46:A3:18:9F:82:1F:83:C3:65:6D:2D:AD:84:6D:CE:E3:BD:89
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       798A74C31B5332CB7164D8580F95FA356DB196CC
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:04 +0000
ROA not before:           Tue 04 Feb 2025 17:58:04 +0000
ROA not after:            Tue 03 Feb 2026 18:03:04 +0000
asID:                     28024
IP address blocks:        179.59.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8a:74:c3:1b:53:32:cb:71:64:d8:58:0f:95:fa:35:6d:b1:96:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:04 2025 GMT
            Not After : Feb  3 18:03:04 2026 GMT
        Subject: CN=4AA146A3189F821F83C3656D2DAD846DCEE3BD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:e5:e2:17:c0:92:36:7f:f7:ac:74:da:a3:
                    91:42:ad:c0:fa:27:28:c0:97:5b:39:84:e9:47:48:
                    5e:14:42:15:2e:60:1d:f7:7b:3f:2d:0d:7c:2a:21:
                    80:58:ca:d6:5c:48:ff:47:4a:b5:9a:a3:df:88:e1:
                    2b:58:69:8d:a9:d4:ff:97:04:f0:a5:63:ca:0c:91:
                    86:e6:0c:84:f4:77:85:9a:7c:ff:90:67:6c:d7:27:
                    05:9c:c2:58:9b:e0:d5:2c:0d:8c:60:7c:d7:84:0c:
                    13:d5:ee:81:f7:28:1c:6d:19:fc:c8:b8:de:ed:be:
                    cf:b8:1a:0d:a2:6f:b3:12:4c:31:ea:4f:37:a9:23:
                    5a:17:57:35:7d:f4:36:4f:ed:ed:05:ea:ab:75:28:
                    af:ac:f1:25:0f:01:7b:b6:b3:e9:6c:01:7a:e2:8d:
                    f3:50:10:ac:36:4b:4a:95:34:32:09:ea:d2:81:22:
                    1c:82:f3:c7:fd:95:4d:85:6d:a8:2e:47:2d:d5:fe:
                    01:22:f8:e2:0d:a6:dd:d4:2c:68:41:ce:36:f3:6e:
                    68:57:57:8f:4f:05:d6:3f:7d:ad:05:59:13:3a:28:
                    c0:22:b2:41:b2:f4:74:3f:85:74:c5:3b:16:29:dc:
                    6a:88:d3:cd:2c:fa:51:78:f8:90:f5:ff:43:40:39:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:46:A3:18:9F:82:1F:83:C3:65:6D:2D:AD:84:6D:CE:E3:BD:89
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3137392e35392e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.59.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:8e:98:7b:28:72:01:7c:4b:fb:21:18:4c:b1:9e:ce:ef:
         bc:a2:0e:f6:d9:1b:3f:96:0e:8a:8d:d5:8f:7b:21:25:fd:1e:
         c2:9e:5d:27:a4:e1:c6:bf:4a:02:e0:4a:8b:03:d0:03:9b:38:
         53:62:78:b2:a3:d4:9a:3c:f5:00:ac:c4:f8:bf:95:fe:e3:6a:
         fe:90:73:30:62:c7:12:bd:f2:b3:31:12:55:a0:d0:51:e2:5c:
         69:bd:8b:f0:ed:41:55:f8:88:35:25:bc:1a:b8:af:f7:d6:d9:
         6f:62:9b:c4:85:7d:37:2e:fe:c7:f9:7c:76:ca:1f:74:ab:9d:
         81:58:e5:0e:bf:92:4b:f0:0d:60:b3:8b:b9:a0:ee:61:8f:85:
         90:b3:c8:1c:ca:96:6c:dc:12:f2:63:67:24:c6:72:43:ab:60:
         14:bc:f4:2b:cf:00:40:73:c0:e5:1c:01:e7:0d:6f:e3:f6:1b:
         10:3f:cd:6e:44:58:b9:dd:cc:94:1c:85:7b:ab:85:5b:5b:37:
         6e:32:80:f8:a8:de:95:87:fd:3e:88:7b:a7:1d:f6:2e:93:e9:
         17:47:87:be:eb:3c:ed:c5:e4:3c:0d:c6:42:96:6d:74:37:df:
         cc:9e:32:27:1c:aa:6d:e1:13:66:04:b2:4f:f1:fe:b0:a0:14:
         c1:2e:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:41:30 2025 by rpki-client