Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3137392e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          zdWzC0F/zUYNrHGrPnmCcwRGnMaPKV2HxjXGr3Mqmng=
Subject key identifier:   E7:64:3F:FC:1B:39:AA:18:C5:E2:20:6E:2F:C7:5B:A0:68:9A:FA:92
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       46A1BFDB38B9C535674011EB2849B583A37199D4
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:06 +0000
ROA not before:           Sun 02 Mar 2025 04:06:06 +0000
ROA not after:            Sun 01 Mar 2026 04:11:06 +0000
asID:                     52369
IP address blocks:        179.42.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a1:bf:db:38:b9:c5:35:67:40:11:eb:28:49:b5:83:a3:71:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:06 2025 GMT
            Not After : Mar  1 04:11:06 2026 GMT
        Subject: CN=E7643FFC1B39AA18C5E2206E2FC75BA0689AFA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:6b:de:5d:fd:51:ea:cc:3d:77:70:f0:18:
                    e3:a3:4f:35:8b:8a:0d:ff:b1:76:dc:3a:d7:35:84:
                    d0:0f:34:fc:74:ee:36:ca:94:79:56:5a:b7:d2:cb:
                    10:d9:c6:6b:f0:bd:6e:3c:0e:5f:82:5a:fb:bc:1f:
                    8a:59:60:19:8c:2f:c2:53:cb:60:73:03:5d:cd:50:
                    55:6c:6d:00:20:2b:e1:4e:35:8d:49:e4:90:e9:11:
                    f7:04:bc:47:8d:11:bc:07:27:e0:b3:1a:fa:90:42:
                    59:d4:50:26:f0:45:c4:0c:75:b8:2d:8e:d3:85:e6:
                    2e:c6:b2:f4:32:63:6d:ed:89:10:81:b6:14:f4:b4:
                    31:7e:98:df:e9:7c:39:b0:3f:1b:fb:d0:b4:8c:51:
                    8a:8c:42:51:31:cf:04:1e:e7:3d:64:1a:03:6e:c4:
                    2b:0e:40:5f:59:97:37:6f:1f:36:e7:17:b5:3b:4d:
                    4b:b2:b7:d1:15:2d:58:cd:b1:98:56:c2:bf:1d:95:
                    ff:6f:f1:3e:90:0b:d2:f9:d1:51:cd:33:cf:64:17:
                    14:8b:15:27:a3:76:38:c7:40:eb:24:59:a8:de:69:
                    c7:8b:5d:9c:42:72:00:ff:25:21:91:04:5b:00:f3:
                    9b:13:7f:50:26:55:ea:23:23:57:fe:84:e4:ac:76:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:64:3F:FC:1B:39:AA:18:C5:E2:20:6E:2F:C7:5B:A0:68:9A:FA:92
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:68:39:f6:84:f6:8d:77:61:44:b7:ad:a3:41:7e:d4:8a:0c:
         6d:14:8e:e2:29:a4:79:a3:48:db:c3:af:c2:e6:e9:8b:31:91:
         13:58:08:cb:97:88:11:e4:37:1c:5f:0b:eb:97:be:37:8d:13:
         98:12:75:d0:7d:3e:b0:93:af:5a:54:30:0d:84:0f:8c:b5:3d:
         7c:76:8b:54:ea:87:a8:48:09:99:01:74:47:83:8a:8a:77:fb:
         82:e1:7a:06:8c:b7:c3:7a:c8:93:2a:67:17:b2:a7:2c:bc:92:
         6c:1d:a0:b1:e0:1d:8f:b3:87:8f:0a:56:8d:71:86:cf:61:4b:
         1d:1e:b4:fa:35:c0:85:20:da:be:39:cd:4d:de:03:e5:76:58:
         3e:fd:37:46:68:95:fc:fc:7d:dd:67:89:d4:8d:bc:ec:74:5a:
         91:10:13:9f:8a:10:43:92:92:09:3f:51:32:14:d6:02:21:03:
         86:ab:1c:07:c8:a7:59:12:7d:02:4e:03:c1:91:97:65:b7:42:
         a1:a6:34:d0:51:fe:0e:aa:0b:e4:94:3a:f5:2f:0e:75:bb:2f:
         16:58:3c:5b:46:e3:70:db:d6:14:b7:b8:be:15:1e:89:e3:a3:
         79:32:e0:1e:df:71:07:a5:dc:be:c1:0a:cb:e5:2e:4e:88:2c:
         15:0d:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client