Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3234203d3e20323733383431.roa
File:                     3137392e302e31322e302f32332d3234203d3e20323733383431.roa (raw, json)
Hash identifier:          LD/TEeiHZVk/BvFY5wGufIzxokuXfbZ9QMHvhasji64=
Subject key identifier:   1D:0E:86:63:22:2E:D0:DF:48:F8:A1:B6:6B:26:BD:27:52:61:52:00
Certificate issuer:       /CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
Certificate serial:       639E2F062CF9B0CE687B68244231C88F781B1E94
Authority key identifier: 92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3234203d3e20323733383431.roa
Signing time:             Thu 24 Jul 2025 22:26:35 +0000
ROA not before:           Thu 24 Jul 2025 22:21:35 +0000
ROA not after:            Thu 23 Jul 2026 22:26:35 +0000
asID:                     273841
IP address blocks:        179.0.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9e:2f:06:2c:f9:b0:ce:68:7b:68:24:42:31:c8:8f:78:1b:1e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
        Validity
            Not Before: Jul 24 22:21:35 2025 GMT
            Not After : Jul 23 22:26:35 2026 GMT
        Subject: CN=1D0E8663222ED0DF48F8A1B66B26BD2752615200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:fe:cd:46:fa:9a:7c:dd:cb:33:02:ec:ed:
                    6d:e2:48:ea:2c:3a:be:8a:1c:22:12:1b:8e:e1:42:
                    d7:98:79:96:28:1d:82:cc:fd:4f:c5:54:4b:cf:56:
                    19:44:d1:2b:7e:27:9b:8d:fc:b7:14:c7:71:eb:c9:
                    5a:70:07:b8:ca:2f:45:eb:14:cb:9f:bd:26:31:f0:
                    52:21:95:5b:95:fc:89:9b:f1:ba:33:ba:1c:90:88:
                    98:27:47:db:5a:e9:33:11:7b:46:f2:1e:14:6f:11:
                    37:52:c2:29:3a:5c:53:97:d9:3c:5b:88:37:47:40:
                    ba:59:39:50:08:60:07:8a:59:4a:7a:fd:21:ce:52:
                    4e:3e:88:38:77:b6:e2:85:c5:46:47:f1:e2:ca:9e:
                    a9:78:c0:58:4b:4b:ce:9d:78:69:e0:64:80:ee:c7:
                    74:8c:59:ca:67:9a:59:a9:f3:a8:b9:32:67:7f:b0:
                    e1:77:90:a7:80:c1:2d:f3:d7:65:7c:70:6b:02:3e:
                    32:ff:ef:5d:6f:fe:32:37:a8:1a:33:f7:cd:10:40:
                    47:22:e6:58:62:dc:4d:40:44:7d:b7:33:37:25:b9:
                    6c:d8:a5:a7:fb:81:d3:ed:c9:76:82:38:d4:75:36:
                    bb:19:d3:14:56:39:98:bc:06:e6:19:b5:7a:31:52:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0E:86:63:22:2E:D0:DF:48:F8:A1:B6:6B:26:BD:27:52:61:52:00
            X509v3 Authority Key Identifier:
                keyid:92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3234203d3e20323733383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ff:68:59:98:36:dd:be:ec:25:7f:1d:bc:97:2c:11:50:9f:
         13:0f:53:22:3c:77:2d:77:40:05:7b:27:94:c1:4f:45:e5:d6:
         64:f4:2a:df:87:bd:62:14:f0:8d:79:7e:bd:06:f9:40:26:cc:
         bd:fe:fd:5a:67:a8:6a:ef:f4:7e:f6:aa:5f:1b:47:6c:ac:cd:
         15:42:09:c8:94:11:0d:54:87:10:f6:fe:86:72:6a:2e:cb:8f:
         87:fa:ba:5d:8e:00:c4:a1:5d:dc:03:28:02:42:89:9d:42:9e:
         62:c3:dc:63:b9:3e:aa:10:20:90:db:7a:b8:f1:76:a7:73:b0:
         54:b4:30:fe:d2:82:f9:a5:a9:06:91:a4:c9:fa:37:e2:d1:94:
         c8:3d:d6:56:3c:8e:93:4a:a3:4f:d4:b4:46:7d:3f:c7:e4:c3:
         ea:74:18:20:c8:e8:c3:50:bd:14:b3:9b:c3:be:4e:cc:be:b0:
         ab:a3:db:61:5e:a1:9d:37:9a:10:07:c1:cb:2d:f7:06:df:11:
         96:e5:60:25:f2:3d:94:47:f8:14:e0:23:02:6b:dd:74:77:17:
         9e:7e:94:80:c2:82:a5:4c:cb:1e:8e:c5:f5:ab:77:70:b5:73:
         18:6a:93:b7:9b:20:74:33:99:41:75:1b:bf:b0:37:60:56:fe:
         98:83:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:50:58 2025 by rpki-client