Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/3137392e34332e3130342e302f32312d3234203d3e20323634363539.roa
File:                     3137392e34332e3130342e302f32312d3234203d3e20323634363539.roa (raw, json)
Hash identifier:          6BH5AhzMTTQSN5NHpa7IyXoyd2Z9xI3DIRwOyMM5TRg=
Subject key identifier:   A4:7D:B2:3D:14:B9:14:9E:67:90:AA:59:7B:21:18:54:F5:F0:6E:A1
Certificate issuer:       /CN=2FE17014E75975FCF1540FF846074AB18777F866
Certificate serial:       59D639A0CACAF13163630EEE8EB0652BEA5C4042
Authority key identifier: 2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/3137392e34332e3130342e302f32312d3234203d3e20323634363539.roa
Signing time:             Thu 22 May 2025 22:00:00 +0000
ROA not before:           Thu 22 May 2025 21:55:00 +0000
ROA not after:            Thu 21 May 2026 22:00:00 +0000
asID:                     264659
IP address blocks:        179.43.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 12:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d6:39:a0:ca:ca:f1:31:63:63:0e:ee:8e:b0:65:2b:ea:5c:40:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE17014E75975FCF1540FF846074AB18777F866
        Validity
            Not Before: May 22 21:55:00 2025 GMT
            Not After : May 21 22:00:00 2026 GMT
        Subject: CN=A47DB23D14B9149E6790AA597B211854F5F06EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:1c:c4:32:97:c6:dc:f9:ea:6e:f2:d8:e6:
                    bc:0e:c0:46:15:d5:04:1c:c8:b9:de:4c:2b:3f:33:
                    e6:9a:56:20:85:32:1d:7a:a9:40:ee:90:a0:72:a7:
                    3d:e9:96:ff:d5:de:f8:07:f8:a6:3b:01:46:fb:78:
                    95:e7:b0:28:7a:f7:e5:a9:be:dd:a3:53:42:52:d1:
                    71:86:b4:45:14:0e:d1:0a:ff:f4:6e:56:9a:ee:5d:
                    73:61:13:6e:be:2b:5f:95:a3:a6:f9:0d:64:42:36:
                    5e:8a:52:15:86:3c:f3:97:34:65:6d:c7:07:b6:cc:
                    f1:ea:4f:59:a9:3a:0b:77:88:99:70:d8:08:bb:11:
                    b2:b2:c2:57:9e:be:8f:53:11:57:be:c8:b1:b7:71:
                    4b:5f:37:65:26:2e:b7:2e:df:50:e8:46:07:d8:4e:
                    fa:7c:8b:e8:2d:1a:e3:5f:f0:7b:09:3c:05:f5:41:
                    43:b7:67:9a:a6:07:b4:a5:b3:23:c0:8b:e8:27:c1:
                    9a:7f:80:2c:83:b2:19:5a:89:02:35:80:67:2a:8d:
                    08:ae:af:65:95:3a:44:b7:bf:c0:26:20:43:ff:f1:
                    41:6e:9c:cf:c9:0c:31:ed:e5:10:e3:0f:43:b3:16:
                    f2:fb:84:76:e0:d6:71:6e:a0:a7:e8:61:ed:4a:f3:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7D:B2:3D:14:B9:14:9E:67:90:AA:59:7B:21:18:54:F5:F0:6E:A1
            X509v3 Authority Key Identifier:
                keyid:2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/3137392e34332e3130342e302f32312d3234203d3e20323634363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:4e:40:dc:f2:c5:0d:be:41:f1:b0:ee:e7:c5:46:dc:1e:
         ea:dd:4c:b1:8a:22:d6:50:91:ec:4c:45:d2:31:16:60:83:ea:
         d8:56:26:98:d9:fa:84:1f:11:77:1a:27:f6:dd:2c:9e:e2:6c:
         3b:a3:4f:4d:09:e2:f6:fb:d5:4e:76:7b:66:14:ca:12:54:6a:
         f0:d4:c0:2b:73:4e:56:ca:ef:9f:d1:a6:94:0b:01:bd:55:ee:
         f2:53:ef:27:7a:01:9d:a6:70:fe:48:eb:bc:74:8a:59:c8:b9:
         10:5c:65:ce:87:de:9e:2d:1c:f2:4e:ba:d8:48:e0:b5:d0:5b:
         d2:01:a8:7e:76:67:1b:c4:70:c5:c9:04:d8:e5:92:2b:1b:d8:
         4f:a3:f7:8d:92:f0:30:4d:07:53:09:a1:1e:fe:bc:e1:f1:34:
         f9:c4:e5:a3:39:aa:9f:41:db:e4:27:24:e3:ef:7b:1c:49:fb:
         19:4e:a2:fa:a0:bc:97:f3:cf:00:6c:25:1a:ea:8e:96:b0:79:
         1c:bd:e7:e0:41:7c:7e:6e:41:a6:99:0a:90:73:14:83:3c:8c:
         b7:eb:0c:04:ef:a3:06:ae:9f:94:e8:df:60:5c:db:5a:8e:ad:
         89:b6:fb:bf:59:2a:33:12:55:5a:b1:89:fd:ea:70:29:ef:23:
         d7:8e:d5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:42 2025 by rpki-client