Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36372e302f32342d3234203d3e20323632313638.roa
File:                     3137392e34392e36372e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          /NFSqRqc9JVxPe+AhUHZrm1DyHjk1x00dDyVqxtfaUw=
Subject key identifier:   5C:7E:76:E8:BB:8B:5C:3F:61:A9:90:D6:9B:3B:73:26:B4:EE:7C:F3
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       48D81C6EA033F2A9B6D64C2D5925DC1731BF2AD1
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36372e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:27:58 +0000
ROA not before:           Tue 04 Feb 2025 18:22:58 +0000
ROA not after:            Tue 03 Feb 2026 18:27:58 +0000
asID:                     262168
IP address blocks:        179.49.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d8:1c:6e:a0:33:f2:a9:b6:d6:4c:2d:59:25:dc:17:31:bf:2a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:22:58 2025 GMT
            Not After : Feb  3 18:27:58 2026 GMT
        Subject: CN=5C7E76E8BB8B5C3F61A990D69B3B7326B4EE7CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:00:8d:a5:fc:f5:09:53:0d:de:b0:4f:f7:
                    32:96:bc:8c:e3:17:20:d2:c3:9f:59:67:2a:4e:eb:
                    07:77:66:cf:e1:c8:e7:48:0c:40:88:81:aa:aa:f9:
                    88:a3:38:d1:80:b4:02:0e:04:03:0e:25:59:0c:8f:
                    38:e1:bc:0d:fc:0e:4c:11:d0:2a:d4:8f:e1:a9:ee:
                    f8:0f:5b:a7:94:31:59:c6:2a:7c:94:3a:76:95:b0:
                    fa:dd:2f:2b:7b:56:f6:90:e4:ed:eb:11:61:1f:bc:
                    49:56:c4:51:83:f2:01:88:65:49:45:31:e6:0f:6e:
                    71:c5:86:ac:84:d0:e6:1f:48:d4:1d:80:f5:4f:af:
                    58:f1:c8:a3:87:a3:97:8e:85:63:8a:75:18:16:ad:
                    a9:79:0d:f1:2c:65:38:ff:fb:52:4b:86:a9:ec:c5:
                    6e:d4:52:d3:83:93:82:af:50:47:d6:07:94:ca:49:
                    63:2e:86:ce:55:8a:96:af:78:80:4d:59:15:99:2f:
                    1f:b9:02:9d:c0:8b:df:3d:86:e2:7a:81:ef:df:8b:
                    76:39:c6:fc:b8:4b:a5:db:74:0a:d3:0d:54:13:e7:
                    65:48:ca:73:b3:2e:26:6f:37:41:ed:24:c5:9f:d7:
                    e2:dd:6d:82:9f:bf:c3:77:36:da:b6:b3:59:f6:65:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7E:76:E8:BB:8B:5C:3F:61:A9:90:D6:9B:3B:73:26:B4:EE:7C:F3
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36372e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:10:4e:bb:ed:30:7e:61:a9:50:a3:93:ea:5f:3f:8c:13:
         77:8c:f5:95:74:3a:52:9e:a6:09:ad:a9:37:58:27:8c:78:c6:
         5b:c1:7f:3b:21:d4:b8:47:14:0c:c8:f7:00:12:0f:a1:80:0e:
         fb:fe:ef:0c:96:3b:85:ce:92:16:7d:a5:18:d6:de:04:c7:37:
         4b:a4:e5:70:d6:38:7a:27:74:76:a7:49:df:0b:1d:94:e3:d5:
         49:ab:d5:26:88:76:65:21:df:1f:13:9a:b1:b9:ac:b4:ce:d2:
         ec:e7:a4:12:26:10:e9:e2:0c:6c:71:30:59:80:a5:6f:19:70:
         4e:28:db:41:c5:ee:81:bb:74:7e:f9:97:96:fb:34:6c:99:f5:
         ef:b4:da:29:f4:4d:ff:b3:c5:90:08:41:46:30:a8:de:71:57:
         0f:79:18:e3:01:b2:cd:9d:ed:65:ff:6f:9a:7e:fa:9e:f1:95:
         fa:20:68:de:f4:94:a1:e4:8b:e7:ac:e6:94:42:72:98:df:7e:
         dd:b0:a2:3a:28:98:4c:b0:ef:42:b9:d2:67:bd:68:52:15:6b:
         a5:ff:60:2a:21:35:26:11:d8:c1:13:42:69:fb:55:55:9a:4f:
         ad:f6:8c:58:34:b2:bc:30:59:b7:61:f5:48:07:73:5a:13:a0:
         d3:e1:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:24 2025 by rpki-client