Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa
File:                     3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa (raw, json)
Hash identifier:          tuSMK0eIvf3YMcrh1SGU2mGvUfRMOM25atmPHBj75sw=
Subject key identifier:   0B:CF:AE:8F:DF:51:0C:AE:FB:C2:D1:95:D3:D2:B9:78:5A:1A:18:2F
Certificate issuer:       /CN=ADB0B4D4BBEB7416415737F66B839E60AFF89A62
Certificate serial:       147217252AECA9732A799A4224E0877E0FC2B26C
Authority key identifier: AD:B0:B4:D4:BB:EB:74:16:41:57:37:F6:6B:83:9E:60:AF:F8:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa
Signing time:             Tue 04 Feb 2025 18:33:20 +0000
ROA not before:           Tue 04 Feb 2025 18:28:20 +0000
ROA not after:            Tue 03 Feb 2026 18:33:20 +0000
asID:                     272824
IP address blocks:        179.63.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:17:25:2a:ec:a9:73:2a:79:9a:42:24:e0:87:7e:0f:c2:b2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB0B4D4BBEB7416415737F66B839E60AFF89A62
        Validity
            Not Before: Feb  4 18:28:20 2025 GMT
            Not After : Feb  3 18:33:20 2026 GMT
        Subject: CN=0BCFAE8FDF510CAEFBC2D195D3D2B9785A1A182F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:3a:2e:55:d3:84:3b:92:dd:be:55:8a:ee:
                    6b:32:07:1c:d7:f8:0e:6c:2e:54:13:f9:ca:ca:9c:
                    f3:83:89:c2:a9:48:11:a4:da:98:0c:71:48:19:0f:
                    a7:a5:5f:ff:ae:b0:ed:b5:d6:8d:3c:2d:fe:8e:df:
                    e2:2d:fe:a4:cc:0b:b3:cb:68:3e:3a:c1:61:f2:ca:
                    b5:ce:74:69:e4:c5:b7:01:d6:4d:0b:7c:06:2d:d8:
                    38:3f:a9:94:aa:d7:9d:bd:3d:46:e6:f8:4c:3c:a9:
                    f1:27:07:86:19:4c:c9:64:32:63:0f:5d:40:2f:2b:
                    35:e1:e6:8f:fc:91:35:dc:eb:0f:32:3f:c1:94:61:
                    a9:2d:c6:60:f6:ae:5e:6e:85:82:43:11:21:33:86:
                    cc:55:06:9f:76:bd:59:f0:11:9f:31:f9:55:4f:38:
                    28:b6:e7:14:0d:9f:7c:12:e6:45:67:51:d4:f0:f6:
                    bf:aa:32:1d:3e:13:e9:2a:f3:6a:3c:4e:fb:3c:04:
                    16:be:70:d6:68:0b:36:66:57:34:d0:04:c6:63:bc:
                    30:f3:a4:e7:6d:18:b0:95:d3:5e:86:40:66:ce:18:
                    12:39:a1:62:09:f6:e4:ed:91:7a:b1:00:f0:cb:2d:
                    9e:b5:64:10:2e:2f:69:5b:6b:02:b6:ca:ff:a2:e7:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:AE:8F:DF:51:0C:AE:FB:C2:D1:95:D3:D2:B9:78:5A:1A:18:2F
            X509v3 Authority Key Identifier:
                keyid:AD:B0:B4:D4:BB:EB:74:16:41:57:37:F6:6B:83:9E:60:AF:F8:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADB0B4D4BBEB7416415737F66B839E60AFF89A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8A02C42FA1D28679D765A4AD91131D13E35F17BBE8213C7A8FD7F36E569942C/0/3137392e36332e3136382e302f32322d3234203d3e20323732383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:55:5e:67:33:b8:25:3d:a2:ba:16:85:a8:5c:ac:b2:d6:55:
         f2:0d:d9:a3:f6:c6:fa:c5:53:84:fa:4e:58:00:57:35:57:19:
         16:25:48:b7:86:c6:61:e9:05:40:01:32:63:f0:e9:b5:cd:a1:
         a3:73:f0:dc:70:51:4d:90:13:65:06:14:bb:28:54:0e:7a:c8:
         8c:b6:a7:21:a5:48:04:cb:e1:a6:12:bc:a5:78:d0:74:62:0f:
         e9:e9:10:3c:5e:e1:3a:eb:7e:00:db:0a:d0:31:e0:c2:8c:1c:
         36:79:c2:90:04:1e:98:b6:b7:ce:76:54:2e:27:3a:88:c9:e0:
         b1:93:71:a3:86:d9:18:f0:b7:72:c1:3c:9a:4c:6f:7a:24:00:
         ec:74:33:04:e1:74:8a:ab:98:f7:c1:c5:0b:3e:d0:9f:8e:06:
         a3:f0:73:30:6d:21:2c:63:93:35:1c:4a:9c:32:ee:da:74:72:
         03:00:7f:09:92:5d:a0:c5:06:1d:68:6d:4b:50:aa:d8:38:c8:
         49:a6:a2:cd:3e:2b:6f:75:92:6d:26:a2:32:b3:f3:40:29:59:
         8f:19:fd:e1:41:67:77:5c:f9:de:5a:4c:52:6b:6d:b1:24:ad:
         a7:f3:c5:5b:d5:5f:a8:00:41:d4:b5:4b:c7:05:d8:36:86:30:
         d3:0c:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:19 2025 by rpki-client