Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32332d3233203d3e203532333639.roa
File:                     3137392e34322e3137362e302f32332d3233203d3e203532333639.roa (raw, json)
Hash identifier:          Oj2QSu9EJtNHUk3kxXFTySUP2Fo6wJTTNbLr8xIq7oQ=
Subject key identifier:   27:A0:AB:F8:2E:AE:8E:08:27:E4:F7:E8:BC:BE:76:9F:2E:23:33:1F
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       32C2CE4C18294307CD0D5DCB58F801D1093A4607
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32332d3233203d3e203532333639.roa
Signing time:             Sat 04 Jan 2025 12:40:00 +0000
ROA not before:           Sat 04 Jan 2025 12:35:00 +0000
ROA not after:            Sat 03 Jan 2026 12:40:00 +0000
asID:                     52369
IP address blocks:        179.42.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c2:ce:4c:18:29:43:07:cd:0d:5d:cb:58:f8:01:d1:09:3a:46:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Jan  4 12:35:00 2025 GMT
            Not After : Jan  3 12:40:00 2026 GMT
        Subject: CN=27A0ABF82EAE8E0827E4F7E8BCBE769F2E23331F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:8e:fe:3b:10:21:0b:3c:c4:8a:c3:cf:dc:
                    0f:cc:7f:70:6a:24:7c:f2:d6:44:0a:de:01:91:cf:
                    67:f7:bf:04:bf:d0:ea:fe:84:9c:d5:2d:b0:b3:55:
                    22:b8:fd:ae:ed:65:25:74:61:06:f9:b5:15:da:9f:
                    85:0d:3f:79:da:11:f6:b3:69:f9:69:35:5d:1b:32:
                    9f:00:c9:d6:28:09:e1:37:1d:48:0e:bf:55:8c:37:
                    60:aa:23:b9:68:8b:ce:a8:30:10:90:80:2f:f0:29:
                    94:34:22:01:10:e8:e5:8b:dc:cd:08:57:f6:f0:23:
                    ac:89:34:b0:ee:b9:15:86:a5:79:88:c2:d1:cd:6c:
                    2e:a0:e6:35:04:ef:80:c2:28:da:22:ca:c2:51:eb:
                    a9:31:0c:bf:1d:01:80:8d:6f:fc:c5:7d:07:ff:53:
                    43:f2:52:49:82:95:4c:eb:f3:11:0e:31:c6:0e:e1:
                    20:c1:ee:b0:d6:91:eb:79:f2:eb:67:64:e2:46:c0:
                    01:f9:23:04:85:a6:96:fa:cb:ec:71:17:d1:d4:e4:
                    05:c6:43:85:a7:fd:d5:00:d9:f7:80:2a:35:4a:e2:
                    9b:c7:1e:bb:b7:8b:75:fd:2c:57:6b:e0:04:f1:0c:
                    6b:48:7b:18:55:a1:5b:c0:a0:df:42:e0:a8:bf:4c:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:AB:F8:2E:AE:8E:08:27:E4:F7:E8:BC:BE:76:9F:2E:23:33:1F
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32332d3233203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:bb:cb:68:88:f2:4f:27:85:c5:77:ca:0b:76:b9:f9:79:46:
         7b:70:5d:14:b4:c0:46:0e:1f:3b:7e:99:8a:22:1f:16:3d:4d:
         9c:2f:05:33:6e:df:94:56:7f:5c:9c:d0:2b:40:f2:0b:6d:d7:
         95:53:9d:a5:20:7f:bc:fb:f3:ce:8d:8c:31:e3:61:8c:ad:e9:
         54:58:90:4c:40:64:cd:13:6a:36:92:42:d2:75:11:06:6c:b2:
         72:d8:08:5a:a9:1d:b4:a9:46:9a:f6:b4:e8:c1:21:93:ad:e1:
         06:a1:c8:f4:27:db:82:a9:a7:58:38:cd:a0:57:4c:30:49:16:
         21:2e:ff:c8:90:d6:ae:14:42:9f:a8:0e:85:22:a3:01:e5:40:
         39:15:b4:05:35:07:0a:46:f3:ee:60:84:ee:d3:92:28:e2:21:
         e6:3e:96:78:c5:ab:62:ca:ef:6b:24:88:77:43:89:cc:4f:b1:
         a3:1f:e8:2a:c8:50:cb:00:a5:9e:a5:a8:de:28:e4:16:dc:ea:
         89:c2:8a:d4:4a:97:55:ef:6e:70:cc:17:16:4c:bc:39:48:d3:
         9c:cf:9c:8c:bf:86:1b:de:46:ce:1a:8f:27:1f:ac:e7:d2:4e:
         7d:20:3d:c0:69:7d:eb:07:2c:27:e5:ff:a5:fd:af:2c:7e:60:
         ba:45:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:57 2025 by rpki-client