Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230352e302f32342d3239203d3e203634313230.roa
File:                     3137392e36302e3230352e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          LrkqbWpWUZML2K/IsWvCFQm8T/SfdJzjbUITezBodc8=
Subject key identifier:   55:ED:9A:C5:AC:A5:AB:B5:5B:83:FA:F7:B8:E8:7B:3A:C5:16:8D:4E
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       62E3506BC8DFDE4DE9802BD2420A222DE13B2CD5
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230352e302f32342d3239203d3e203634313230.roa
Signing time:             Fri 21 Mar 2025 21:00:00 +0000
ROA not before:           Fri 21 Mar 2025 20:55:00 +0000
ROA not after:            Fri 20 Mar 2026 21:00:00 +0000
asID:                     64120
IP address blocks:        179.60.205.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e3:50:6b:c8:df:de:4d:e9:80:2b:d2:42:0a:22:2d:e1:3b:2c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Mar 21 20:55:00 2025 GMT
            Not After : Mar 20 21:00:00 2026 GMT
        Subject: CN=55ED9AC5ACA5ABB55B83FAF7B8E87B3AC5168D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:d1:72:45:ee:9b:eb:c8:e5:10:2f:c0:5d:
                    c9:8e:d4:0d:f2:e0:61:35:01:14:7c:39:d0:1c:b4:
                    44:35:6c:49:0f:51:96:ca:e6:7d:31:7b:fc:37:0f:
                    46:7b:dd:05:ef:69:8a:7c:49:5e:5e:ae:23:56:6b:
                    26:73:30:fc:f4:bc:8f:68:10:0d:2d:56:1b:d8:80:
                    ef:ed:eb:4e:e6:9e:fd:37:4b:f7:be:ed:27:4d:13:
                    a3:e0:d8:72:cd:92:83:d7:11:1a:c8:53:ac:6b:0b:
                    ba:a6:98:5e:a7:79:dd:47:7d:bf:99:2b:7b:09:df:
                    26:8a:4f:e5:23:bc:de:d0:46:a7:25:29:40:cc:af:
                    db:84:68:5b:d4:87:a3:59:9a:65:ed:41:65:03:64:
                    a3:db:9e:32:ca:39:af:43:5c:fa:73:75:52:1d:98:
                    82:c3:49:6d:53:f0:32:f2:f4:ba:fc:bc:b9:f7:70:
                    27:f1:67:b7:9e:92:ca:8e:4c:91:06:b7:ee:89:3d:
                    ea:0d:fb:a5:ed:20:63:bd:b1:e9:ea:b0:21:f7:6a:
                    73:f8:15:e4:a2:7f:5e:83:4c:75:ed:2f:ca:0d:c9:
                    27:9f:85:12:d3:b3:39:f0:3a:7c:fa:b6:75:60:34:
                    dc:21:6d:c1:30:fd:e2:fa:79:08:fe:44:ef:d2:85:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:9A:C5:AC:A5:AB:B5:5B:83:FA:F7:B8:E8:7B:3A:C5:16:8D:4E
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230352e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:49:a6:3e:0d:78:7c:d5:a5:58:29:1f:44:f4:e6:e5:76:85:
         da:7b:66:3a:38:ec:23:d1:5a:fd:23:84:90:e0:d9:1a:8b:8e:
         c4:90:5d:25:a5:ba:b7:1c:7e:77:ab:b5:7e:9d:98:0c:2c:82:
         db:03:1a:5b:4c:38:6b:65:ab:1e:4b:8f:9d:f8:77:19:c8:3b:
         2c:97:6f:85:57:d9:35:17:27:ff:98:36:8c:c4:d3:52:16:c1:
         fc:c2:87:2b:8e:c3:f6:5a:e9:f4:79:12:bc:c3:ea:ce:24:8b:
         1e:ce:0c:31:d1:14:4b:94:cc:4a:f1:fc:19:b2:51:95:ad:2a:
         55:e3:f3:f0:29:20:93:a8:dc:2c:31:dc:22:ff:1d:70:dd:97:
         49:99:71:28:66:c4:2f:30:b3:02:42:87:f3:a4:1c:ec:da:78:
         fb:08:61:ff:a4:1c:81:c7:63:74:50:e3:a6:0d:21:e1:9b:78:
         75:ab:1a:58:fd:4f:2f:eb:37:6a:47:9b:a4:e1:d5:da:de:9d:
         5e:3a:51:be:7b:6f:28:ef:20:4a:a4:96:2e:07:95:6d:d5:59:
         f8:28:31:31:25:08:78:85:55:7f:32:ab:f6:04:da:a4:27:b7:
         43:3b:d9:91:93:94:ce:b7:95:a7:3f:03:db:e5:59:8c:47:32:
         2a:50:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:20:41 2025 by rpki-client