Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138372e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138372e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          tF3A6clN6X3SXBP7dcrrICpkMd/OmFD4elOoaLDOxIY=
Subject key identifier:   D6:E3:AC:6B:C7:E9:1F:30:80:65:84:5B:FA:05:33:96:19:5A:B8:09
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       740A2BFE9FF2B7DD9BBCB40F96AB05911C08068E
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138372e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:10 +0000
ROA not before:           Sun 02 Mar 2025 04:06:10 +0000
ROA not after:            Sun 01 Mar 2026 04:11:10 +0000
asID:                     52369
IP address blocks:        179.42.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0a:2b:fe:9f:f2:b7:dd:9b:bc:b4:0f:96:ab:05:91:1c:08:06:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:10 2025 GMT
            Not After : Mar  1 04:11:10 2026 GMT
        Subject: CN=D6E3AC6BC7E91F308065845BFA053396195AB809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:cc:8c:b0:94:16:bd:0e:d4:5f:71:e3:03:
                    9a:ea:79:47:05:28:1e:d8:04:a0:59:61:aa:f1:cb:
                    bb:62:e5:50:5d:cc:1d:92:2f:89:ca:02:32:41:11:
                    74:ae:9e:76:d4:bb:24:c9:e9:75:be:25:8a:5b:7e:
                    b0:8e:cc:a1:00:cc:97:50:7b:5e:d9:c7:47:88:f9:
                    a2:37:a5:bf:98:4d:bd:11:b8:62:81:8b:14:92:29:
                    a9:8c:58:39:b1:ea:b8:66:80:62:b5:bb:25:c2:79:
                    50:32:a0:0d:97:cb:85:94:0c:79:e0:d8:ec:ef:b3:
                    c2:37:9a:a0:b8:c4:ac:65:8c:5a:7c:62:66:50:dc:
                    8f:c2:94:33:9e:dc:f1:fa:b3:50:1b:38:c1:05:32:
                    cb:f6:18:a6:21:b8:68:ac:c2:23:2d:04:ff:48:39:
                    16:14:7b:63:08:eb:c8:f7:bf:fc:b1:dd:d2:80:aa:
                    53:7c:11:ce:ec:14:6e:d8:51:99:35:8c:ff:dc:0e:
                    c0:f5:f2:c1:25:b4:1c:9e:45:3e:53:04:3a:39:50:
                    54:d9:7a:1c:07:8c:54:a9:35:25:dd:87:b0:3c:14:
                    7d:6e:83:77:e4:71:d6:a9:a4:52:0b:d0:42:94:25:
                    19:b2:6e:4f:09:3b:d7:da:84:d0:9a:a4:ec:26:aa:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:AC:6B:C7:E9:1F:30:80:65:84:5B:FA:05:33:96:19:5A:B8:09
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138372e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:46:2d:3c:9a:33:f1:36:e3:cd:00:27:96:33:b2:ff:68:2d:
         c1:60:ae:fd:b4:0e:b3:45:e2:01:0e:d1:20:86:30:90:94:37:
         84:57:3e:5e:1c:89:c3:30:b5:03:22:fa:c2:c3:c0:e0:f0:b3:
         7c:a8:a1:fa:97:38:1c:4a:f9:f9:cb:e5:54:58:a0:28:4f:c9:
         60:17:de:ca:2d:e5:a2:fa:6a:b4:29:02:d6:f7:1a:0d:34:f9:
         a6:69:64:44:9b:5f:d6:dc:b7:6f:ef:02:4e:9f:36:5d:15:b4:
         13:af:92:11:34:75:e5:c6:b0:92:a4:1d:62:93:3e:5f:76:75:
         f4:69:ee:09:da:38:5f:70:94:2d:25:69:b3:62:df:38:19:08:
         ef:59:74:44:92:f6:3e:9b:31:fb:34:37:46:db:bb:a5:49:0e:
         98:8d:e5:26:f0:11:44:93:9a:4c:2e:f6:3a:12:4b:a3:eb:98:
         ab:63:d6:bb:de:75:12:9b:5f:00:f3:21:55:72:af:28:ec:c1:
         a9:96:70:99:84:9c:79:55:60:a6:63:31:dc:24:84:fb:8b:01:
         e6:c0:f7:71:6e:63:a0:3f:33:d8:d2:4c:02:a2:e3:de:bf:80:
         fc:7f:92:e8:63:b8:93:1a:5f:51:d3:51:0a:08:14:e5:b2:68:
         3c:bb:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:36 2025 by rpki-client