Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3137392e36302e3135322e302f32312d3234203d3e203532333830.roa
File:                     3137392e36302e3135322e302f32312d3234203d3e203532333830.roa (raw, json)
Hash identifier:          hQN2usDgeCjIWT8K8kLmUuLwStq3y7TAvq0xNu1KFQ0=
Subject key identifier:   E7:DE:DD:91:65:B9:F0:49:82:DA:BE:70:8E:EF:D5:DF:E4:C6:20:69
Certificate issuer:       /CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
Certificate serial:       476936BDB172E8D555F4541799BC3A62714512AA
Authority key identifier: 98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3137392e36302e3135322e302f32312d3234203d3e203532333830.roa
Signing time:             Tue 04 Feb 2025 18:09:36 +0000
ROA not before:           Tue 04 Feb 2025 18:04:36 +0000
ROA not after:            Tue 03 Feb 2026 18:09:36 +0000
asID:                     52380
IP address blocks:        179.60.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:69:36:bd:b1:72:e8:d5:55:f4:54:17:99:bc:3a:62:71:45:12:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
        Validity
            Not Before: Feb  4 18:04:36 2025 GMT
            Not After : Feb  3 18:09:36 2026 GMT
        Subject: CN=E7DEDD9165B9F04982DABE708EEFD5DFE4C62069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:45:af:3b:5e:3b:56:fa:e9:2c:61:65:3a:
                    df:bc:55:8b:5e:29:65:31:3e:97:17:4a:53:95:64:
                    87:ad:31:df:5e:ea:b1:d1:83:a3:ea:11:91:79:87:
                    a5:f7:e4:01:08:a6:9f:c3:1e:9c:33:fa:61:f4:f3:
                    3c:81:0a:5e:95:75:2f:83:78:26:ae:39:c4:4d:71:
                    1e:7e:c3:51:f8:24:36:53:61:ad:54:7a:99:4c:80:
                    b8:90:c1:10:c5:8b:2e:7b:a0:1e:6a:b1:f2:ee:67:
                    9b:67:ff:26:8a:e6:61:48:fe:a3:12:f3:df:f0:db:
                    5f:18:39:06:a5:54:0a:53:2e:f1:22:23:e1:a6:8e:
                    78:48:46:9b:11:c4:35:5b:19:df:33:9f:17:51:12:
                    55:05:2c:1e:a2:eb:2d:31:33:67:a7:d3:8d:e9:a5:
                    96:7f:2a:94:1a:67:da:43:4c:9e:24:bd:43:67:bc:
                    c8:d4:51:47:3b:00:aa:86:04:d6:71:20:30:f7:ba:
                    42:6c:fa:60:9e:aa:78:e0:34:52:63:0b:16:04:a2:
                    57:48:51:91:21:35:a6:01:5f:91:57:2d:44:88:08:
                    b2:30:c9:7e:43:12:b0:e3:21:38:8d:99:d3:0e:ed:
                    3b:79:6b:1b:fb:36:a7:f5:06:19:a2:b1:eb:3b:db:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:DD:91:65:B9:F0:49:82:DA:BE:70:8E:EF:D5:DF:E4:C6:20:69
            X509v3 Authority Key Identifier:
                keyid:98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3137392e36302e3135322e302f32312d3234203d3e203532333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:98:8a:3b:91:ca:71:c8:83:bf:69:4d:64:d6:ed:b9:df:0a:
