Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/3137392e35312e3133362e302f32322d3234203d3e20323730303935.roa
File:                     3137392e35312e3133362e302f32322d3234203d3e20323730303935.roa (raw, json)
Hash identifier:          WgfRuzVe5Rzlh942haQIFuC0fqCuQKSPaCLfQAE/ioI=
Subject key identifier:   D6:6F:16:D4:28:79:B8:EE:93:6C:29:4E:CA:C3:69:D2:1B:D9:77:B0
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       7739E2788E5386506CA53B076407F1046089C67B
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/3137392e35312e3133362e302f32322d3234203d3e20323730303935.roa
Signing time:             Tue 04 Feb 2025 18:44:46 +0000
ROA not before:           Tue 04 Feb 2025 18:39:46 +0000
ROA not after:            Tue 03 Feb 2026 18:44:46 +0000
asID:                     270095
IP address blocks:        179.51.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:39:e2:78:8e:53:86:50:6c:a5:3b:07:64:07:f1:04:60:89:c6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Feb  4 18:39:46 2025 GMT
            Not After : Feb  3 18:44:46 2026 GMT
        Subject: CN=D66F16D42879B8EE936C294ECAC369D21BD977B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:40:11:d9:0d:af:9c:06:54:9d:1e:6e:fb:
                    f1:85:35:a4:7c:57:a3:1b:16:eb:be:10:a5:1e:b5:
                    de:20:17:05:05:b9:0f:f3:f9:41:5b:34:a5:80:21:
                    90:8a:fe:95:62:6a:c6:37:7e:ec:48:4d:51:03:a6:
                    c2:70:1a:94:f3:d0:64:93:de:7f:75:a5:dc:be:f2:
                    72:d8:da:03:67:f2:03:63:24:d1:90:5f:e7:2c:be:
                    e6:53:35:73:b4:dd:9f:d1:b3:11:dd:93:93:ed:fc:
                    46:4b:f0:b5:31:aa:ac:66:08:68:31:d3:a5:2f:5b:
                    e4:04:d7:4f:2f:1d:72:61:16:48:0d:53:3c:71:16:
                    c4:cd:b5:85:20:90:99:fa:42:3d:a0:54:c0:75:30:
                    b0:3e:00:1e:c8:b7:65:ba:6e:fc:ca:f2:b1:2c:fe:
                    04:ba:c4:e7:45:8c:95:dc:2b:1b:db:9c:ec:7f:4b:
                    8b:83:4c:04:15:7b:10:ad:36:e0:7b:77:a4:fc:b7:
                    42:fc:5d:02:9b:9a:4c:13:c5:6e:6d:5b:68:7b:43:
                    c3:bc:60:9a:f8:df:98:b6:18:32:93:46:b0:ec:4e:
                    9d:27:91:ce:b3:08:02:9b:a4:3d:f2:74:1e:15:3a:
                    07:b8:62:46:e7:36:4a:03:49:aa:80:1d:bd:81:ca:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:16:D4:28:79:B8:EE:93:6C:29:4E:CA:C3:69:D2:1B:D9:77:B0
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/3137392e35312e3133362e302f32322d3234203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:02:e9:cf:d0:f5:ec:cc:cb:a4:4c:2b:6a:46:ae:d4:fd:
         43:ee:d1:22:21:e0:26:2c:a5:8f:0e:17:0b:15:8a:9e:6f:5c:
