Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e20313938393439.roa
File:                     3137392e302e3230342e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          v23LhFRs35bopoEoA7eP87sEfye6+UDsdZxgiozHNcs=
Subject key identifier:   E0:DC:DC:71:38:91:6D:EA:E8:BF:39:80:0C:C3:2D:91:C0:D0:C1:E1
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       6E4B11961A7255D8413FAE36CAE665D585854657
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 04 Feb 2025 18:53:51 +0000
ROA not before:           Tue 04 Feb 2025 18:48:51 +0000
ROA not after:            Tue 03 Feb 2026 18:53:51 +0000
asID:                     198949
IP address blocks:        179.0.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:11:96:1a:72:55:d8:41:3f:ae:36:ca:e6:65:d5:85:85:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Feb  4 18:48:51 2025 GMT
            Not After : Feb  3 18:53:51 2026 GMT
        Subject: CN=E0DCDC7138916DEAE8BF39800CC32D91C0D0C1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:79:be:c0:87:43:4c:8e:99:f8:57:7a:5a:
                    36:e6:1b:b7:0b:dc:c9:c4:a8:99:6d:4b:75:1e:3f:
                    1e:74:36:61:c8:5d:54:18:2f:7a:cb:74:79:61:2a:
                    b2:e6:45:60:20:73:b1:69:54:3f:80:9d:4a:a7:af:
                    81:3a:a9:47:65:48:f0:ad:8e:c1:43:c7:e0:ea:87:
                    3a:a4:84:3f:c8:9f:fd:56:2f:77:bb:5b:f4:4c:bd:
                    a5:86:3f:e3:65:ab:db:84:d8:e8:6f:25:e1:64:80:
                    4b:ac:5f:7d:bc:2d:34:9e:84:45:9f:a3:9a:9c:f6:
                    2b:e0:0a:e1:84:4d:97:dc:83:02:d1:e6:a0:bf:3c:
                    b2:93:6a:ec:e0:b3:ab:c0:76:40:6c:c1:59:3d:e7:
                    a3:f8:be:ba:f5:74:46:a4:86:54:4b:76:f1:7f:42:
                    7e:81:ed:57:b4:f7:57:e8:cb:14:40:06:1a:eb:f2:
                    2d:bf:85:48:c1:aa:d6:5d:22:f7:03:e5:84:02:eb:
                    e9:80:6c:85:53:fc:e4:aa:89:51:84:98:63:69:e9:
                    21:28:9a:4d:9a:a6:d1:bb:bc:40:fb:4d:4f:70:9e:
                    9b:b0:f7:a0:76:89:77:21:0d:3b:a1:03:5d:03:40:
                    fe:c4:a1:81:35:d1:c8:de:c7:4b:fb:cb:a8:87:00:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:DC:71:38:91:6D:EA:E8:BF:39:80:0C:C3:2D:91:C0:D0:C1:E1
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:60:dc:dd:97:cf:17:4b:6c:a8:ba:c4:bd:5b:52:00:85:
         ec:ec:1b:6c:89:e3:5b:72:6f:03:83:e4:b5:3d:ef:03:9b:d3:
         29:f9:03:eb:4a:2f:c1:77:07:64:cb:84:9b:6a:ee:96:2a:75:
         f3:2f:a0:f9:20:7b:d1:7f:b5:f7:ff:ec:d8:5c:2f:cc:69:a1:
         60:e3:38:af:15:4b:50:a3:8b:2c:0c:7b:d8:b6:5b:49:db:86:
         d2:89:3a:2e:cc:fb:2c:a0:67:75:01:b4:51:a9:67:53:a1:a9:
         67:4a:db:fc:ef:c7:24:7d:7d:c9:e9:50:78:6e:a0:6c:9d:e9:
         c1:c4:df:f9:bf:e6:fe:2e:38:cb:dd:3b:b7:2b:62:87:ee:f6:
         73:b9:46:80:44:fd:ca:b5:7c:5c:8e:81:8b:3e:19:cf:53:85:
         da:0b:4c:d4:f8:d4:eb:45:72:fa:d9:2e:2e:33:60:45:ba:8d:
         ca:1d:84:9a:f2:d0:e4:10:53:c2:ce:86:99:ca:11:e0:5e:90:
         ac:d9:08:c6:f8:15:f2:ec:08:d6:94:64:a2:46:d5:79:c7:9d:
         52:5a:70:91:53:6b:f6:b6:a4:db:21:16:f6:2b:b6:b5:67:b5:
         44:17:16:42:71:3d:2a:86:d1:8a:2b:0c:9c:9a:9f:94:0f:63:
         11:f8:29:2d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbksRlhpyVdhBP642yuZl1YWFRlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQUZFN0M2RDA3MkFENzU4QjJFQUE3QzY1NEM1MjhD
OEREMjU2QjAeFw0yNTAyMDQxODQ4NTFaFw0yNjAyMDMxODUzNTFaMDMxMTAvBgNV
BAMTKEUwRENEQzcxMzg5MTZERUFFOEJGMzk4MDBDQzMyRDkxQzBEMEMxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6nm+wIdDTI6Z+Fd6WjbmG7cL
3MnEqJltS3UePx50NmHIXVQYL3rLdHlhKrLmRWAgc7FpVD+AnUqnr4E6qUdlSPCt
jsFDx+DqhzqkhD/In/1WL3e7W/RMvaWGP+Nlq9uE2OhvJeFkgEusX328LTSehEWf
o5qc9ivgCuGETZfcgwLR5qC/PLKTauzgs6vAdkBswVk956P4vrr1dEakhlRLdvF/
Qn6B7Ve091foyxRABhrr8i2/hUjBqtZdIvcD5YQC6+mAbIVT/OSqiVGEmGNp6SEo
mk2aptG7vED7TU9wnpuw96B2iXchDTuhA10DQP7EoYE10cjex0v7y6iHABrLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4NzccTiRberovzmADMMtkcDQweEwHwYDVR0j
BBgwFoAUY9r+fG0HKtdYsuqnxlTFKMjdJWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTY1Nzc4RUEyQkEzRjY0NTM4MUNGQjAzQTkwOTkzNTEz
MDY3MDM5QjI0MDRGOTI3MkU4NDAxQjEzQzYyMTUxLzAvNjNEQUZFN0M2RDA3MkFE
NzU4QjJFQUE3QzY1NEM1MjhDOEREMjU2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0RBRkU3QzZEMDcyQUQ3NThC
MkVBQTdDNjU0QzUyOEM4REQyNTZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE2NTc3OEVBMkJBM0Y2NDUzODFDRkIwM0E5MDk5MzUxMzA2NzAzOUIy
NDA0RjkyNzJFODQwMUIxM0M2MjE1MS8wLzMxMzczOTJlMzAyZTMyMzAzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMAzDAN
BgkqhkiG9w0BAQsFAAOCAQEAkuFg3N2XzxdLbKi6xL1bUgCF7OwbbInjW3JvA4Pk
tT3vA5vTKfkD60ovwXcHZMuEm2rulip18y+g+SB70X+19//s2FwvzGmhYOM4rxVL
UKOLLAx72LZbSduG0ok6Lsz7LKBndQG0UalnU6GpZ0rb/O/HJH19yelQeG6gbJ3p
wcTf+b/m/i44y907tytih+72c7lGgET9yrV8XI6Biz4Zz1OF2gtM1PjU60Vy+tku
LjNgRbqNyh2EmvLQ5BBTws6GmcoR4F6QrNkIxvgV8uwI1pRkokbVecedUlpwkVNr
9rak2yEW9iu2tWe1RBcWQnE9KobRiisMnJqflA9jEfgpLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client