Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137372e39332e302e302f31392d3234203d3e203532323633.roa
File:                     3137372e39332e302e302f31392d3234203d3e203532323633.roa (raw, json)
Hash identifier:          s4BvyelKadZMYkpAtLqR0SNsZ2baCRlAZ5NIgSS0Lrw=
Subject key identifier:   64:A6:2C:46:6A:0E:87:8C:81:09:E7:90:4D:5E:D0:E8:74:B8:55:67
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       2F36630B0E94D62680B643CC5E28767EAEEB80E2
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137372e39332e302e302f31392d3234203d3e203532323633.roa
Signing time:             Tue 04 Feb 2025 18:48:25 +0000
ROA not before:           Tue 04 Feb 2025 18:43:25 +0000
ROA not after:            Tue 03 Feb 2026 18:48:25 +0000
asID:                     52263
IP address blocks:        177.93.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:63:0b:0e:94:d6:26:80:b6:43:cc:5e:28:76:7e:ae:eb:80:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Feb  4 18:43:25 2025 GMT
            Not After : Feb  3 18:48:25 2026 GMT
        Subject: CN=64A62C466A0E878C8109E7904D5ED0E874B85567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:e2:8c:06:cf:b5:e1:de:eb:43:a3:c0:d9:
                    3a:ba:3c:4a:fc:16:83:16:1d:10:4d:b5:1b:ad:ed:
                    cb:50:3c:41:dc:70:13:d5:04:d6:48:c5:a0:8f:c0:
                    c9:ba:d1:ef:d6:7b:dc:7d:87:30:5e:8b:bf:07:cc:
                    c9:96:90:2f:7d:96:3d:41:a5:f2:c8:c5:64:67:37:
                    0a:21:61:bb:65:9f:90:5f:39:33:a9:a6:33:93:34:
                    11:e1:80:cb:42:da:a9:b2:05:a3:11:91:c1:c5:5e:
                    3e:06:d6:e5:3f:29:26:51:d7:ef:51:8a:7e:e5:77:
                    68:62:9e:8a:62:70:33:fc:1b:dd:5d:93:f8:4e:80:
                    44:bc:4a:5b:a5:4c:7b:f3:d4:19:b3:de:81:b8:78:
                    f9:c2:e5:41:a9:30:85:6a:0e:73:76:de:f6:b6:a5:
                    b5:a1:5d:49:b3:9e:d3:a8:1e:6c:fc:49:ab:32:b8:
                    36:94:83:af:1e:45:20:b7:a3:76:dd:29:b7:70:f8:
                    75:b9:ee:cc:eb:77:e0:9c:90:a7:0c:de:ae:36:e6:
                    da:7c:35:57:37:85:74:a4:77:34:71:d4:93:3e:6a:
                    38:95:aa:0d:07:b8:64:56:9b:62:d1:09:a5:cc:ff:
                    92:24:59:a3:21:c4:45:fa:f0:d7:54:f6:8f:97:73:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:2C:46:6A:0E:87:8C:81:09:E7:90:4D:5E:D0:E8:74:B8:55:67
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137372e39332e302e302f31392d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:0f:c3:93:b8:9c:7f:b3:1e:74:ef:b5:8c:e7:cd:fa:9c:90:
         dc:85:e4:e6:70:38:31:a7:ce:ca:9b:0d:46:ac:d7:36:b9:2d:
         36:4c:24:d7:12:27:93:e8:f9:33:72:0f:60:4d:f0:df:0c:02:
         69:0f:54:d6:0e:76:91:6d:f8:93:4b:c6:e2:38:33:34:fe:19:
         86:f7:5b:e8:2e:da:14:51:45:1c:88:db:f5:24:be:64:28:b5:
         cb:cc:89:4e:b9:7c:81:fd:8d:be:7a:e5:5c:41:d3:ab:7a:74:
         5b:45:17:fb:f2:17:7a:52:4a:5a:dd:82:09:4b:39:09:52:db:
         ae:74:4f:90:4f:ea:9f:df:44:c2:49:4f:a3:00:74:df:1d:d9:
         47:6a:39:5d:c4:85:db:6a:e2:dc:51:5a:b8:9b:63:b9:5d:ec:
         b1:00:4a:a6:0d:c9:6d:78:ef:de:c6:eb:9f:7b:d4:ce:b0:12:
         77:a5:1e:de:09:73:25:a4:0f:19:59:cb:0f:6c:c3:f2:5f:6f:
         bb:da:fe:dc:de:9c:5b:f4:94:20:e6:0c:4c:cc:d3:3a:92:8f:
         73:eb:b4:dd:4b:b5:7f:a4:1a:1f:dd:34:66:70:f1:78:f5:a0:
         57:c4:64:9d:9d:5a:f2:76:9a:4c:80:31:dc:08:9b:fd:5d:1d:
         ea:bc:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:41 2025 by rpki-client