Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323632353839.roa
File:                     3137392e36332e3138382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          zWeqHMUsnslopnI1CI4MwJgV8WYR/ULMCZrnXIpFDWQ=
Subject key identifier:   22:7E:CE:E5:5A:3D:1D:D8:6D:08:F0:77:0A:82:9D:76:FC:D3:5A:75
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       131032299957C751671B5951DE58E59D1125415B
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:15:42 +0000
ROA not before:           Tue 04 Feb 2025 18:10:42 +0000
ROA not after:            Tue 03 Feb 2026 18:15:42 +0000
asID:                     262589
IP address blocks:        179.63.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:10:32:29:99:57:c7:51:67:1b:59:51:de:58:e5:9d:11:25:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Feb  4 18:10:42 2025 GMT
            Not After : Feb  3 18:15:42 2026 GMT
        Subject: CN=227ECEE55A3D1DD86D08F0770A829D76FCD35A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:de:8f:80:62:14:f7:f2:62:0c:3a:39:dc:
                    20:75:13:d4:5c:16:1b:fa:00:c6:bc:d4:0b:0c:28:
                    e1:cb:ae:97:7d:29:2d:87:76:d9:f8:f6:45:97:b3:
                    e8:c5:1c:a1:c5:7a:66:f6:fe:66:d2:25:8e:ea:e7:
                    8a:d9:2d:f0:0a:a7:5a:9d:5f:06:3e:d9:8e:ab:f0:
                    5e:a4:27:41:b1:67:a0:25:4e:7b:86:fa:dc:0f:0e:
                    d8:34:90:48:08:e8:16:38:8b:01:8c:04:62:52:2f:
                    32:28:ae:44:59:5b:13:5a:a0:7c:58:5d:16:46:08:
                    b5:35:3b:82:e7:d9:dd:be:5a:a1:05:f8:5a:53:71:
                    ec:76:f4:1c:7d:45:d0:90:39:51:3b:cc:90:3c:32:
                    5e:89:31:e4:d2:4d:de:1a:65:d9:b0:ad:ca:07:3a:
                    5f:9d:a4:cc:13:6b:2e:1d:48:52:8e:48:d6:05:35:
                    ce:e8:48:3c:b8:e6:25:81:2a:cf:a7:4f:ae:22:73:
                    0f:71:53:3b:03:76:cf:ae:12:b3:c2:30:23:96:5c:
                    b1:aa:79:8c:6e:d8:37:54:a5:de:3f:72:0b:a4:f0:
                    e7:fa:f3:56:0d:42:e4:a2:5d:27:d3:b5:b6:47:b5:
                    12:96:89:63:bc:51:8a:9e:c1:33:1a:c1:1a:d6:7d:
                    58:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7E:CE:E5:5A:3D:1D:D8:6D:08:F0:77:0A:82:9D:76:FC:D3:5A:75
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:ea:1a:50:98:a2:ff:04:cf:35:0c:bb:a0:d0:e2:a8:23:
         d7:01:08:45:f2:65:56:80:be:0b:0c:ef:b2:61:db:57:2d:93:
         63:a7:c3:42:6e:20:46:f1:74:63:11:fa:c2:b2:03:ff:ad:f0:
         0c:27:79:28:0f:7e:63:10:f9:da:93:44:0a:2b:1c:41:e5:79:
         b1:50:e3:7f:8a:4c:3a:fe:aa:3b:69:09:61:8b:23:ef:d8:8e:
         0c:01:e5:92:9f:1f:1b:ba:77:79:63:8a:41:eb:5f:3b:12:99:
         1e:4a:8f:f7:04:ab:68:fc:31:e6:8e:2d:bc:b6:01:32:c6:45:
         68:25:99:7d:1e:25:cb:67:38:53:d7:b5:65:ee:2c:55:bd:61:
         80:45:34:19:fd:1e:1b:fa:d2:69:cd:af:c0:6c:24:5c:ab:22:
         28:49:ac:9c:69:e3:e8:6a:20:ac:84:51:b8:91:17:23:a3:47:
         4d:48:96:21:da:f3:2d:29:e2:98:77:ef:d0:00:e4:cf:64:51:
         66:ea:76:35:b6:92:4e:83:01:23:b1:24:9f:fc:24:b2:a0:88:
         ff:bd:8a:83:16:ff:c8:e7:a1:e6:a8:a2:b2:82:81:dc:d4:6a:
         4f:cb:42:71:7f:5c:f2:ce:aa:bc:5a:57:96:9f:71:c6:71:99:
         7f:15:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:40 2025 by rpki-client