Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/3137392e36332e33362e302f32322d3234203d3e20323732313334.roa
File:                     3137392e36332e33362e302f32322d3234203d3e20323732313334.roa (raw, json)
Hash identifier:          rrkqHxlWEhJBt478hF/A1svUVrpAg3hgYHLXv9MdM/Q=
Subject key identifier:   BC:31:5F:7C:AC:62:33:28:52:25:FF:84:FB:E1:B7:71:5A:94:D6:16
Certificate issuer:       /CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
Certificate serial:       2414EA50D98BACE463928F3024E5898D9A6BF619
Authority key identifier: B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/3137392e36332e33362e302f32322d3234203d3e20323732313334.roa
Signing time:             Tue 17 Dec 2024 13:55:00 +0000
ROA not before:           Tue 17 Dec 2024 13:50:00 +0000
ROA not after:            Tue 16 Dec 2025 13:55:00 +0000
asID:                     272134
IP address blocks:        179.63.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:ea:50:d9:8b:ac:e4:63:92:8f:30:24:e5:89:8d:9a:6b:f6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
        Validity
            Not Before: Dec 17 13:50:00 2024 GMT
            Not After : Dec 16 13:55:00 2025 GMT
        Subject: CN=BC315F7CAC6233285225FF84FBE1B7715A94D616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:5f:d9:a3:f4:87:d8:68:f7:e8:09:d5:61:
                    82:c7:19:06:58:f7:53:3a:cc:40:8a:5c:85:b9:98:
                    40:88:ce:d4:e2:75:f1:44:ae:f5:b7:d3:9e:2b:68:
                    2c:7d:e4:e8:9f:fa:0f:07:60:e7:47:30:3b:53:d5:
                    62:b8:0f:da:7b:f3:1d:40:a5:e7:5e:f6:b8:54:4c:
                    c8:94:8b:cc:1b:42:de:68:77:f1:8e:9d:5d:79:b9:
                    11:89:c9:e3:10:c6:8e:03:dd:16:57:9f:a1:26:b6:
                    75:48:87:e1:c1:bf:44:9c:88:aa:45:2c:ea:d1:20:
                    c7:2d:a7:70:0a:e3:3f:1a:a7:db:37:1c:16:b8:89:
                    b4:6b:4a:3b:f4:18:aa:ff:4d:6d:98:34:95:73:9e:
                    c0:1b:09:f7:0a:6a:de:4f:29:12:2f:4d:05:ac:3b:
                    1a:cc:bb:c9:54:5c:f1:51:52:3a:8e:01:ca:79:67:
                    42:8e:26:a6:30:4f:58:bf:9d:cc:0c:de:c9:a0:65:
                    bc:63:d6:20:7e:f0:58:ea:19:67:e2:05:ec:f6:51:
                    d4:22:03:f1:15:6f:c5:cf:4e:95:3f:cb:df:d7:0c:
                    c1:a5:e9:d4:8a:23:a5:8b:bc:b2:7b:4b:3d:bf:03:
                    8f:b2:89:24:b2:0b:09:3c:4d:57:e7:77:9b:92:1d:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:5F:7C:AC:62:33:28:52:25:FF:84:FB:E1:B7:71:5A:94:D6:16
            X509v3 Authority Key Identifier:
                keyid:B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/3137392e36332e33362e302f32322d3234203d3e20323732313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:2f:b8:b8:01:9c:42:a4:3b:cc:94:b5:eb:5b:d6:8f:ea:
         46:f2:8f:c9:aa:1f:a8:49:16:a4:47:44:9e:be:5d:f6:ff:62:
         c8:96:c6:19:8a:3d:c4:47:31:df:5b:11:1f:0b:5c:4c:20:24:
         2c:3c:d0:db:b2:fa:5d:d1:6d:3f:a8:aa:5a:98:6c:f1:4d:13:
         27:71:39:9e:43:90:c8:d0:bd:24:c2:9a:3b:91:a7:5d:a5:c9:
         a9:78:7b:3e:5e:e2:04:1f:40:3c:f1:af:db:30:e2:b4:ab:a3:
         ef:3a:88:93:13:85:6f:0f:ee:8b:98:ef:22:ea:6b:26:33:36:
         57:95:85:d6:a9:e9:25:22:74:03:b0:d5:38:ad:14:21:00:72:
         ee:e1:82:fc:55:61:d3:0b:75:f2:d3:98:1b:72:d7:ec:f1:dc:
         3d:60:cc:4a:82:14:f5:b1:fc:08:c3:57:ea:d8:46:44:28:0b:
         b5:26:b5:47:b3:58:dd:54:03:50:24:c8:04:92:ab:de:8e:22:
         70:eb:2b:81:ab:d5:c6:e1:57:31:d0:cf:5d:ad:cb:ff:b2:b5:
         ac:3b:1d:3c:79:61:51:f7:52:74:64:4b:4c:f5:7a:d5:ef:d3:
         cb:e6:61:e2:cd:98:96:6f:4c:7d:b9:c0:67:1a:e8:3a:a6:8a:
         3c:d1:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:27 2025 by rpki-client