Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/3137392e3139312e302e302f32322d3234203d3e20323730303533.roa
File:                     3137392e3139312e302e302f32322d3234203d3e20323730303533.roa (raw, json)
Hash identifier:          zyAnIrV84XgTEYfPIaNryEUGS6kWn3c7Dx9xLi7Iwlc=
Subject key identifier:   94:16:0C:AC:FC:60:CD:D2:A4:1D:13:92:C4:72:DB:35:F9:9A:78:A2
Certificate issuer:       /CN=4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6
Certificate serial:       309C62DD12AB5C536CD02B7DABAB83879024A932
Authority key identifier: 4B:EC:5F:58:34:A2:EB:23:02:2E:1C:75:2E:D3:0E:C1:C2:C1:68:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/3137392e3139312e302e302f32322d3234203d3e20323730303533.roa
Signing time:             Mon 21 Jul 2025 20:15:00 +0000
ROA not before:           Mon 21 Jul 2025 20:10:00 +0000
ROA not after:            Mon 20 Jul 2026 20:15:00 +0000
asID:                     270053
IP address blocks:        179.191.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 01:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9c:62:dd:12:ab:5c:53:6c:d0:2b:7d:ab:ab:83:87:90:24:a9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6
        Validity
            Not Before: Jul 21 20:10:00 2025 GMT
            Not After : Jul 20 20:15:00 2026 GMT
        Subject: CN=94160CACFC60CDD2A41D1392C472DB35F99A78A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:b9:8f:ff:1c:16:6c:17:08:f2:47:2c:5c:
                    30:28:c0:aa:b6:c3:b0:2d:c0:e2:d7:7c:ec:19:c6:
                    92:d9:c3:57:47:2d:c8:08:f9:7f:e5:d9:0a:06:1f:
                    c8:da:3b:9a:49:ab:da:9b:80:3d:b8:4c:a2:8a:30:
                    54:a1:1f:59:b6:c4:54:db:c1:02:f1:c4:f2:9a:6b:
                    f6:2d:45:1f:cc:af:d7:55:83:31:7e:6d:83:5f:a7:
                    a2:c1:b7:36:39:4f:ae:1d:b6:ed:31:9c:1d:26:a2:
                    a2:9a:1b:32:aa:13:38:f5:e0:72:56:e7:37:20:cc:
                    1d:cd:a9:59:7c:6b:6b:8c:44:68:32:b5:4e:e1:de:
                    33:b5:63:92:d6:99:5b:d2:32:01:34:79:f3:93:40:
                    6e:a9:02:4d:2a:87:c5:91:3c:87:3d:5f:12:cb:80:
                    48:21:99:b1:ef:a3:32:15:91:45:d6:8c:19:c1:42:
                    97:15:ab:83:d1:8d:75:09:85:8f:8d:72:cd:70:55:
                    44:20:52:4a:c9:79:33:9d:78:9b:2b:04:17:b1:8b:
                    5f:a9:5c:ef:59:c0:0f:43:63:1e:c6:6f:00:a2:78:
                    03:8c:27:d8:3a:df:97:df:2c:97:41:0f:57:9f:b2:
                    9c:9d:5b:f5:82:2f:50:05:ce:bd:22:e3:ae:2c:78:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:16:0C:AC:FC:60:CD:D2:A4:1D:13:92:C4:72:DB:35:F9:9A:78:A2
            X509v3 Authority Key Identifier:
                keyid:4B:EC:5F:58:34:A2:EB:23:02:2E:1C:75:2E:D3:0E:C1:C2:C1:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/3137392e3139312e302e302f32322d3234203d3e20323730303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:35:c7:6a:b4:ed:2f:b9:db:62:13:8a:b8:b5:e8:5b:bd:
         0b:ec:ed:5b:75:4d:43:db:f5:3e:3d:1f:35:fa:80:cb:79:f9:
         e1:98:62:96:2e:0f:4a:2b:60:c7:44:89:95:89:c1:6f:39:0d:
         e2:ba:20:8f:30:65:4a:26:ed:23:ae:e7:56:56:aa:d7:8a:53:
         8b:be:0a:4c:1d:10:39:4e:3e:07:c5:4e:cb:52:1c:ba:90:7d:
         3c:2f:b0:7f:ed:b4:64:b1:31:a8:0c:11:91:1e:68:29:0f:75:
         d9:d8:37:95:a3:65:5d:f2:d3:13:57:14:c5:2d:d8:f6:6a:78:
         5a:c3:87:53:f8:e0:9d:87:2b:54:51:86:9b:65:6c:23:40:a0:
         0e:4a:2c:80:9b:55:35:cb:9c:60:a6:ea:47:7c:79:4a:f4:33:
         29:46:23:12:e6:98:0e:bb:85:9e:0b:06:6a:15:b9:64:a6:69:
         cf:1d:2f:99:72:dd:72:84:54:73:f5:91:04:5f:9a:3a:b1:56:
         90:ce:16:80:fb:65:22:e0:3c:7e:5f:1b:67:29:65:98:60:d8:
         e9:62:4e:08:67:df:49:62:ea:df:1f:de:ad:5a:36:bd:87:58:
         34:38:88:f8:33:7f:62:f8:24:3a:d9:50:bd:df:57:56:e7:ec:
         b5:33:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 20:39:02 2025 by rpki-client