Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa
File:                     3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (raw, json)
Hash identifier:          a5MVWgzS9CicCzinp6R7LIQqjYcufxM/b0UY/mQXwKc=
Subject key identifier:   0E:6F:56:EB:4A:C1:9B:E2:20:45:AB:5B:5B:7B:21:37:80:19:E7:63
Certificate issuer:       /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
Certificate serial:       7BB23405E1584EEC71F57608E4E0EDEDD0939B3D
Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa
Signing time:             Tue 04 Feb 2025 17:58:55 +0000
ROA not before:           Tue 04 Feb 2025 17:53:55 +0000
ROA not after:            Tue 03 Feb 2026 17:58:55 +0000
asID:                     52491
IP address blocks:        179.60.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b2:34:05:e1:58:4e:ec:71:f5:76:08:e4:e0:ed:ed:d0:93:9b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
        Validity
            Not Before: Feb  4 17:53:55 2025 GMT
            Not After : Feb  3 17:58:55 2026 GMT
        Subject: CN=0E6F56EB4AC19BE22045AB5B5B7B21378019E763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:db:b5:a4:fa:b9:96:2b:43:1c:34:70:20:
                    51:26:10:50:17:10:38:1d:56:af:a3:9d:2b:53:79:
                    d1:69:ca:1a:cd:87:d1:52:73:4f:31:91:2d:31:ac:
                    91:f3:30:d2:79:f4:aa:83:78:58:ed:f5:1f:e0:da:
                    d1:e4:9c:33:4d:e2:06:74:8b:59:b2:81:da:18:a7:
                    56:26:e3:2e:7a:06:8f:e0:f2:78:19:53:ae:4c:65:
                    7e:d2:d3:f1:bf:b0:99:b8:45:50:a1:86:2b:91:c8:
                    4e:c1:6a:b8:b4:55:13:5e:5b:bf:bd:66:c0:86:6c:
                    75:91:ee:cf:5e:e7:4c:c1:2b:97:42:7c:28:b4:2b:
                    7d:18:7a:f4:df:bf:68:0c:b2:35:ec:02:c7:f3:9a:
                    14:b3:b7:5e:8a:bf:9c:01:a2:36:d7:0a:01:ea:c4:
                    b9:f0:92:4e:82:86:63:5a:17:e9:68:25:e3:a7:2b:
                    5f:a0:58:a8:a8:55:b4:6b:1c:11:d1:1b:16:57:f2:
                    1d:fe:b4:12:1a:c8:1a:1e:81:c8:24:bf:9d:d3:ed:
                    fd:b9:0b:6c:29:78:4f:f7:93:00:3f:b0:b3:30:e2:
                    d2:8b:8d:b1:72:85:45:29:3d:ed:0b:33:4d:da:ac:
                    42:d9:c0:ac:49:7a:69:3a:70:39:c1:69:8f:7f:14:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:56:EB:4A:C1:9B:E2:20:45:AB:5B:5B:7B:21:37:80:19:E7:63
            X509v3 Authority Key Identifier:
                keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:0e:e4:f8:d2:3f:ca:cf:a7:4e:40:7a:a9:9e:bb:30:2c:
         f4:c6:c6:1b:8d:21:c0:93:40:47:8f:ea:b2:99:7a:90:4d:c1:
         a9:e9:8e:23:b9:4b:ce:f3:d7:bd:8f:da:13:49:c1:5c:40:37:
         94:56:e9:4b:cc:64:90:4e:6d:b8:2f:bd:26:5d:e6:e4:eb:9f:
         57:70:59:25:0b:f8:cf:7b:fe:14:68:5e:d6:94:88:94:0b:0a:
         3b:0e:e9:e0:5d:ab:7e:93:df:25:95:db:9a:64:64:25:48:16:
         20:c4:e9:97:a2:b6:a1:e6:ee:ea:e5:f0:de:04:30:59:b8:eb:
         14:fa:6e:a7:22:e5:61:c7:ac:8e:c4:be:6c:83:37:23:58:d9:
         23:dc:05:eb:1e:78:2e:3e:07:ef:7f:51:30:b7:ea:d6:4f:3c:
         e3:0e:b0:22:34:8f:05:bd:31:ce:2f:d9:a4:86:87:85:ce:2b:
         f2:17:ce:23:9d:af:4d:c6:16:5f:90:46:22:0e:d5:21:9b:09:
         e4:f2:79:1a:8c:2a:46:00:14:a1:31:c7:cb:4e:de:f2:7b:38:
         fa:04:b7:a7:ae:f4:2a:6c:75:9d:35:a1:0d:c2:fc:6a:1c:2c:
         7b:d8:c1:f4:16:92:38:ac:3b:63:b3:46:22:34:90:b8:e8:d9:
         10:df:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:59 2025 by rpki-client