Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137392e34392e39362e302f32302d3234203d3e203237393535.roa
File:                     3137392e34392e39362e302f32302d3234203d3e203237393535.roa (raw, json)
Hash identifier:          aaTIoSd608dfDtJ+Aad9AqYPYwSZaO1QsD3fT3A/g5s=
Subject key identifier:   F6:80:93:3B:95:24:60:71:00:22:9C:26:83:B3:14:75:C3:F6:CC:D1
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       64694C924437779D4FA644171B4FDF109485F72B
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137392e34392e39362e302f32302d3234203d3e203237393535.roa
Signing time:             Tue 04 Feb 2025 18:44:05 +0000
ROA not before:           Tue 04 Feb 2025 18:39:05 +0000
ROA not after:            Tue 03 Feb 2026 18:44:05 +0000
asID:                     27955
IP address blocks:        179.49.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:69:4c:92:44:37:77:9d:4f:a6:44:17:1b:4f:df:10:94:85:f7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Feb  4 18:39:05 2025 GMT
            Not After : Feb  3 18:44:05 2026 GMT
        Subject: CN=F680933B9524607100229C2683B31475C3F6CCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:22:f0:b5:02:09:1f:71:08:1f:9c:85:90:
                    9f:db:92:f1:5c:d9:25:ed:c5:1d:ad:a9:51:26:49:
                    e8:28:c9:48:f8:45:26:7a:a5:27:aa:55:b7:64:c1:
                    f9:44:d2:38:d5:3c:43:79:a9:a5:d0:7c:32:4f:4d:
                    86:be:08:6b:e8:05:ca:85:1b:e9:56:50:4c:10:73:
                    0a:63:05:a0:32:f1:b9:ad:f6:57:16:e3:a2:88:bf:
                    08:54:3f:e7:b6:fb:e9:2f:9b:2a:2b:a8:71:79:03:
                    2d:74:86:9a:fe:a9:62:8b:17:f1:50:90:b4:6b:9c:
                    c4:f7:41:41:e1:10:a6:bc:94:9e:c6:d0:60:96:a3:
                    54:02:7c:a0:66:86:14:5b:7e:a2:82:d9:56:4b:24:
                    06:f4:53:43:83:74:9f:43:60:cf:8f:3e:85:ac:93:
                    ff:13:61:45:21:90:96:e7:71:12:14:49:b5:ce:68:
                    76:05:f2:72:1a:19:09:77:5d:d3:02:14:8a:fd:5e:
                    36:41:d6:10:47:80:e7:1d:73:0b:c4:5b:20:70:c3:
                    90:93:bd:8a:ad:e3:ee:78:1d:41:df:4e:f3:37:99:
                    56:1d:d9:e6:47:e2:63:7e:d1:c3:b0:18:06:2c:2d:
                    5e:1c:02:6e:9c:2e:51:eb:11:77:cd:a3:78:10:dd:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:93:3B:95:24:60:71:00:22:9C:26:83:B3:14:75:C3:F6:CC:D1
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137392e34392e39362e302f32302d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:de:0f:fe:8f:45:f6:f4:eb:7a:bc:e6:72:e9:23:95:e6:bc:
         56:93:28:3e:2e:01:3c:24:63:c4:04:ce:70:d1:20:21:b1:54:
         bd:20:59:3e:47:af:4a:6e:54:27:ff:dd:3c:1a:ef:a4:4a:00:
         e8:cf:9d:41:0a:01:10:08:e8:a3:34:2d:48:34:16:52:58:57:
         d1:0c:10:d6:cf:21:90:40:38:34:86:12:2f:8d:91:6b:c4:c1:
         8e:10:48:fe:25:96:f0:6a:cc:54:47:b9:73:c5:c5:25:60:44:
         9c:8e:3b:84:e1:9f:0b:1c:02:6c:76:cc:c9:03:23:56:e5:ef:
         25:11:64:c8:ca:54:ff:d1:44:1b:39:54:5e:fa:49:93:0e:ce:
         89:44:04:7d:b6:20:7f:0a:cd:4b:78:24:26:1a:57:65:e7:45:
         2a:6d:54:67:46:04:ba:17:3b:bb:8a:79:8b:b6:5d:dc:2e:60:
         c3:a2:14:66:08:19:c4:54:30:90:94:0b:5a:56:94:b4:ff:4f:
         5d:27:d0:d0:7a:bd:df:83:32:f4:e9:56:eb:60:5c:af:e8:91:
         8e:60:a7:cd:c5:69:0f:b9:ec:a5:47:a6:b3:b3:fe:53:6e:6d:
         bc:ff:3f:49:71:1f:c8:7f:44:e3:14:86:12:4e:1d:92:58:f5:
         26:f8:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:03:33 2025 by rpki-client