Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa
File:                     3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa (raw, json)
Hash identifier:          scAoKsLBSoCi8yX9v8A273F4Oet0EIbJYC5yBKPFXkQ=
Subject key identifier:   93:65:E9:B8:B9:92:9D:6D:FE:56:DC:B6:CF:77:D0:9B:45:ED:B0:D9
Certificate issuer:       /CN=21711620AC4F377630443FF5BDD3C78255256F48
Certificate serial:       03D767B6391120BCD66B2B427C52C6A3FE0F4483
Authority key identifier: 21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa
Signing time:             Tue 04 Feb 2025 18:00:02 +0000
ROA not before:           Tue 04 Feb 2025 17:55:02 +0000
ROA not after:            Tue 03 Feb 2026 18:00:02 +0000
asID:                     263194
IP address blocks:        179.43.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d7:67:b6:39:11:20:bc:d6:6b:2b:42:7c:52:c6:a3:fe:0f:44:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21711620AC4F377630443FF5BDD3C78255256F48
        Validity
            Not Before: Feb  4 17:55:02 2025 GMT
            Not After : Feb  3 18:00:02 2026 GMT
        Subject: CN=9365E9B8B9929D6DFE56DCB6CF77D09B45EDB0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:84:21:08:04:56:68:42:a2:d2:83:52:e1:
                    21:38:48:27:9a:8e:b8:46:8f:48:6d:c8:58:46:b3:
                    8c:4c:54:4a:4a:46:97:e1:5b:03:1d:68:50:ae:f5:
                    4c:06:90:6d:ba:02:0a:9f:f5:68:96:fe:66:0e:06:
                    77:06:df:77:d1:da:50:5a:2d:ae:58:8c:2f:4f:3f:
                    19:e1:67:af:09:f9:10:cb:2b:64:dd:b1:33:3d:5d:
                    8b:df:f3:b1:9a:5b:20:19:7c:dd:fe:44:15:00:db:
                    b2:b1:72:ee:34:cd:15:5b:39:63:60:b9:c8:a7:a2:
                    f5:80:62:12:49:93:6f:95:d1:ca:92:2d:c8:7b:86:
                    f0:41:9d:b4:9e:51:e1:a3:85:a0:56:59:8c:27:6e:
                    4a:3a:06:88:70:fd:eb:3c:5a:b1:a6:d4:c6:2f:11:
                    3e:c0:65:3b:e9:98:1f:c3:51:34:47:ec:b2:c1:f1:
                    b9:05:6d:f7:2d:6b:4b:89:82:d8:96:42:a8:14:6c:
                    83:fb:8f:d8:ba:b5:d8:97:78:53:53:b6:b6:13:29:
                    cd:c8:53:cd:0c:58:ab:cf:44:4a:72:e3:b5:4d:07:
                    cd:d2:2e:bd:92:bd:e4:e3:e9:57:b7:fc:0b:3b:64:
                    e5:1e:5a:16:cf:82:a4:d3:ae:75:82:df:69:85:b6:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:65:E9:B8:B9:92:9D:6D:FE:56:DC:B6:CF:77:D0:9B:45:ED:B0:D9
            X509v3 Authority Key Identifier:
                keyid:21:71:16:20:AC:4F:37:76:30:44:3F:F5:BD:D3:C7:82:55:25:6F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/21711620AC4F377630443FF5BDD3C78255256F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21711620AC4F377630443FF5BDD3C78255256F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E02B0C6895894B6BCA21D3E7E09A9D7D304886998A3E330F7FCD1665550CDF21/0/3137392e34332e3130302e302f32322d3234203d3e20323633313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:77:53:5e:76:4e:8f:24:ce:f1:92:f3:fe:4a:cb:d9:8c:
         bb:e6:9e:4c:ba:3b:b0:0a:c5:7f:c6:d0:61:80:47:ab:cd:31:
         7a:70:d3:f7:5d:97:f4:04:89:31:19:49:d8:a1:f9:c7:bf:c8:
         0f:10:65:eb:14:98:f4:14:1d:14:59:a2:7d:80:22:d7:17:92:
         14:f2:39:eb:f2:c8:12:71:6c:55:45:b2:41:3c:9a:8f:cc:c4:
         55:d1:d6:33:e9:b8:76:29:7d:f2:4b:8f:05:15:d6:33:da:e2:
         53:88:5d:96:1f:22:59:50:0d:0e:9b:7d:b7:5f:ea:f2:b7:f8:
         b4:98:b3:11:aa:cb:d3:1a:17:ac:cd:36:17:0f:6e:2c:44:33:
         de:b4:d9:a0:44:d2:e1:dd:16:a6:03:99:06:93:fc:64:35:6e:
         ca:a4:76:28:d4:6b:30:b2:ca:b4:b3:59:c0:07:42:64:fe:2c:
         dc:a0:c9:83:fe:44:ce:c1:f4:90:d2:50:af:9d:78:91:f3:71:
         21:73:42:75:e4:9a:4d:12:6d:34:8f:30:2d:36:56:92:86:11:
         10:1f:89:f8:ce:49:91:b1:65:a5:e9:ae:75:47:29:78:be:4b:
         58:48:f4:6e:39:9f:b3:0d:a0:6b:6d:62:2d:11:58:1d:67:a0:
         24:c6:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:53 2025 by rpki-client