Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137392e302e3139362e302f32322d3234203d3e20323635353234.roa
File:                     3137392e302e3139362e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          EKrHbPUM83blKWIiqd4lzGxR/wwxs3m10bZtmOdvTOc=
Subject key identifier:   7F:0C:D2:43:85:4C:FC:01:CA:46:04:B3:15:5D:30:EB:F2:94:72:90
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       53AF23717D700538B0FE0A4E41834B3A03BAA339
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137392e302e3139362e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 05 Feb 2025 07:09:02 +0000
ROA not before:           Wed 05 Feb 2025 07:04:02 +0000
ROA not after:            Wed 04 Feb 2026 07:09:02 +0000
asID:                     265524
IP address blocks:        179.0.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:af:23:71:7d:70:05:38:b0:fe:0a:4e:41:83:4b:3a:03:ba:a3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Feb  5 07:04:02 2025 GMT
            Not After : Feb  4 07:09:02 2026 GMT
        Subject: CN=7F0CD243854CFC01CA4604B3155D30EBF2947290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:a8:7d:9c:d7:c9:0e:e1:e5:c0:1b:15:c9:
                    10:3b:ff:ac:87:c8:b7:43:3d:dd:95:36:7c:3e:f2:
                    b1:a2:8a:af:5b:b4:b2:17:64:56:6e:ab:4e:7e:33:
                    5e:07:da:2e:7f:88:65:d6:11:a9:a5:9f:b5:2b:a8:
                    9f:7c:81:de:c3:f9:85:59:30:93:d0:fa:d1:a7:fe:
                    da:67:5f:cc:d2:f5:17:0c:9c:04:eb:e4:cc:e3:33:
                    46:4c:4e:2b:72:90:ac:65:50:73:56:1b:a9:8a:7b:
                    7f:c3:67:22:7c:23:a0:37:27:21:6c:97:eb:7d:61:
                    8c:70:1c:2f:4c:ca:4a:3c:09:69:c9:0e:d6:0e:a4:
                    cc:ca:1e:f7:31:3f:83:09:7d:44:7d:80:9f:a2:ce:
                    50:5a:eb:3a:4a:7c:ba:3d:00:5e:57:46:44:0a:a8:
                    c2:c5:8f:32:30:4f:30:6f:87:d4:93:ca:5e:cc:2d:
                    69:54:eb:3c:2a:8d:7d:92:17:44:10:7f:20:e6:5a:
                    87:f7:0f:88:f2:69:b9:55:06:fc:48:b9:eb:08:74:
                    59:e4:85:f3:8b:d2:28:93:23:71:47:bb:72:1f:b1:
                    f2:cc:17:1e:a0:ff:f2:80:93:2a:b4:63:b7:26:fd:
                    83:c9:df:7e:49:65:92:e7:6a:d5:8b:7d:09:1d:e4:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0C:D2:43:85:4C:FC:01:CA:46:04:B3:15:5D:30:EB:F2:94:72:90
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137392e302e3139362e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:97:de:a4:ee:bc:8e:73:1b:ee:45:f5:1e:43:f8:40:99:a7:
         d0:72:af:1b:ba:38:7e:2f:54:8a:c8:23:25:0a:9a:8e:0f:4f:
         c1:1b:20:0b:18:6e:76:e3:84:7c:7a:c6:64:ec:b4:0d:63:1f:
         a7:c9:a6:55:ad:9d:49:89:56:24:a5:e2:c7:5a:fc:a4:84:73:
         93:f7:02:23:ef:3a:bc:79:05:19:f7:b4:02:83:fe:8b:f3:98:
         ab:a1:49:4d:4e:e8:6f:00:35:4c:e2:0b:bc:a1:bc:eb:fc:55:
         08:9f:1d:1a:94:6c:97:ee:d9:8c:97:be:1d:3d:14:c4:67:d4:
         b3:11:e6:67:54:89:30:7a:6c:ec:5c:52:00:bc:eb:e9:9c:37:
         03:55:43:91:db:38:15:ec:35:65:cc:f1:03:7f:89:0c:5a:ca:
         5e:22:15:ba:69:14:47:d9:cd:89:31:12:01:9f:65:83:37:d2:
         6a:ee:50:f8:20:40:0d:30:ee:9a:63:10:a4:43:92:db:9c:e3:
         8b:31:05:1f:ad:98:27:6a:ed:51:7a:03:f2:b8:11:37:06:45:
         80:38:dc:19:39:e2:42:ab:07:62:6d:77:73:c8:d6:b2:a3:c2:
         68:1f:34:b4:5b:6c:11:e9:3f:e4:d8:da:6f:f0:59:89:01:4e:
         19:93:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:01:49 2025 by rpki-client