Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137392e36302e3231322e302f32322d3234203d3e203237383030.roa
File:                     3137392e36302e3231322e302f32322d3234203d3e203237383030.roa (raw, json)
Hash identifier:          M4nU2gWIhPtfJwIJ+b/S+vhoFGZPhX/QH2v3tNykF3A=
Subject key identifier:   DE:47:DC:34:65:08:70:78:54:19:1F:66:AE:D6:4E:9D:6E:4D:A9:63
Certificate issuer:       /CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
Certificate serial:       46C956533F86D7DF8AEFB91EAD6FBA0282E8CA99
Authority key identifier: 2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137392e36302e3231322e302f32322d3234203d3e203237383030.roa
Signing time:             Tue 04 Feb 2025 19:58:41 +0000
ROA not before:           Tue 04 Feb 2025 19:53:41 +0000
ROA not after:            Tue 03 Feb 2026 19:58:41 +0000
asID:                     27800
IP address blocks:        179.60.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:56:53:3f:86:d7:df:8a:ef:b9:1e:ad:6f:ba:02:82:e8:ca:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
        Validity
            Not Before: Feb  4 19:53:41 2025 GMT
            Not After : Feb  3 19:58:41 2026 GMT
        Subject: CN=DE47DC346508707854191F66AED64E9D6E4DA963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:bb:91:5e:57:b1:27:6a:6c:e9:d0:32:da:
                    53:15:68:67:87:3c:a8:3a:04:0e:be:ec:e6:ea:ea:
                    22:0e:9b:65:fc:1f:2c:9f:b0:aa:f3:c6:98:dc:42:
                    0c:96:f5:4b:d8:0a:e1:a1:f0:b4:9f:85:7d:6b:98:
                    7a:77:e8:2d:46:d6:a8:e1:fa:c5:25:89:85:74:9a:
                    cb:bb:dc:92:ba:c2:ce:a7:c1:b1:f1:29:9e:59:47:
                    58:df:9e:9a:dd:e2:d1:b8:84:f5:5c:b7:27:cd:c1:
                    1b:0d:69:06:22:d3:14:f0:87:a3:53:db:f9:08:95:
                    83:c0:80:1c:68:78:ca:60:99:e8:1a:c5:39:cb:45:
                    f0:02:d0:7b:54:4f:15:e3:b5:33:2d:88:c6:4e:f6:
                    8f:4c:05:71:75:bb:b1:b9:cf:75:2a:bf:c1:b2:1f:
                    b1:e6:18:ea:4b:34:bd:6e:16:fb:96:90:f3:cf:06:
                    b9:b6:4e:d6:3b:73:a1:f3:f6:81:0e:89:76:1c:45:
                    0f:f7:56:2e:9f:a1:ff:8f:60:a8:ce:f2:bf:6d:de:
                    35:b8:6c:b0:97:da:57:f8:f1:ce:61:b2:3a:6f:0b:
                    37:7c:09:57:ea:2a:32:0c:78:6e:dd:b9:9f:6e:60:
                    77:63:cc:a1:23:a1:e3:9f:9c:57:f0:49:7e:cd:90:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:DC:34:65:08:70:78:54:19:1F:66:AE:D6:4E:9D:6E:4D:A9:63
            X509v3 Authority Key Identifier:
                keyid:2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137392e36302e3231322e302f32322d3234203d3e203237383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:20:33:04:27:61:94:8a:b2:0f:11:39:66:a1:32:10:e7:4d:
         bf:f7:e6:e9:61:c4:bc:00:c0:ac:7e:11:01:93:a0:d1:bd:25:
         c8:3a:c8:67:c6:c9:53:cb:cc:91:b8:f1:a2:08:2e:68:e9:8a:
         63:26:0e:1e:0c:e4:7c:ea:d0:af:f9:df:1b:24:a4:a8:60:b1:
         6c:bd:d7:65:ae:87:e6:3b:c1:ea:ca:23:ad:f1:7a:3e:cf:fb:
         f9:c5:55:49:ee:23:eb:be:9c:00:08:c3:dd:a5:ea:8f:45:e2:
         7a:df:4e:8e:43:c9:12:bf:44:1f:88:79:24:7b:72:c0:77:9d:
         e1:d2:38:15:7b:50:1f:a2:f4:df:fd:ef:3b:98:93:a0:6d:e6:
         03:3f:f7:b0:9d:41:77:3d:4e:8d:9b:8d:a6:40:e7:14:98:c0:
         ae:cf:ab:60:09:b1:84:ee:cf:9f:44:8b:91:dd:69:74:9e:7b:
         e0:a3:90:8c:a9:fb:ae:58:59:d7:b0:42:61:e8:bb:b3:f0:aa:
         b9:b8:7e:8c:97:fc:41:ff:5f:e7:9b:04:52:fc:01:a1:54:2d:
         4f:a2:db:23:24:37:aa:8e:14:2d:ac:ba:ae:04:39:df:43:7f:
         13:0b:05:1b:22:d4:2e:47:77:a9:16:c3:d1:97:f8:da:a3:e8:
         91:98:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:28 2025 by rpki-client