Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa
File:                     3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa (raw, json)
Hash identifier:          yUiiHVDfyorsK7k13cl4C37sfYPJ4Yv+D8BI1rUVCIc=
Subject key identifier:   E6:FB:BE:AE:DE:A2:1F:42:C0:71:D9:16:EF:B5:E8:25:68:CA:F8:94
Certificate issuer:       /CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
Certificate serial:       4AE0D59E96D5AD2B0E9BE138985E089FDD688AA0
Authority key identifier: B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa
Signing time:             Tue 04 Feb 2025 18:52:02 +0000
ROA not before:           Tue 04 Feb 2025 18:47:02 +0000
ROA not after:            Tue 03 Feb 2026 18:52:02 +0000
asID:                     270102
IP address blocks:        179.49.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:d5:9e:96:d5:ad:2b:0e:9b:e1:38:98:5e:08:9f:dd:68:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A16D868A803CE9E68217F72B7CE67CC7541FB7
        Validity
            Not Before: Feb  4 18:47:02 2025 GMT
            Not After : Feb  3 18:52:02 2026 GMT
        Subject: CN=E6FBBEAEDEA21F42C071D916EFB5E82568CAF894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:f5:fb:5c:ab:52:af:dc:63:bf:38:34:53:
                    b0:40:57:76:8d:8d:59:be:04:4d:2e:32:ef:84:ef:
                    7e:5b:d9:d6:ed:35:3e:1b:08:06:d1:f7:fd:47:f7:
                    8c:a6:d7:cb:73:7f:50:71:db:09:e6:5a:1f:24:37:
                    66:4d:26:21:7b:5c:da:23:1b:f7:85:cd:2e:2e:49:
                    ea:b3:86:2b:cc:0a:55:d4:67:7f:18:9a:8e:0e:b8:
                    29:2f:ab:47:21:fb:bf:67:cc:00:c0:e8:a8:2e:35:
                    78:1d:4b:37:fb:6a:62:71:4b:f9:09:43:d8:2e:89:
                    b1:e5:71:d6:d0:02:18:c4:43:de:b9:09:f5:02:ff:
                    5f:fd:b1:a7:4a:cf:09:2e:b6:02:10:77:ed:aa:7d:
                    89:45:c5:88:35:4b:fc:a8:88:cf:4c:6d:29:6c:b2:
                    52:4c:ee:0f:7c:57:cc:fd:ae:17:f7:66:a7:47:fd:
                    b0:d9:7c:42:25:5d:d5:b7:8b:52:03:d0:d1:1f:f1:
                    91:05:f9:4c:10:d2:c7:6c:27:e4:01:33:a5:ac:b5:
                    0c:16:62:6b:c8:4c:ac:02:e9:99:13:22:2f:b9:05:
                    94:1c:52:46:d4:ea:16:fe:42:23:cc:a5:28:9b:db:
                    19:95:51:f9:85:9a:73:75:37:80:46:90:7a:30:68:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FB:BE:AE:DE:A2:1F:42:C0:71:D9:16:EF:B5:E8:25:68:CA:F8:94
            X509v3 Authority Key Identifier:
                keyid:B2:A1:6D:86:8A:80:3C:E9:E6:82:17:F7:2B:7C:E6:7C:C7:54:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2A16D868A803CE9E68217F72B7CE67CC7541FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FE3216CF8B963CA17E477AD1C3CF78D3636F8EFF7B374AF1A329335F21C390/0/3137392e34392e3230382e302f32322d3234203d3e20323730313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:22:a8:c0:db:ac:0f:48:56:8e:b9:42:36:6b:0b:12:21:55:
         cf:d6:52:09:7f:5d:f9:cc:7a:fe:ad:e5:72:fa:2c:8f:60:ae:
         4e:63:7c:53:94:e1:d2:d8:02:59:bf:6c:80:24:ce:58:7a:36:
         f4:25:ea:92:37:93:70:64:71:70:6c:18:6a:ab:61:2f:7e:f5:
         74:0e:5b:5c:b6:0c:68:26:99:66:85:9a:f1:3a:68:16:5b:b4:
         f6:80:07:d9:6e:44:02:b5:27:12:ec:b7:67:f8:c6:73:bf:5a:
         32:8c:3b:c7:88:c5:00:aa:7f:8a:17:69:3c:35:10:4c:07:8a:
         de:81:65:1d:0e:13:60:4b:56:ce:f5:de:83:1d:67:86:86:32:
         01:28:87:f0:10:7b:b9:40:d8:1a:40:64:27:87:38:ec:87:b2:
         b4:50:c4:5e:30:d8:38:dc:3f:20:3b:5e:53:bd:bf:a0:5e:df:
         bd:5b:6d:53:01:fb:ef:ea:90:ab:10:39:42:ad:38:24:1b:70:
         ec:54:be:a5:09:a1:33:07:0c:d9:f0:46:41:d5:75:64:c7:dc:
         86:b8:09:e1:55:c7:9a:22:f3:a6:d4:c9:78:86:3a:47:97:d2:
         63:cf:0e:29:a0:08:2a:9e:74:aa:7d:f8:9f:6e:a6:66:f0:05:
         49:69:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:08 2025 by rpki-client