         b9:72:c4:cf:f1:de:28:40:1a:78:b6:04:ac:d3:18:33:d4:cb:
         bc:39:7b:db:4c:6b:fd:12:11:26:d0:4a:cc:f4:bc:81:e4:44:
         b2:d4:1e:cd:be:97:dd:57:24:97:43:a2:d8:0e:9b:6f:74:56:
         c1:ce:7f:42:5c:61:62:ba:f7:a0:80:b5:d2:c3:f1:c0:ce:fb:
         92:c2:43:ca:ea:81:25:ef:bf:b2:bf:8d:b6:f6:21:0c:2a:25:
         d4:f0:14:00:08:1d:78:da:37:07:16:d9:26:fa:f1:72:f8:60:
         95:1e:60:01:82:7d:2d:ca:29:88:f2:39:2b:f5:9e:54:fc:8a:
         eb:f7:16:b5:21:e6:15:74:db:b4:59:51:4b:b9:d1:74:19:dc:
         a0:bf:87:39:65:f7:b8:92:50:21:e4:52:bf:2d:7c:77:5a:11:
         ad:29:03:3f:25:e7:b4:eb:cf:9e:a3:62:fb:05:30:5e:1d:04:
         da:fc:dc:bc:38:91:76:1b:a8:eb:61:62:21:20:19:93:19:99:
         41:89:92:a7:78:a7:04:8a:62:48:15:1b:73:b0:9e:c2:79:67:
         4c:2f:cd:28
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdznieI5ThlBspTsHZAfxBGCJxnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhBMTg3MzM5OTk2ODU5MjFFQkI5MkQyNkJFMzk3NDY5
NDUxQUY4QjAeFw0yNTAyMDQxODM5NDZaFw0yNjAyMDMxODQ0NDZaMDMxMTAvBgNV
BAMTKEQ2NkYxNkQ0Mjg3OUI4RUU5MzZDMjk0RUNBQzM2OUQyMUJEOTc3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HkAR2Q2vnAZUnR5u+/GFNaR8
V6MbFuu+EKUetd4gFwUFuQ/z+UFbNKWAIZCK/pViasY3fuxITVEDpsJwGpTz0GST
3n91pdy+8nLY2gNn8gNjJNGQX+csvuZTNXO03Z/RsxHdk5Pt/EZL8LUxqqxmCGgx
06UvW+QE108vHXJhFkgNUzxxFsTNtYUgkJn6Qj2gVMB1MLA+AB7It2W6bvzK8rEs
/gS6xOdFjJXcKxvbnOx/S4uDTAQVexCtNuB7d6T8t0L8XQKbmkwTxW5tW2h7Q8O8
YJr435i2GDKTRrDsTp0nkc6zCAKbpD3ydB4VOge4YkbnNkoDSaqAHb2ByqVlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1m8W1Ch5uO6TbClOysNp0hvZd7AwHwYDVR0j
BBgwFoAU2KGHM5mWhZIeu5LSa+OXRpRRr4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTE4QTJEOURCN0JBNUVDMTE4QUIzODU4QUZGNjJFNkMy
MUM3NjlDRDgzOTAwN0MzODQ0MzU5NzkwQ0FCMDU2LzAvRDhBMTg3MzM5OTk2ODU5
MjFFQkI5MkQyNkJFMzk3NDY5NDUxQUY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEExODczMzk5OTY4NTkyMUVC
QjkyRDI2QkUzOTc0Njk0NTFBRjhCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExOEEyRDlEQjdCQTVFQzExOEFCMzg1OEFGRjYyRTZDMjFDNzY5Q0Q4
MzkwMDdDMzg0NDM1OTc5MENBQjA1Ni8wLzMxMzczOTJlMzUzMTJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCszOI
MA0GCSqGSIb3DQEBCwUAA4IBAQAuOALpz9D17MzLpEwrakau1P1D7tEiIeAmLKWP
DhcLFYqeb1y5csTP8d4oQBp4tgSs0xgz1Mu8OXvbTGv9EhEm0ErM9LyB5ESy1B7N
vpfdVySXQ6LYDptvdFbBzn9CXGFiuveggLXSw/HAzvuSwkPK6oEl77+yv4229iEM
KiXU8BQACB142jcHFtkm+vFy+GCVHmABgn0tyimI8jkr9Z5U/Irr9xa1IeYVdNu0
WVFLudF0Gdygv4c5Zfe4klAh5FK/LXx3WhGtKQM/Jee068+eo2L7BTBeHQTa/Ny8
OJF2G6jrYWIhIBmTGZlBiZKneKcEimJIFRtzsJ7CeWdML80o
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:06 2025 by rpki-client