Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138392e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138392e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          nTTbo/ysSVAHply4v+xqJJp8KNUM30wJ87niD5LBJzA=
Subject key identifier:   9B:14:CA:36:6B:C1:1F:97:9A:96:51:19:A2:2E:B5:EB:05:CF:25:3C
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       3DD0923785E99C524898AF37B65C3946898BC994
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138392e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:12 +0000
ROA not before:           Sun 02 Mar 2025 04:06:12 +0000
ROA not after:            Sun 01 Mar 2026 04:11:12 +0000
asID:                     52369
IP address blocks:        179.42.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:92:37:85:e9:9c:52:48:98:af:37:b6:5c:39:46:89:8b:c9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:12 2025 GMT
            Not After : Mar  1 04:11:12 2026 GMT
        Subject: CN=9B14CA366BC11F979A965119A22EB5EB05CF253C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:0b:29:cc:01:ee:1b:42:49:0f:98:0e:ae:
                    53:ea:2e:5d:b2:23:53:a3:3f:db:68:fe:57:37:44:
                    80:32:a0:a9:22:88:e6:59:0c:a0:74:eb:16:7c:a1:
                    c9:e4:9a:88:85:eb:e7:e6:a7:76:ff:d1:34:17:8f:
                    cf:f7:51:53:9b:e1:94:a3:66:67:1a:7b:f3:43:04:
                    1b:57:c9:53:16:98:94:38:8c:96:88:36:69:af:98:
                    51:80:6b:5a:5b:7f:9c:e8:4c:33:88:7f:e6:ea:39:
                    94:f4:4f:48:37:c6:d6:fb:80:a5:75:54:83:a2:df:
                    94:3a:16:15:37:40:d4:91:6e:78:37:12:2d:d6:ce:
                    99:70:1c:92:01:19:fe:98:b0:6b:78:a9:c8:dc:bc:
                    c0:b7:4b:c7:0b:23:49:e1:70:8d:f2:60:4a:49:38:
                    9a:3f:7f:87:30:39:0b:c6:77:2f:9c:65:90:6a:6c:
                    9a:42:49:c6:91:ce:04:ae:25:c6:43:25:cf:9a:6f:
                    eb:21:53:21:bb:0c:1b:db:b3:76:28:25:88:49:50:
                    c2:12:c9:b7:fd:c5:3c:07:c6:1a:8f:29:e5:89:be:
                    d3:a8:96:96:14:c1:94:34:e2:72:fc:74:3b:38:0b:
                    07:a0:c1:c9:cb:4d:0a:6b:5e:05:83:1a:eb:be:c7:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:CA:36:6B:C1:1F:97:9A:96:51:19:A2:2E:B5:EB:05:CF:25:3C
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138392e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:ec:d3:87:50:a8:db:0b:a0:95:ad:23:28:d7:3d:28:f2:
         be:37:9d:ef:c0:78:ec:a5:55:bc:78:4e:a9:ad:c3:c0:31:46:
         69:48:98:3e:3b:9e:b5:d7:3b:ce:cb:a8:f9:d4:68:54:26:b3:
         8b:ce:56:db:c8:76:57:da:e3:62:7a:8d:ec:a7:30:14:42:64:
         4d:3f:9b:a4:72:80:9d:4d:f9:d4:68:ae:36:a9:2f:2d:1a:19:
         bb:d8:51:70:8b:a1:9e:1b:0a:7e:44:4b:ec:8f:fc:13:88:b2:
         cb:25:aa:f2:fb:cc:55:9a:d3:2f:eb:6e:e9:d7:45:98:0a:1d:
         1e:70:c8:d0:c9:72:d9:e6:16:25:cc:b0:29:db:67:b0:19:5f:
         68:92:ba:6c:33:96:80:b9:e7:86:dc:5f:a9:2a:1e:7d:67:d3:
         f2:bb:8f:cc:7c:4d:ad:e4:88:59:09:3c:95:8d:7e:44:12:6f:
         1e:9a:15:20:c8:26:d7:de:2a:46:a6:ee:0e:94:5e:9f:6d:16:
         55:bb:6f:4c:d6:37:d1:06:bb:ef:53:92:39:c7:44:47:b4:c4:
         ab:de:79:4d:a3:4d:39:69:43:6e:0a:0c:96:5a:e5:5d:a4:3c:
         5d:06:6c:f1:96:e3:fd:37:ed:bf:ac:05:0e:98:d8:17:76:4b:
         a3:90:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:18 2025 by rpki-client