Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/3137392e34392e3132302e302f32312d3234203d3e203532343737.roa
File:                     3137392e34392e3132302e302f32312d3234203d3e203532343737.roa (raw, json)
Hash identifier:          PEkM4m3q8JvjXL/7lYO0UngZvBw1GfBUSiFdImKvVuc=
Subject key identifier:   3C:E0:DE:DE:82:84:FA:FF:D3:2C:38:8A:A1:58:88:26:D1:A1:78:55
Certificate issuer:       /CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
Certificate serial:       026E9C9570827CF0BF95982925B355B9FBC2A22B
Authority key identifier: 7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/3137392e34392e3132302e302f32312d3234203d3e203532343737.roa
Signing time:             Tue 04 Feb 2025 18:34:07 +0000
ROA not before:           Tue 04 Feb 2025 18:29:07 +0000
ROA not after:            Tue 03 Feb 2026 18:34:07 +0000
asID:                     52477
IP address blocks:        179.49.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6e:9c:95:70:82:7c:f0:bf:95:98:29:25:b3:55:b9:fb:c2:a2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B2EAD38C7A997ADD45126E84D36C4057C561C06
        Validity
            Not Before: Feb  4 18:29:07 2025 GMT
            Not After : Feb  3 18:34:07 2026 GMT
        Subject: CN=3CE0DEDE8284FAFFD32C388AA1588826D1A17855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:ad:b5:d3:73:33:e7:7a:63:ef:ab:0a:ab:
                    e0:c3:4a:81:27:6b:05:1e:79:a0:93:a9:5f:4c:88:
                    71:90:a7:7f:1b:62:84:05:6d:17:8a:11:2c:72:d2:
                    45:04:e5:ba:3e:e2:1b:55:1d:11:12:88:1e:d3:db:
                    ec:c6:44:69:c5:04:7d:10:3c:ea:bc:73:2a:35:b6:
                    26:f0:1b:1b:fd:ca:e4:ab:de:15:78:5a:45:ff:60:
                    2b:88:f1:0b:5b:88:92:cc:0a:70:16:79:ae:ad:da:
                    7c:9f:65:d2:4e:8c:64:49:27:9a:f8:10:3f:f7:34:
                    6a:00:fa:e3:60:16:c8:df:85:df:66:0b:8f:9a:bb:
                    5e:e0:de:72:d2:d9:57:1b:54:69:6b:b6:a2:3e:b6:
                    2f:10:17:c0:82:6c:90:bd:6c:e1:f4:a0:d6:7a:47:
                    b9:07:27:cd:77:91:3b:7d:2f:7a:8c:dc:99:18:1d:
                    8d:3c:9d:bf:59:40:a0:c1:25:62:5e:d7:07:a7:01:
                    d0:35:1e:ad:cf:5a:bf:0f:1e:91:d6:f3:11:71:06:
                    4e:57:dc:31:9a:56:bf:af:91:f1:42:08:28:23:c9:
                    77:f9:bb:47:97:0d:8d:05:13:d6:ab:84:00:0f:3b:
                    cb:02:f0:60:c4:88:6b:e0:ba:0b:92:96:ad:b4:5a:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:DE:DE:82:84:FA:FF:D3:2C:38:8A:A1:58:88:26:D1:A1:78:55
            X509v3 Authority Key Identifier:
                keyid:7B:2E:AD:38:C7:A9:97:AD:D4:51:26:E8:4D:36:C4:05:7C:56:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B2EAD38C7A997ADD45126E84D36C4057C561C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6C5E83611272EC25EC37470F5B4899848B024CAC46CD8938F1364981607DEF4/0/3137392e34392e3132302e302f32312d3234203d3e203532343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:4c:70:e8:9a:e1:67:88:f2:34:c5:af:67:f6:a1:ff:44:
