Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323733383738.roa
File:                     3137392e36332e3138382e302f32342d3234203d3e20323733383738.roa (raw, json)
Hash identifier:          r1hQG5EUcwg9HY1dP8W62wCx6P2SdfBDjSL6y+oQVVA=
Subject key identifier:   D7:E5:64:D0:09:75:09:6C:24:C5:80:09:F2:EB:48:08:EA:3D:11:48
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       5F4DBFC398ABB842F31D450243BA4E7A95D1195C
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323733383738.roa
Signing time:             Tue 03 Jun 2025 01:25:00 +0000
ROA not before:           Tue 03 Jun 2025 01:20:00 +0000
ROA not after:            Tue 02 Jun 2026 01:25:00 +0000
asID:                     273878
IP address blocks:        179.63.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 15:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4d:bf:c3:98:ab:b8:42:f3:1d:45:02:43:ba:4e:7a:95:d1:19:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Jun  3 01:20:00 2025 GMT
            Not After : Jun  2 01:25:00 2026 GMT
        Subject: CN=D7E564D00975096C24C58009F2EB4808EA3D1148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:c4:e6:c0:44:a1:76:06:58:8a:3c:51:3b:
                    65:6e:11:61:86:e7:76:bd:0d:49:23:92:49:72:f5:
                    19:96:13:5e:3d:fc:4f:46:a9:cc:cd:a3:86:99:6b:
                    5f:8f:7d:93:8d:1c:c7:5d:55:89:eb:48:6a:24:34:
                    f2:94:11:4b:f6:88:29:a2:0b:ac:94:b8:5e:f7:82:
                    fa:a6:9d:63:af:41:37:47:49:9e:46:0f:0b:63:6d:
                    1c:4a:db:c9:f6:af:84:9b:11:43:31:37:c4:25:db:
                    e1:7d:8d:8a:28:b5:03:3b:98:4a:cf:15:4e:f6:cf:
                    eb:d7:d6:61:c9:30:25:22:e1:22:e5:44:66:2a:2f:
                    fa:9c:31:d2:d3:0f:97:ff:d8:3d:5b:2f:0f:44:5f:
                    44:20:2e:8f:2b:06:61:e3:2c:b3:90:fe:78:a1:ec:
                    2f:82:aa:1c:37:c8:d8:7e:c0:c4:61:03:9c:16:f1:
                    ac:e2:47:99:ee:62:0e:40:29:3f:5f:a6:85:bb:3b:
                    4b:d1:19:a2:5e:c9:21:34:c0:31:4d:e6:ca:75:49:
                    af:4e:9d:8f:57:c3:e2:56:4a:86:72:3a:e4:07:8b:
                    a2:c7:80:f7:3d:65:3f:45:fd:d2:fe:2e:a3:1b:61:
                    64:e9:16:4a:8c:25:f9:5b:4e:ce:4b:1a:08:24:17:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:64:D0:09:75:09:6C:24:C5:80:09:F2:EB:48:08:EA:3D:11:48
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3138382e302f32342d3234203d3e20323733383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:80:6c:9f:05:91:0d:94:34:8a:5e:c0:c4:91:d7:9d:93:
         78:55:71:b4:9f:2c:11:95:e4:6b:54:5e:c8:70:83:95:5f:c5:
         42:07:96:0e:0e:a1:ea:c9:fb:5e:bf:f9:0c:c9:37:04:77:19:
         70:c8:ac:24:1e:f7:e8:30:d8:8c:23:c3:41:0f:0e:40:ff:06:
         19:ac:19:32:18:f7:13:6c:b4:1f:b0:d0:bc:66:63:23:2e:88:
         ed:53:4d:60:c4:19:17:81:a4:81:47:80:c2:13:06:86:ad:62:
         d4:6d:8d:ef:2f:3e:98:9a:ef:7d:dd:77:5d:b9:7b:ca:d5:d3:
         2a:dd:00:c2:b6:19:94:9f:f0:1a:56:9f:bb:67:d1:6c:a1:31:
         27:b0:11:46:48:e4:f6:c3:fc:d9:1f:bb:a7:4c:72:22:1b:e9:
         cf:b9:62:d0:3f:60:b5:ad:72:d7:ca:77:0e:3f:d2:2e:97:b8:
         dc:e9:9c:65:cb:5b:f0:ee:c1:af:88:d3:3a:fb:ae:e8:41:5a:
         93:cf:fe:c7:1c:da:36:ed:e4:cd:bf:d6:dc:15:f1:af:c7:82:
         46:fc:bb:55:2c:c0:b9:46:d1:9e:05:b8:5b:ab:91:4a:70:3f:
         27:65:dc:44:56:6e:28:eb:a4:14:3b:64:00:a0:4b:a0:c0:26:
         3d:33:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 08:06:21 2025 by rpki-client