Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa
File:                     3137392e34322e3138302e302f32332d3233203d3e203532333639.roa (raw, json)
Hash identifier:          HNvHieoXy5c/eIPlm+nxPX83BsDWt2nWJFddGCwEEM8=
Subject key identifier:   EE:6F:7F:7B:52:7C:C5:47:55:AB:DA:89:C7:FA:CB:88:27:4C:F0:9F
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       49595BAFDD174B354399E6364C7E24827A208D65
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:12 +0000
ROA not before:           Sun 02 Mar 2025 04:06:12 +0000
ROA not after:            Sun 01 Mar 2026 04:11:12 +0000
asID:                     52369
IP address blocks:        179.42.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:5b:af:dd:17:4b:35:43:99:e6:36:4c:7e:24:82:7a:20:8d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:12 2025 GMT
            Not After : Mar  1 04:11:12 2026 GMT
        Subject: CN=EE6F7F7B527CC54755ABDA89C7FACB88274CF09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:0d:a6:1b:bd:13:10:6e:7b:2a:98:05:ab:
                    7b:09:73:0a:0c:5f:85:68:9c:62:f5:58:84:f0:35:
                    3d:64:0c:53:0f:71:ec:87:93:94:e3:06:71:a6:14:
                    eb:cd:7a:9e:ae:42:82:98:6a:23:ef:f3:89:3e:f1:
                    96:b2:8a:74:56:9b:8a:1c:34:71:18:57:25:32:3f:
                    f8:36:ea:a9:71:60:a1:05:f1:b4:d5:7a:47:22:5f:
                    ae:e9:7f:3e:e7:17:93:eb:11:5a:1e:86:c6:5a:79:
                    86:fc:f5:33:8f:7b:e9:e2:7e:0d:c7:3a:04:b1:83:
                    f5:58:1e:1c:c2:cb:93:58:cf:40:25:7b:ef:3d:37:
                    f3:ba:74:fc:76:40:f5:d5:0f:d7:8d:df:f2:8f:63:
                    2e:b2:d4:0c:78:09:13:dd:4e:56:a3:db:b1:e2:bd:
                    1c:72:aa:ab:a3:18:40:e6:4f:c3:29:d4:57:36:05:
                    09:46:d1:61:3b:54:57:16:ad:c7:29:c6:68:5d:be:
                    c5:75:54:18:e3:68:aa:d1:aa:a4:45:db:65:34:05:
                    10:c2:c7:9f:5d:a1:ef:0b:7e:82:d1:6a:26:77:c7:
                    c9:3c:2c:a4:0b:7a:ce:31:f0:92:dd:16:e4:56:93:
                    b1:de:67:05:61:46:55:bc:22:19:3f:45:ee:d7:f6:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:7F:7B:52:7C:C5:47:55:AB:DA:89:C7:FA:CB:88:27:4C:F0:9F
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:ea:4b:e6:48:8b:1c:54:41:11:a9:9c:37:ce:b2:6c:88:
         4f:53:a0:3c:ae:90:2b:83:e5:6a:62:a5:09:ad:45:10:66:84:
         64:81:4f:18:58:13:4c:f7:81:6d:17:49:7a:f5:68:4f:a7:97:
         f9:ff:16:f1:a3:fd:a2:e8:4c:02:8f:27:eb:54:6b:b4:29:dd:
         38:f4:a0:71:c9:55:fb:fe:00:87:2a:a1:5a:4b:2f:28:f1:fb:
         16:38:e2:fb:e2:26:f4:8d:fe:1f:4b:72:4d:22:3c:76:e8:7b:
         af:19:cc:43:0d:dc:03:8e:c1:bf:83:ec:68:90:15:52:c8:89:
         55:9e:1a:9f:26:12:31:63:b8:7a:77:c1:e9:a9:f2:6e:18:7e:
         30:23:81:26:b2:b2:f3:e2:fe:39:85:3a:c6:b5:9e:69:ea:c4:
         85:9f:5f:c5:95:f5:36:0f:ac:d7:b9:fc:d4:c8:d5:21:48:b2:
         cb:eb:1c:ef:7a:05:a9:6f:1f:ee:0e:cd:ea:05:6c:a5:6b:3f:
         4a:93:8f:85:37:15:10:62:15:d5:35:12:7d:77:5a:1e:00:b4:
         83:ab:6b:31:96:5a:4d:72:6d:f1:3f:05:73:24:a1:0d:82:2f:
         89:bb:cd:16:11:c4:8c:38:35:d3:a7:fb:58:0d:c4:05:91:e2:
         ff:72:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:49 2025 by rpki-client