Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3137392e36302e3233362e302f32322d3234203d3e20323635383034.roa
File:                     3137392e36302e3233362e302f32322d3234203d3e20323635383034.roa (raw, json)
Hash identifier:          F4DtSbx87HLbAbS6CQVGoUF2lRF2bo+7ROlkgeKXmyY=
Subject key identifier:   25:C2:54:32:07:DE:32:3F:1D:48:E6:EC:47:2F:ED:A2:68:E9:CD:11
Certificate issuer:       /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial:       2AFAA5A3ED8D66196D99BC57FDC735267BDCCA55
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3137392e36302e3233362e302f32322d3234203d3e20323635383034.roa
Signing time:             Tue 04 Feb 2025 18:21:15 +0000
ROA not before:           Tue 04 Feb 2025 18:16:15 +0000
ROA not after:            Tue 03 Feb 2026 18:21:15 +0000
asID:                     265804
IP address blocks:        179.60.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 21:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fa:a5:a3:ed:8d:66:19:6d:99:bc:57:fd:c7:35:26:7b:dc:ca:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
        Validity
            Not Before: Feb  4 18:16:15 2025 GMT
            Not After : Feb  3 18:21:15 2026 GMT
        Subject: CN=25C2543207DE323F1D48E6EC472FEDA268E9CD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:18:65:e7:ff:60:f9:53:b5:87:53:60:62:
                    fb:2a:ef:83:95:47:74:6a:e2:94:62:2b:fb:18:1b:
                    81:0b:70:7e:0c:d3:86:e5:ed:aa:3e:ce:13:10:f5:
                    15:e8:e8:cc:70:44:c9:3c:55:b8:1d:d3:31:d2:46:
                    7a:b6:3b:f3:1b:30:1e:03:b9:80:63:38:10:f6:38:
                    71:24:7e:70:d5:ca:95:6a:40:f3:80:25:1b:b7:4c:
                    cc:63:9f:5c:f0:a4:96:1f:b0:f7:b5:ad:4b:e2:c4:
                    a5:59:5b:4f:bc:c2:af:94:7d:d3:79:10:50:17:b7:
                    a2:98:6f:f4:d6:2f:b9:a7:1c:36:4a:57:a3:92:02:
                    a1:2e:e6:9d:dc:a3:13:64:b9:70:86:82:d6:61:04:
                    da:76:4a:dc:00:97:51:37:c2:ae:93:66:3c:3d:db:
                    b4:b4:c1:25:a8:4a:ba:ee:a2:dd:37:4c:be:ad:08:
                    0d:7e:62:b3:2a:e6:07:cb:b1:7e:0e:21:54:e8:28:
                    32:8a:e5:c6:be:e8:80:54:62:76:36:bd:e4:10:93:
                    76:d3:a1:b7:0e:4c:33:bb:28:f0:a9:e2:46:a1:52:
                    92:40:fc:3d:52:4c:d5:e2:61:1e:01:4f:8c:82:0e:
                    85:0b:4d:6e:80:06:f0:e7:59:5d:4a:c1:6c:66:2d:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:54:32:07:DE:32:3F:1D:48:E6:EC:47:2F:ED:A2:68:E9:CD:11
            X509v3 Authority Key Identifier:
                keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3137392e36302e3233362e302f32322d3234203d3e20323635383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:43:58:b6:53:70:56:e1:d8:46:7f:76:30:ed:96:f6:43:
         07:11:8c:7f:4f:21:a3:e5:50:bb:9b:aa:c7:fe:2d:0d:ca:c7:
         a5:cb:57:e7:d6:66:a6:a0:f1:1e:e7:6f:b7:08:e0:57:c3:85:
         74:72:8f:d8:6e:30:70:02:1e:8c:f3:26:5b:8e:56:4b:35:5b:
         83:e8:f0:ea:1f:a8:a2:a0:fc:29:73:11:86:93:4a:69:86:79:
         b3:3c:45:2f:ef:59:49:e2:64:53:a4:e6:ad:1d:53:cd:ae:f5:
         21:60:b2:84:c0:c4:cc:50:45:12:a8:bc:06:fb:8f:f8:4d:ff:
         ba:8a:54:01:c6:af:12:5e:29:ee:3d:69:e8:17:4d:5d:2b:59:
         90:61:20:e4:5b:7b:6a:8a:26:b0:6c:77:69:05:f2:64:45:7f:
         aa:31:86:2c:ba:de:c5:8f:12:22:86:57:d9:02:77:59:88:76:
         32:0e:fc:64:fe:11:ee:f1:e5:57:b6:5e:4e:ab:d3:d6:3b:07:
         08:52:1a:20:ea:9d:9d:17:b9:a4:c1:fb:c9:84:2a:a4:9d:d3:
         b6:4a:c2:a5:6b:41:79:dd:1a:b1:2b:f4:78:cf:a8:aa:57:8c:
         6e:b7:38:3a:51:6e:d8:01:66:36:21:65:22:5d:9c:58:31:79:
         81:2b:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:44 2025 by rpki-client