Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e37302e302f32342d3234203d3e20323632313638.roa
File:                     3137392e34392e37302e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          P/QbXFS5VALsd077d/R4diAchKtLqJCovJOyGT/cxSU=
Subject key identifier:   37:E9:F3:D1:E7:29:C2:AF:BF:FE:BB:2B:54:A3:A1:A2:F4:B8:C5:B2
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       18FCB0D555038BC59E5593CD807D31F829C93B38
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e37302e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:27:57 +0000
ROA not before:           Tue 04 Feb 2025 18:22:57 +0000
ROA not after:            Tue 03 Feb 2026 18:27:57 +0000
asID:                     262168
IP address blocks:        179.49.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fc:b0:d5:55:03:8b:c5:9e:55:93:cd:80:7d:31:f8:29:c9:3b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:22:57 2025 GMT
            Not After : Feb  3 18:27:57 2026 GMT
        Subject: CN=37E9F3D1E729C2AFBFFEBB2B54A3A1A2F4B8C5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:10:60:28:28:73:18:b4:34:1a:05:4b:d6:
                    85:38:22:a4:69:5b:16:7c:1b:fd:8a:4f:da:d3:b2:
                    c5:cb:6e:6e:2d:d9:30:cb:17:2d:d7:dd:08:25:43:
                    0a:81:8f:35:c3:cf:c3:c2:69:b9:0e:7c:f6:13:54:
                    4b:f7:ff:36:2a:65:d8:27:8d:40:e7:f1:c1:5b:0a:
                    16:fd:a8:ff:af:ea:ca:44:14:87:cc:89:eb:56:eb:
                    24:51:ee:58:dc:97:ac:ff:34:33:b0:53:4f:61:85:
                    29:c1:b9:12:ef:80:de:26:ac:52:cc:10:bc:f9:e6:
                    62:82:24:c7:99:44:6d:c6:97:f8:87:ba:cd:17:9b:
                    bb:c8:61:6c:81:87:83:26:e2:cc:3f:51:41:95:58:
                    b2:55:7b:71:59:3c:21:10:07:3b:be:a7:71:fb:c1:
                    1e:be:ed:b8:db:f1:3c:1a:7f:84:da:9f:0f:43:59:
                    08:7c:e5:14:d7:2d:7d:b8:ad:16:5e:c3:0b:4e:f2:
                    7d:cf:3e:e1:9d:a6:85:83:fc:60:bc:f5:d1:11:51:
                    ff:57:b0:a8:3e:f1:23:7d:b2:81:fc:0b:96:03:b4:
                    cf:c6:7c:79:e0:dd:f2:2c:9e:f3:b2:92:22:5a:70:
                    30:22:ec:78:6c:b1:09:bf:a7:51:f2:95:29:5a:a9:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E9:F3:D1:E7:29:C2:AF:BF:FE:BB:2B:54:A3:A1:A2:F4:B8:C5:B2
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3137392e34392e37302e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:7c:bb:34:d7:ae:bd:30:8c:db:2f:4a:ef:54:b1:31:2b:
         8d:72:c9:10:e8:d7:ac:af:b2:0a:db:ac:85:4c:33:6c:57:c6:
         51:86:78:24:bb:4c:b3:a9:d7:7d:35:c4:f5:43:23:22:91:22:
         99:af:02:02:4a:2d:2a:37:55:0d:3c:0a:9e:65:2c:94:c9:0b:
         de:61:e7:b7:79:a1:6b:43:df:83:9d:64:d4:da:cb:c5:35:70:
         67:27:82:c9:a0:f9:25:5c:35:7d:fa:97:c8:79:64:22:77:44:
         28:24:d5:3a:45:5a:dc:58:62:58:a2:d2:87:3d:f8:5f:dc:e1:
         1f:da:57:96:3c:aa:64:88:4e:34:e6:35:28:bc:b3:75:bb:4b:
         d9:1a:f9:2c:0b:a0:a6:85:07:84:68:9e:9a:3f:3b:ab:c6:06:
         83:0a:7e:73:a0:c0:d2:92:6f:f2:41:8c:0f:09:32:08:1e:62:
         54:bb:db:b9:14:5c:83:54:87:5d:fe:75:0b:50:57:44:e2:32:
         e6:61:8c:f9:b5:34:7e:52:8b:66:a0:25:99:a2:19:7c:3b:97:
         3e:ec:01:0a:7e:12:ff:6f:de:85:0d:df:eb:c4:48:d4:81:96:
         4e:b4:b0:38:5e:d2:15:c6:71:51:69:1b:2a:f7:f2:72:67:8d:
         fa:4f:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:20 2025 by rpki-client