Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3136352e302f32342d3234203d3e203631353233.roa
File:                     3137392e36322e3136352e302f32342d3234203d3e203631353233.roa (raw, json)
Hash identifier:          5sNB0AYQMK5gfIMUWqDZCztTI1sbsR9y+iVFBkNTg4o=
Subject key identifier:   B8:84:9E:8A:00:84:4B:FC:D4:5D:4D:20:86:D6:19:4F:0B:B4:C2:8F
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       6512026711349EE949753E8D891848F046536DE7
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3136352e302f32342d3234203d3e203631353233.roa
Signing time:             Thu 05 Jun 2025 14:40:00 +0000
ROA not before:           Thu 05 Jun 2025 14:35:00 +0000
ROA not after:            Thu 04 Jun 2026 14:40:00 +0000
asID:                     61523
IP address blocks:        179.62.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 09:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:12:02:67:11:34:9e:e9:49:75:3e:8d:89:18:48:f0:46:53:6d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jun  5 14:35:00 2025 GMT
            Not After : Jun  4 14:40:00 2026 GMT
        Subject: CN=B8849E8A00844BFCD45D4D2086D6194F0BB4C28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:70:d0:ef:f4:2f:9e:5f:a1:b4:09:d4:79:
                    be:93:3e:7a:87:4a:87:f8:a9:7d:7f:04:c5:bb:4e:
                    78:28:b2:ae:fe:97:91:e1:7c:1e:55:24:22:5c:db:
                    3e:fe:b2:6e:14:04:fa:e7:66:53:3b:c4:9a:ec:ae:
                    c3:58:65:3c:db:aa:50:00:12:27:82:7c:2b:89:e1:
                    21:0f:5b:57:cc:dc:d2:cd:d1:e6:f1:ba:d4:4c:59:
                    9c:0a:bd:60:54:07:96:70:7a:6b:c0:78:29:a7:98:
                    a9:82:62:fe:5a:8f:8f:3a:92:b3:cc:94:b0:71:ee:
                    35:df:31:d0:e4:55:7c:4c:bd:50:da:7c:7a:37:6e:
                    13:16:04:df:26:d8:b2:f6:70:de:35:98:f6:89:3d:
                    42:65:97:33:7a:fd:01:42:fe:74:2c:e4:b7:7c:1f:
                    d2:b6:1c:68:36:b4:5a:45:1b:76:57:f6:be:be:de:
                    9d:b2:8b:57:41:0b:d7:54:bf:1f:0d:2c:08:c2:b7:
                    32:5b:5c:ea:42:a2:d2:01:09:9f:9a:a0:bf:4b:ec:
                    67:73:9e:cc:c2:19:21:49:c5:f2:be:df:91:a8:44:
                    7e:21:39:f1:9b:61:96:bb:ce:ab:0e:d7:74:6a:7b:
                    8d:37:25:d4:3a:46:12:b8:66:f8:ce:79:36:a7:08:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:9E:8A:00:84:4B:FC:D4:5D:4D:20:86:D6:19:4F:0B:B4:C2:8F
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3136352e302f32342d3234203d3e203631353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:21:41:4d:a1:7e:7d:e6:48:33:a4:01:f4:09:90:c0:6d:
         4f:77:42:84:df:c2:a0:83:4b:81:8c:1d:5c:b4:77:7a:25:70:
         3e:4b:d3:6a:8f:a6:d9:fa:7c:08:6d:e4:c0:74:44:29:fb:91:
         25:1b:76:cf:b1:eb:86:0e:90:ec:f3:57:98:75:24:33:b1:e4:
         07:a0:8e:2e:d5:75:d1:53:34:e8:9e:9b:87:d9:d0:30:3f:6f:
         f0:e5:61:c3:a5:53:83:40:c1:2d:a8:c7:13:1b:95:9b:a1:a5:
         c2:42:e8:e1:3e:58:03:dc:ca:65:af:12:2d:48:a2:b9:06:d4:
         41:a1:53:a8:0c:0a:31:75:55:63:26:66:75:00:b3:f1:c1:7c:
         10:b6:34:42:74:68:3b:a7:cd:1d:95:c5:c0:d7:2d:8d:40:5a:
         2a:0c:db:35:67:bc:eb:f6:39:e6:8e:b8:a9:9c:4b:1b:3d:5f:
         36:88:26:1b:44:a1:1e:50:58:03:7d:ee:1b:7a:6f:d3:80:91:
         00:3a:d1:d1:5f:10:c0:fb:08:0b:5d:8b:d0:c6:c4:6d:e8:28:
         05:3a:45:fa:5f:00:1f:bd:6c:b3:76:d4:6b:85:50:a4:44:ae:
         eb:ea:cb:d7:92:25:cb:d7:28:90:1f:ee:0d:4b:4e:d2:e2:41:
         ec:09:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:28:04 2025 by rpki-client