         fe:b3:61:08:cd:02:81:ad:5c:52:3e:a8:04:4f:c8:5a:3d:cc:
         46:07:54:5a:23:98:bf:e8:63:7f:12:50:ef:71:2f:c1:42:32:
         6d:67:4d:ea:68:9f:66:d4:97:a9:25:27:47:84:f9:9f:5a:4b:
         a2:f5:57:ab:86:53:e6:a2:5b:18:73:26:9a:70:f5:89:bb:b2:
         24:97:66:5e:f4:95:86:55:56:19:20:b4:1e:d2:57:e6:41:1f:
         70:b5:1a:29:97:0b:5e:59:36:a2:3f:f1:98:72:c2:07:a5:af:
         7e:d1:82:50:fb:7e:b3:62:aa:c5:ae:d7:31:4c:95:98:9c:ab:
         07:99:f2:bf:0d:19:8e:ad:b0:eb:93:fd:f4:61:8b:23:ce:e0:
         10:87:43:7f:7c:09:1e:5a:98:04:f0:6a:3a:33:a6:5c:29:3a:
         b0:76:7f:35:a4:55:c9:78:2c:c1:21:e0:44:e2:9d:22:db:90:
         8c:34:07:dc:ff:6f:7b:b7:34:2f:58:0a:8a:98:5e:e0:e7:4b:
         28:7e:26:7c:6b:80:dc:12:d2:7e:cd:68:19:fd:66:d5:46:98:
         29:de:12:3b:ac:5f:6e:f5:fc:fb:c3:c5:80:fb:42:8a:42:bd:
         54:5b:bb:8f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUR2k2vbFy6NVV9FQXmbw6YnFFEqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCMjJENUY1RjE5Nzk5NDBFMEIyQzFGQTVBNjZBRTcy
ODFCRkIzMTAeFw0yNTAyMDQxODA0MzZaFw0yNjAyMDMxODA5MzZaMDMxMTAvBgNV
BAMTKEU3REVERDkxNjVCOUYwNDk4MkRBQkU3MDhFRUZENURGRTRDNjIwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOUWvO147VvrpLGFlOt+8VYte
KWUxPpcXSlOVZIetMd9e6rHRg6PqEZF5h6X35AEIpp/DHpwz+mH08zyBCl6VdS+D
eCauOcRNcR5+w1H4JDZTYa1UeplMgLiQwRDFiy57oB5qsfLuZ5tn/yaK5mFI/qMS
89/w218YOQalVApTLvEiI+GmjnhIRpsRxDVbGd8znxdRElUFLB6i6y0xM2en043p
pZZ/KpQaZ9pDTJ4kvUNnvMjUUUc7AKqGBNZxIDD3ukJs+mCeqnjgNFJjCxYEoldI
UZEhNaYBX5FXLUSICLIwyX5DErDjITiNmdMO7Tt5axv7Nqf1Bhmises727oXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU597dkWW58EmC2r5wju/V3+TGIGkwHwYDVR0j
BBgwFoAUmLItX18ZeZQOCywfpaZq5ygb+zEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0UyQjA5OTUzMzA1RTBFREQ4MEIxNTU4MTIxQURFNDBD
RDY0QzRBODAxODNDMDlCRTAzMTVCOUJGQTU1QTQyLzAvOThCMjJENUY1RjE5Nzk5
NDBFMEIyQzFGQTVBNjZBRTcyODFCRkIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEIyMkQ1RjVGMTk3OTk0MEUw
QjJDMUZBNUE2NkFFNzI4MUJGQjMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNFMkIwOTk1MzMwNUUwRUREODBCMTU1ODEyMUFERTQwQ0Q2NEM0QTgw
MTgzQzA5QkUwMzE1QjlCRkE1NUE0Mi8wLzMxMzczOTJlMzYzMDJlMzEzNTMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjMzMzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7M8mDAN
BgkqhkiG9w0BAQsFAAOCAQEAEpiKO5HKcciDv2lNZNbtud8K/rNhCM0Cga1cUj6o
BE/IWj3MRgdUWiOYv+hjfxJQ73EvwUIybWdN6mifZtSXqSUnR4T5n1pLovVXq4ZT
5qJbGHMmmnD1ibuyJJdmXvSVhlVWGSC0HtJX5kEfcLUaKZcLXlk2oj/xmHLCB6Wv
ftGCUPt+s2Kqxa7XMUyVmJyrB5nyvw0Zjq2w65P99GGLI87gEIdDf3wJHlqYBPBq
OjOmXCk6sHZ/NaRVyXgswSHgROKdItuQjDQH3P9ve7c0L1gKiphe4OdLKH4mfGuA
3BLSfs1oGf1m1UaYKd4SO6xfbvX8+8PFgPtCikK9VFu7jw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:20 2025 by rpki-client