Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138342e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          eZ/1QesGlzaW/+SA629zGqUFGzu2A2wFVPVG4HKzy3U=
Subject key identifier:   45:F2:33:3A:91:6C:D8:02:C9:1B:C5:77:30:26:73:75:81:AF:81:12
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       1FD019FCC5922D0BA49E857AD06D3CD9C1D2EE15
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:14 +0000
ROA not before:           Sun 02 Mar 2025 04:06:14 +0000
ROA not after:            Sun 01 Mar 2026 04:11:14 +0000
asID:                     52369
IP address blocks:        179.42.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d0:19:fc:c5:92:2d:0b:a4:9e:85:7a:d0:6d:3c:d9:c1:d2:ee:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:14 2025 GMT
            Not After : Mar  1 04:11:14 2026 GMT
        Subject: CN=45F2333A916CD802C91BC5773026737581AF8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:97:08:01:df:b6:73:bb:f6:26:b4:e1:6e:
                    a7:59:51:bb:f4:d4:d6:23:9a:3b:9d:89:85:a9:0f:
                    1c:a0:06:85:10:8f:29:52:5c:a1:34:8a:39:66:68:
                    85:07:ec:b3:8f:6b:d8:3f:47:2f:29:ae:32:97:9a:
                    12:78:52:4d:fb:dd:28:3b:a8:bf:95:ef:e7:72:af:
                    5c:95:40:cf:79:34:3b:6d:7e:ec:7c:a9:e3:33:ed:
                    06:b1:e9:35:fc:16:dd:f5:c9:07:c8:5a:69:e5:c9:
                    7f:27:b2:0c:19:df:27:ad:18:87:f9:9c:13:68:7a:
                    04:22:80:52:ad:86:91:89:ea:28:bb:df:c3:40:d1:
                    26:89:55:28:31:9b:cc:87:31:46:71:1d:a6:24:f6:
                    43:e3:ef:89:7e:40:70:90:23:db:37:d6:15:c7:08:
                    79:73:cb:5d:f1:1e:26:d9:7c:22:ff:38:5c:ab:33:
                    88:64:1e:81:1f:3b:3c:d9:44:79:90:88:6b:40:b1:
                    f0:df:c5:fe:c8:96:a9:0b:18:cc:e8:bb:9f:9f:ea:
                    91:af:42:af:d1:d2:15:50:b7:aa:7a:3c:fa:b5:c9:
                    9d:a8:97:ea:87:ce:ff:98:b6:67:87:9c:90:6d:e3:
                    b7:4d:6b:d6:89:02:d0:ed:55:48:82:f8:4e:2d:89:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:33:3A:91:6C:D8:02:C9:1B:C5:77:30:26:73:75:81:AF:81:12
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:42:e3:65:d4:2a:2e:81:51:0f:6f:a5:47:d9:85:95:31:f1:
         e0:31:a6:18:5d:29:d6:de:37:ee:18:f9:2f:c4:1a:8d:e8:6e:
         9f:16:ac:1d:ae:bc:59:e1:08:4a:eb:cc:2d:9b:29:89:c6:51:
         7f:55:e2:8f:36:24:58:6a:8e:97:5a:51:3a:32:67:76:ae:f1:
         ce:3b:9e:78:5b:4c:d5:08:68:3c:01:76:bf:5c:95:cf:e2:9f:
         63:0d:7a:b9:85:9a:d0:d5:67:5b:4f:f6:99:47:3f:d1:bf:2a:
         9d:da:ae:63:4d:65:95:be:72:81:4d:fa:05:91:0c:d8:7d:be:
         ef:63:f9:3c:ff:cb:05:a1:20:96:c3:9d:09:27:de:06:6a:ed:
         88:49:cd:fa:00:df:67:19:39:34:36:54:16:ad:24:dc:90:0e:
         f2:37:8a:3e:5c:1e:34:db:1d:31:91:e5:24:66:9d:e5:fa:b3:
         fc:38:46:29:9f:18:81:13:13:4b:2f:66:5f:03:a4:26:3d:47:
         eb:5d:6f:82:f0:72:a5:3c:92:43:38:35:d2:bb:e7:30:e8:b3:
         98:45:0a:1a:a4:e6:f2:10:df:f8:31:85:c2:7a:e2:c0:af:6a:
         54:0a:85:fa:ef:9e:4a:34:a7:16:49:6e:93:93:4c:9b:ec:7b:
         13:80:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:41 2025 by rpki-client