Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3672AE02CC15395AB7FBC884406A606336846D0F0B3A16984487AFA6A616683/0/3137392e35312e3230342e302f32342d3234203d3e20323731373936.roa
File:                     3137392e35312e3230342e302f32342d3234203d3e20323731373936.roa (raw, json)
Hash identifier:          OywmOfKu3uSgyZZDVgRKfNkz+UtSxxV6iJrH3dn9yGo=
Subject key identifier:   ED:FE:D1:FD:A8:8C:21:F6:CA:35:37:47:B5:FB:95:B5:56:D9:4B:0E
Certificate issuer:       /CN=EE75D9873EDCE043ED443DF050782EB7FEE3BF94
Certificate serial:       521016A27ABE7A564C2CE8AE016D4D787CDB98E5
Authority key identifier: EE:75:D9:87:3E:DC:E0:43:ED:44:3D:F0:50:78:2E:B7:FE:E3:BF:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE75D9873EDCE043ED443DF050782EB7FEE3BF94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3672AE02CC15395AB7FBC884406A606336846D0F0B3A16984487AFA6A616683/0/3137392e35312e3230342e302f32342d3234203d3e20323731373936.roa
Signing time:             Tue 04 Feb 2025 18:12:39 +0000
ROA not before:           Tue 04 Feb 2025 18:07:39 +0000
ROA not after:            Tue 03 Feb 2026 18:12:39 +0000
asID:                     271796
IP address blocks:        179.51.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3672AE02CC15395AB7FBC884406A606336846D0F0B3A16984487AFA6A616683/0/EE75D9873EDCE043ED443DF050782EB7FEE3BF94.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3672AE02CC15395AB7FBC884406A606336846D0F0B3A16984487AFA6A616683/0/EE75D9873EDCE043ED443DF050782EB7FEE3BF94.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE75D9873EDCE043ED443DF050782EB7FEE3BF94.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:10:16:a2:7a:be:7a:56:4c:2c:e8:ae:01:6d:4d:78:7c:db:98:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE75D9873EDCE043ED443DF050782EB7FEE3BF94
        Validity
            Not Before: Feb  4 18:07:39 2025 GMT
            Not After : Feb  3 18:12:39 2026 GMT
        Subject: CN=EDFED1FDA88C21F6CA353747B5FB95B556D94B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:95:7a:55:e0:98:7f:bb:a2:16:3d:1e:5f:
                    70:85:bd:75:6e:bb:25:79:b7:12:f3:a5:93:fc:17:
                    35:4b:72:b3:ee:c5:28:47:bf:54:50:a5:df:45:32:
                    94:af:3e:8f:3a:3d:6f:13:84:ca:5b:a5:e8:9e:87:
                    18:93:af:52:6c:cf:4b:44:5f:57:c0:84:17:92:39:
                    99:93:d7:4e:5c:a3:92:6f:48:37:f5:66:7c:d1:cf:
                    f5:04:36:b7:a9:a8:12:c3:e0:07:59:f2:08:1d:bf:
                    7e:20:ae:a2:57:13:1d:bc:b5:d6:c5:11:f9:1a:81:
                    36:65:36:e1:a3:99:a5:ae:c9:78:39:d4:d8:d0:75:
                    5f:c8:8c:6f:46:a6:c8:67:65:25:d6:68:29:6f:09:
                    ce:53:e9:e7:e3:e9:d9:1b:f2:23:b0:3b:38:7a:b2:
                    72:e6:2e:49:37:e9:dd:d5:58:d9:48:05:ec:28:ee:
                    8d:78:bb:92:7e:7d:b4:f5:ee:ae:b1:14:91:8e:45:
                    ee:fb:de:d2:35:d3:9f:e2:a4:28:cd:7e:ca:83:39:
                    fc:a6:91:31:de:c5:6d:65:90:88:ba:ce:d6:30:8b:
                    46:c0:78:bc:96:be:40:56:a0:d8:ff:da:9b:a9:64:
                    16:9a:c2:58:65:0a:52:5a:ee:2f:c6:21:f5:e9:df:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:D1:FD:A8:8C:21:F6:CA:35:37:47:B5:FB:95:B5:56:D9:4B:0E
            X509v3 Authority Key Identifier:
                keyid:EE:75:D9:87:3E:DC:E0:43:ED:44:3D:F0:50:78:2E:B7:FE:E3:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3672AE02CC15395AB7FBC884406A606336846D0F0B3A16984487AFA6A616683/0/EE75D9873EDCE043ED443DF050782EB7FEE3BF94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE75D9873EDCE043ED443DF050782EB7FEE3BF94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3672AE02CC15395AB7FBC884406A606336846D0F0B3A16984487AFA6A616683/0/3137392e35312e3230342e302f32342d3234203d3e20323731373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:56:e5:f5:02:03:ae:23:f7:c4:66:32:3a:ee:72:fd:34:49:
         32:09:3c:80:71:b6:cf:27:dd:1e:4f:37:d7:59:5c:3d:91:a9:
         e0:92:3d:16:65:07:c1:cc:ed:ee:41:e8:9c:ab:d4:f2:3a:e6:
         55:95:c6:63:04:58:b5:58:5c:d2:bb:d7:0e:c1:18:88:53:f0:
         f9:c3:50:76:ed:b1:5a:5e:aa:92:ab:24:8c:eb:12:05:b9:a8:
         9a:f4:b7:aa:8b:0e:9b:7b:15:37:7b:90:53:87:ad:9d:50:90:
         fe:6b:eb:f9:94:5d:68:c3:28:0d:09:ed:ea:1e:45:37:54:78:
         cb:68:50:55:dd:49:19:e9:57:7d:32:1b:97:76:b3:b0:01:a6:
         c8:e4:66:31:e2:46:7d:f7:62:24:d9:99:4c:94:c4:c9:f0:86:
         69:39:68:1e:a6:ef:4a:7f:84:e2:7d:45:c1:bc:e1:83:02:39:
         4a:7b:8c:3a:c5:cf:cd:f7:b4:dc:90:f9:80:6d:17:f2:4b:c7:
         d9:35:30:82:b9:f2:a0:4f:82:28:e9:3c:49:08:f4:34:23:02:
         00:74:cf:f0:ff:68:22:9e:0b:ad:26:13:43:0f:57:27:07:3e:
         7a:2a:b1:04:46:84:7e:06:92:93:04:74:98:2f:3a:e9:ba:a4:
         a7:10:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:42 2025 by rpki-client