Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32342d3234203d3e20323730303437.roa
File:                     3137392e302e3138342e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier:          xJ3+uZjEvFpOS9R1lHwgmc0wFjMAfz/4TlWXb/xtpts=
Subject key identifier:   66:DB:B6:63:7D:E5:11:BC:B0:97:7E:DB:C2:77:17:5E:42:B9:BB:3C
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       414AA22CAE91B2DA0B9EFB3F2389848D16C0B272
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32342d3234203d3e20323730303437.roa
Signing time:             Tue 04 Feb 2025 18:02:05 +0000
ROA not before:           Tue 04 Feb 2025 17:57:05 +0000
ROA not after:            Tue 03 Feb 2026 18:02:05 +0000
asID:                     270047
IP address blocks:        179.0.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:a2:2c:ae:91:b2:da:0b:9e:fb:3f:23:89:84:8d:16:c0:b2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Feb  4 17:57:05 2025 GMT
            Not After : Feb  3 18:02:05 2026 GMT
        Subject: CN=66DBB6637DE511BCB0977EDBC277175E42B9BB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:30:c8:60:f8:4d:84:8f:e8:71:43:95:be:47:
                    db:cc:50:f9:b6:d3:48:46:61:8b:64:03:a6:a3:5a:
                    f2:b9:4a:57:17:ec:af:7c:fe:ae:c1:af:48:e5:c2:
                    b3:8e:2c:3a:b0:65:e6:03:79:58:10:fd:3d:f3:86:
                    4a:af:97:04:7a:2e:fd:2c:3c:03:13:aa:cf:a3:45:
                    30:5a:67:fd:44:3e:01:3c:b4:5c:20:b8:7f:5e:8a:
                    15:eb:84:53:d9:67:1e:e7:f4:49:35:44:96:d8:c9:
                    ef:49:b4:7f:78:49:25:08:9c:e4:d9:d0:47:03:89:
                    a3:b0:9e:a1:16:30:bb:e1:12:d4:93:29:b7:40:47:
                    f0:c6:a3:52:1c:08:94:38:a1:be:79:bd:41:f2:d1:
                    c0:8b:f9:2a:e2:e7:c7:63:bd:5c:55:b6:40:3b:3c:
                    df:97:61:51:e1:ce:fc:c6:09:34:bf:7c:a0:8f:94:
                    79:f5:d2:c6:dc:1c:e9:76:36:09:cb:40:81:22:ab:
                    82:70:c0:c9:95:4f:b5:5e:70:2f:d9:df:9f:53:a6:
                    6c:ca:2c:33:59:be:8d:b9:6a:7d:dc:20:10:d0:c2:
                    8b:4f:64:96:bb:88:1c:73:6e:a8:da:77:00:4f:90:
                    f4:34:a3:b1:f2:93:7a:21:11:95:a8:d8:ad:24:a0:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DB:B6:63:7D:E5:11:BC:B0:97:7E:DB:C2:77:17:5E:42:B9:BB:3C
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32342d3234203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:01:b3:44:36:9a:47:03:32:10:83:49:02:57:3e:16:21:
         db:6e:f9:e3:be:40:58:41:80:be:c5:7e:8f:de:b8:92:5f:16:
         e7:8e:be:4a:a7:c4:38:04:12:d0:b4:23:4a:bd:e7:84:4b:d5:
         22:33:56:aa:92:24:15:e9:e8:66:35:22:24:74:d6:ad:f6:ee:
         cb:bd:b0:c9:ba:76:91:ee:ca:ad:14:38:30:db:2a:26:a9:88:
         2a:85:6f:8a:ab:b4:3c:25:42:7c:b7:f5:f4:af:5d:dd:27:95:
         c1:ed:df:bc:56:77:30:aa:f9:bf:b3:2b:e8:f0:a4:e6:b0:ba:
         48:b7:e7:de:f3:74:a6:b4:12:6a:aa:33:20:22:da:6e:5d:12:
         1d:85:39:a9:5a:50:e0:e8:01:15:7d:fb:43:cc:bd:2e:02:d3:
         72:ea:3d:e3:13:46:6e:1a:7d:e7:bb:15:65:d2:47:15:f8:a1:
         07:f1:25:10:b7:f2:8d:d9:ab:5b:8c:cc:ca:d1:2c:02:a6:5b:
         58:65:34:35:70:da:0f:29:fc:80:f9:12:fa:f0:cf:2e:9f:82:
         d8:2f:ca:fe:23:fe:7f:b1:6e:3d:ea:44:2f:6f:14:4e:03:5f:
         c1:89:79:4f:c4:d7:d4:09:09:38:8e:4f:26:b3:18:a2:e6:b5:
         22:97:c8:68
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQUqiLK6RstoLnvs/I4mEjRbAsnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBBRkQyRUQ5ODZBNERBRTg2QTQ0OEMxRTZFNTY3Q0Uz
MzE4NkJDNDAeFw0yNTAyMDQxNzU3MDVaFw0yNjAyMDMxODAyMDVaMDMxMTAvBgNV
BAMTKDY2REJCNjYzN0RFNTExQkNCMDk3N0VEQkMyNzcxNzVFNDJCOUJCM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIMMhg+E2Ej+hxQ5W+R9vMUPm2
00hGYYtkA6ajWvK5SlcX7K98/q7Br0jlwrOOLDqwZeYDeVgQ/T3zhkqvlwR6Lv0s
PAMTqs+jRTBaZ/1EPgE8tFwguH9eihXrhFPZZx7n9Ek1RJbYye9JtH94SSUInOTZ
0EcDiaOwnqEWMLvhEtSTKbdAR/DGo1IcCJQ4ob55vUHy0cCL+Sri58djvVxVtkA7
PN+XYVHhzvzGCTS/fKCPlHn10sbcHOl2NgnLQIEiq4JwwMmVT7VecC/Z359TpmzK
LDNZvo25an3cIBDQwotPZJa7iBxzbqjadwBPkPQ0o7Hyk3ohEZWo2K0koOYFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZtu2Y33lEbywl37bwncXXkK5uzwwHwYDVR0j
BBgwFoAUkK/S7ZhqTa6GpEjB5uVnzjMYa8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjNDNDY4RkYyRDI2QUZGNkRDOTZCQzQ0OUVEMTc0QzlC
NUYwMTlFMEVEMkRGMDlGRjlEQjdDMjhERjY5NjY0LzAvOTBBRkQyRUQ5ODZBNERB
RTg2QTQ0OEMxRTZFNTY3Q0UzMzE4NkJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MEFGRDJFRDk4NkE0REFFODZB
NDQ4QzFFNkU1NjdDRTMzMTg2QkM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYzQzQ2OEZGMkQyNkFGRjZEQzk2QkM0NDlFRDE3NEM5QjVGMDE5RTBF
RDJERjA5RkY5REI3QzI4REY2OTY2NC8wLzMxMzczOTJlMzAyZTMxMzgzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMAuDAN
BgkqhkiG9w0BAQsFAAOCAQEAk4wBs0Q2mkcDMhCDSQJXPhYh2275475AWEGAvsV+
j964kl8W546+SqfEOAQS0LQjSr3nhEvVIjNWqpIkFenoZjUiJHTWrfbuy72wybp2
ke7KrRQ4MNsqJqmIKoVviqu0PCVCfLf19K9d3SeVwe3fvFZ3MKr5v7Mr6PCk5rC6
SLfn3vN0prQSaqozICLabl0SHYU5qVpQ4OgBFX37Q8y9LgLTcuo94xNGbhp957sV
ZdJHFfihB/ElELfyjdmrW4zMytEsAqZbWGU0NXDaDyn8gPkS+vDPLp+C2C/K/iP+
f7FuPepEL28UTgNfwYl5T8TX1AkJOI5PJrMYoua1IpfIaA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:46 2025 by rpki-client