Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/3137392e36302e3133362e302f32322d3234203d3e20323639393932.roa
File:                     3137392e36302e3133362e302f32322d3234203d3e20323639393932.roa (raw, json)
Hash identifier:          NuZHKV2Ov8y1MtXRU5P6IRNP6ajfSSjdqHd7JH8oTzY=
Subject key identifier:   AB:3E:51:43:F7:AD:83:78:55:99:58:AE:6E:4A:2B:5C:85:32:DA:3D
Certificate issuer:       /CN=A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC
Certificate serial:       2FAD73BF1F01F1D89182110A650ACE588B811D50
Authority key identifier: A3:54:2B:13:5B:BE:D4:B3:6D:F5:AF:7D:01:9B:48:E3:C2:BB:2A:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/3137392e36302e3133362e302f32322d3234203d3e20323639393932.roa
Signing time:             Tue 04 Feb 2025 18:46:19 +0000
ROA not before:           Tue 04 Feb 2025 18:41:19 +0000
ROA not after:            Tue 03 Feb 2026 18:46:19 +0000
asID:                     269992
IP address blocks:        179.60.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ad:73:bf:1f:01:f1:d8:91:82:11:0a:65:0a:ce:58:8b:81:1d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC
        Validity
            Not Before: Feb  4 18:41:19 2025 GMT
            Not After : Feb  3 18:46:19 2026 GMT
        Subject: CN=AB3E5143F7AD8378559958AE6E4A2B5C8532DA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:4d:f2:67:9f:0f:47:68:03:99:ab:78:8b:
                    5f:49:b3:24:e4:d5:43:6b:c3:9b:0b:c3:af:9e:62:
                    f4:99:d2:7b:6b:86:32:c2:dd:b5:a3:e1:55:86:81:
                    19:9d:f2:67:9d:66:3f:c8:1e:4d:d9:4b:74:4a:69:
                    0d:b6:5e:34:3a:db:ed:12:ca:73:ed:bf:51:48:15:
                    ef:59:eb:1f:4f:3b:f9:f0:20:bf:22:a2:84:3e:82:
                    70:6b:f0:0f:b5:27:ad:c7:a7:59:0a:c3:aa:0e:a0:
                    2c:44:8b:3c:5c:f6:0d:d4:41:e1:48:bb:cc:a5:27:
                    e8:e0:d3:33:1c:c7:b0:f1:e1:8f:3a:f8:3c:2f:15:
                    13:2b:0e:e8:bf:fa:39:0d:0f:29:3f:21:56:83:b0:
                    31:4e:d4:99:59:7e:68:e5:19:82:1d:b4:d6:af:e3:
                    d1:ea:07:e3:5b:e4:11:9a:67:4d:f0:ec:16:f6:fb:
                    f0:49:8b:97:c5:77:5a:43:f9:fb:ac:bb:67:b3:41:
                    43:2c:f0:eb:18:e3:5a:6e:91:ac:f5:65:09:e8:1f:
                    85:30:70:2c:0f:98:75:af:85:7a:f6:cf:0d:15:11:
                    2f:c5:db:f1:fe:ca:d7:e1:ec:0a:70:01:a2:42:b2:
                    de:c1:7b:ab:19:72:48:e5:a0:81:20:37:f5:7e:67:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:51:43:F7:AD:83:78:55:99:58:AE:6E:4A:2B:5C:85:32:DA:3D
            X509v3 Authority Key Identifier:
                keyid:A3:54:2B:13:5B:BE:D4:B3:6D:F5:AF:7D:01:9B:48:E3:C2:BB:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/3137392e36302e3133362e302f32322d3234203d3e20323639393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:e9:24:e7:b2:2d:ef:3c:5a:4d:7b:4b:a8:58:88:21:30:
         0f:e4:22:18:0f:37:a9:40:0c:a1:ad:03:65:05:fb:4c:a3:a0:
         23:4d:9b:b2:5e:06:d6:ce:38:73:cf:2e:40:8d:32:76:f7:b6:
         bf:f3:33:ce:f5:0a:da:a0:89:a7:69:ce:41:04:c3:74:19:88:
         b9:71:3c:db:00:55:8b:c7:87:57:e8:d2:62:88:4b:ae:61:28:
         44:0a:a9:33:99:4a:a5:bb:e9:ab:e9:28:b0:fa:7a:09:6d:31:
         d1:87:83:b6:7f:da:a6:65:e2:5c:55:40:a1:4c:0d:dd:37:06:
         78:29:37:4f:bd:9a:7d:56:32:5c:7d:a1:81:b6:54:2e:43:62:
         3d:f2:a9:ec:46:2a:7a:a6:53:cc:3a:0e:9d:e2:78:35:a2:7c:
         08:ef:de:94:6f:bc:6c:c2:12:bd:03:df:9c:a7:93:ff:a5:4c:
         ca:cb:3f:3c:3a:8d:27:b1:e3:cc:ab:82:14:cc:e6:7c:71:7d:
         87:11:e2:c1:6d:64:cb:d5:4e:7e:34:39:bf:e2:20:b8:4d:34:
         79:ac:60:b0:ea:ca:1b:ca:9b:ae:42:ee:61:d5:55:ee:f1:72:
         bf:8f:18:95:e6:08:63:72:dc:3d:3c:af:a0:7f:76:2f:1b:3f:
         81:94:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:27 2025 by rpki-client