         c1:e5:82:d6:16:bd:46:79:5a:c2:64:9f:bc:59:01:3c:b9:d5:
         8b:02:a4:ee:c2:f7:3b:18:77:19:73:43:fa:90:5e:d3:f7:20:
         87:70:be:b2:9e:0d:2f:b7:09:2c:44:17:c2:f7:0b:36:af:d0:
         bb:27:f2:55:fe:5f:fc:cf:3c:a6:79:36:e9:32:14:c0:cd:3e:
         27:ca:1e:57:e7:67:6c:dc:48:c1:e2:2c:6e:ea:60:81:5d:8b:
         4a:88:0a:b5:5a:3d:7e:6e:b8:69:d5:e5:80:bf:6a:a8:54:62:
         b8:2e:74:3e:d4:46:28:d8:44:d6:b6:04:93:f3:df:e3:28:97:
         7e:55:8a:5c:b0:62:96:39:e8:50:44:ec:39:39:d4:81:27:52:
         5a:6d:db:6d:2d:15:c7:1f:b1:48:61:2c:01:1c:72:12:3f:87:
         2d:3e:7e:d9:ec:7c:7e:ee:ca:9c:66:56:61:bf:c5:b5:1c:aa:
         0a:96:2e:bf:26:26:44:42:8c:b4:d2:2b:66:41:ed:7f:d8:72:
         59:64:e0:4d:9d:f6:da:8d:ee:9b:a0:61:11:c6:bf:89:22:f8:
         8a:c6:6a:43:d7:b9:dd:64:66:33:87:22:f8:a3:bd:b1:c9:6e:
         92:24:3d:76
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAm6clXCCfPC/lZgpJbNVufvCoiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyRUFEMzhDN0E5OTdBREQ0NTEyNkU4NEQzNkM0MDU3
QzU2MUMwNjAeFw0yNTAyMDQxODI5MDdaFw0yNjAyMDMxODM0MDdaMDMxMTAvBgNV
BAMTKDNDRTBERURFODI4NEZBRkZEMzJDMzg4QUExNTg4ODI2RDFBMTc4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuva2103Mz53pj76sKq+DDSoEn
awUeeaCTqV9MiHGQp38bYoQFbReKESxy0kUE5bo+4htVHRESiB7T2+zGRGnFBH0Q
POq8cyo1tibwGxv9yuSr3hV4WkX/YCuI8QtbiJLMCnAWea6t2nyfZdJOjGRJJ5r4
ED/3NGoA+uNgFsjfhd9mC4+au17g3nLS2VcbVGlrtqI+ti8QF8CCbJC9bOH0oNZ6
R7kHJ813kTt9L3qM3JkYHY08nb9ZQKDBJWJe1wenAdA1Hq3PWr8PHpHW8xFxBk5X
3DGaVr+vkfFCCCgjyXf5u0eXDY0FE9arhAAPO8sC8GDEiGvguguSlq20WiIlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPODe3oKE+v/TLDiKoViIJtGheFUwHwYDVR0j
BBgwFoAUey6tOMepl63UUSboTTbEBXxWHAYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkM1RTgzNjExMjcyRUMyNUVDMzc0NzBGNUI0ODk5ODQ4
QjAyNENBQzQ2Q0Q4OTM4RjEzNjQ5ODE2MDdERUY0LzAvN0IyRUFEMzhDN0E5OTdB
REQ0NTEyNkU4NEQzNkM0MDU3QzU2MUMwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjJFQUQzOEM3QTk5N0FERDQ1
MTI2RTg0RDM2QzQwNTdDNTYxQzA2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZDNUU4MzYxMTI3MkVDMjVFQzM3NDcwRjVCNDg5OTg0OEIwMjRDQUM0
NkNEODkzOEYxMzY0OTgxNjA3REVGNC8wLzMxMzczOTJlMzQzOTJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM0MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7MxeDAN
BgkqhkiG9w0BAQsFAAOCAQEAHOhMcOia4WeI8jTFr2f2of9EweWC1ha9RnlawmSf
vFkBPLnViwKk7sL3Oxh3GXND+pBe0/cgh3C+sp4NL7cJLEQXwvcLNq/QuyfyVf5f
/M88pnk26TIUwM0+J8oeV+dnbNxIweIsbupggV2LSogKtVo9fm64adXlgL9qqFRi
uC50PtRGKNhE1rYEk/Pf4yiXflWKXLBiljnoUETsOTnUgSdSWm3bbS0Vxx+xSGEs
ARxyEj+HLT5+2ex8fu7KnGZWYb/FtRyqCpYuvyYmREKMtNIrZkHtf9hyWWTgTZ32
2o3um6BhEca/iSL4isZqQ9e53WRmM4ci+KO9sclukiQ9dg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:06 2025 by rpki-client