Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36382e302f32342d3234203d3e20323632313638.roa
File:                     3137392e34392e36382e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          PrCDTaBYIqtd2gC3ZSUG9Q4PQnr3br2icLcYDwYIzRQ=
Subject key identifier:   C3:8F:29:86:38:E3:7D:96:F9:AA:78:62:B5:BE:80:D2:E3:EE:0F:CF
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       46F4901464CE1E21E23E38C35925704D79BD0E05
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36382e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:28:00 +0000
ROA not before:           Tue 04 Feb 2025 18:23:00 +0000
ROA not after:            Tue 03 Feb 2026 18:28:00 +0000
asID:                     262168
IP address blocks:        179.49.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f4:90:14:64:ce:1e:21:e2:3e:38:c3:59:25:70:4d:79:bd:0e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:23:00 2025 GMT
            Not After : Feb  3 18:28:00 2026 GMT
        Subject: CN=C38F298638E37D96F9AA7862B5BE80D2E3EE0FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:54:3e:bf:b4:63:88:1d:36:6f:4b:97:fe:
                    10:d1:13:90:bb:81:01:7b:bd:9b:5f:5c:14:9a:f2:
                    6b:54:cc:bb:5c:e5:cf:c4:eb:b5:ff:65:03:83:43:
                    3a:f8:51:83:dd:a8:44:0e:72:d9:50:98:12:c5:70:
                    09:bb:2f:9c:94:5e:ae:e5:08:8a:0e:d1:61:97:33:
                    f5:f1:f6:b2:42:92:b7:c3:23:d4:21:a7:3f:9b:b1:
                    e9:d2:d5:fa:9b:ae:d4:91:19:63:6d:39:02:43:23:
                    8e:32:56:50:a1:d9:38:ea:64:11:9b:8b:58:74:84:
                    c9:88:86:be:14:2a:e7:cf:a4:aa:d5:17:19:f3:b3:
                    09:a8:f6:1d:8f:fc:cd:e0:6a:9b:a6:63:18:bc:c2:
                    3a:9c:e5:fb:6c:e9:30:a4:2f:92:3f:4a:ae:eb:f1:
                    a0:b7:50:24:79:89:e9:4b:b9:07:19:d7:69:15:66:
                    28:d0:2f:4a:6c:c9:18:8a:56:b6:2a:a1:a9:1a:55:
                    83:ea:8c:d9:3a:4a:1d:f6:09:99:16:0b:13:e2:58:
                    18:14:0b:77:b7:57:75:d0:3e:2d:7c:0b:9f:f8:c2:
                    9f:1e:e1:1d:0f:5a:40:86:cc:5e:6d:aa:4f:b7:ad:
                    d6:7f:49:59:b3:a8:0e:d4:74:e8:02:da:22:a5:e5:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8F:29:86:38:E3:7D:96:F9:AA:78:62:B5:BE:80:D2:E3:EE:0F:CF
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e36382e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:7c:3a:e2:45:2f:3a:9e:39:d6:1f:79:b1:9f:0f:ec:88:24:
         1f:30:d8:ba:f3:ba:9a:70:30:d5:3e:17:3a:16:9b:27:0e:e8:
         89:70:2b:d7:01:b6:a7:25:f8:a1:20:71:a7:c3:1e:07:2c:11:
         b9:a4:bb:09:a2:24:1d:f2:8d:87:fc:73:57:83:0c:0a:49:35:
         8d:38:89:5e:93:9d:b3:f0:3a:4d:76:9d:2f:19:47:07:66:f2:
         b7:ad:1a:49:2d:49:af:f6:d7:b1:57:48:e5:d8:0a:fd:14:e2:
         f9:81:8f:bb:59:b2:17:9b:a9:fd:83:5a:c8:d0:c2:6b:8d:64:
         4a:9c:03:90:e1:cb:cc:49:a3:f1:cc:01:14:ce:e0:48:f9:fc:
         8f:79:66:f2:9d:99:cf:32:3a:25:6c:04:bf:c5:97:cf:2b:89:
         b5:ec:4a:79:ff:ef:52:72:88:48:56:00:37:ae:8f:c9:98:42:
         87:03:8b:73:08:fe:6f:42:f8:78:95:e0:1c:4f:34:f4:d7:36:
         ff:c7:47:ba:8c:3a:1c:da:71:57:b0:1b:bd:10:48:f1:e6:e7:
         14:b0:93:b5:b5:4a:63:20:a1:f9:03:10:e2:28:78:f4:64:f2:
         22:c1:2e:58:72:78:c0:89:08:78:a0:2f:3e:86:c7:2e:7a:c3:
         ab:01:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:04 2025 by rpki-client