Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203134363138.roa
File:                     3137392e302e31372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          ot3IjEqYTO7wBeOj2JPXAiSV2RXUj5oPXiIImcT4DNY=
Subject key identifier:   11:98:85:14:0F:95:D9:33:1D:61:35:01:C2:6C:F0:FF:43:DA:27:F7
Certificate issuer:       /CN=4D3731B188E63A6529152A8685DFD3BD0CB35A82
Certificate serial:       3828E88FFBB86055401B7A5A9BE624FD419D5FDF
Authority key identifier: 4D:37:31:B1:88:E6:3A:65:29:15:2A:86:85:DF:D3:BD:0C:B3:5A:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 04 Feb 2025 18:10:01 +0000
ROA not before:           Tue 04 Feb 2025 18:05:01 +0000
ROA not after:            Tue 03 Feb 2026 18:10:01 +0000
asID:                     14618
IP address blocks:        179.0.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 02:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:28:e8:8f:fb:b8:60:55:40:1b:7a:5a:9b:e6:24:fd:41:9d:5f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3731B188E63A6529152A8685DFD3BD0CB35A82
        Validity
            Not Before: Feb  4 18:05:01 2025 GMT
            Not After : Feb  3 18:10:01 2026 GMT
        Subject: CN=119885140F95D9331D613501C26CF0FF43DA27F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:a2:48:c7:74:ef:d6:93:02:56:5b:20:51:
                    6c:22:21:1e:f7:a7:34:01:ef:01:0a:f2:1f:79:4f:
                    05:28:08:b8:c6:80:a3:26:df:d7:e1:10:24:f6:a2:
                    56:d0:27:17:eb:0d:5d:b0:0b:45:48:7d:18:43:e8:
                    5b:ef:50:4d:9d:23:8b:e3:fc:85:4d:9d:39:3a:e8:
                    38:c2:af:77:78:8a:02:cb:20:67:c8:68:ff:81:98:
                    46:b4:fa:bd:9f:16:ff:df:b1:3d:76:69:7e:a1:67:
                    9d:b3:8d:43:f3:30:35:95:2d:e1:89:07:09:8c:24:
                    0a:93:38:b7:b9:36:78:26:1f:25:8f:c8:c9:25:fa:
                    e4:66:6b:32:f5:1c:69:9d:55:cb:e6:b9:ba:32:6a:
                    5a:c4:09:5f:12:87:92:54:5b:48:72:04:23:21:0c:
                    c6:3e:d8:bf:65:e0:e3:ce:8b:1f:c4:1f:4e:aa:32:
                    c9:85:7a:e4:51:65:cc:a3:cc:73:fd:f1:f5:86:a5:
                    40:ad:08:35:c8:18:63:e5:41:49:c9:17:8c:a0:1a:
                    79:94:64:b9:54:39:85:20:8e:23:e4:4c:03:cd:86:
                    4d:58:0c:02:1e:13:8e:da:e7:86:ed:fb:21:77:07:
                    6e:e3:30:a7:62:36:c9:66:0d:13:f0:74:31:5c:23:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:98:85:14:0F:95:D9:33:1D:61:35:01:C2:6C:F0:FF:43:DA:27:F7
            X509v3 Authority Key Identifier:
                keyid:4D:37:31:B1:88:E6:3A:65:29:15:2A:86:85:DF:D3:BD:0C:B3:5A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b0:cd:42:cc:f2:90:47:92:81:1a:18:30:10:16:9f:3d:e1:
         96:e6:e2:d5:1a:64:4f:4b:16:ce:72:32:34:ef:bb:49:10:01:
         90:4f:18:a9:de:ef:d4:44:ee:59:b2:20:c8:eb:18:29:95:ac:
         b9:27:10:3c:e4:23:2a:ca:34:2a:d5:96:b7:ba:10:03:b0:b3:
         e2:1a:68:95:0a:3d:17:4d:d0:a5:df:51:e8:39:59:4c:65:73:
         7c:07:41:aa:6e:ab:be:0a:ce:55:a2:3c:6e:2c:5e:aa:04:f4:
         b3:a0:95:64:f3:35:fe:9e:98:07:1c:46:98:6c:9e:35:06:4d:
         27:9f:7c:42:77:92:f2:54:57:36:5f:bb:d3:9a:1e:82:7d:50:
         b3:b1:83:f7:0d:7c:01:f2:7a:b4:e2:da:a3:33:0f:5b:25:b3:
         ee:e6:b3:55:b1:0d:e4:98:5b:e7:9b:30:42:50:86:9a:57:c9:
         36:e7:7a:fb:3f:5a:4b:e3:9e:bf:02:e7:dc:c5:77:9c:93:4b:
         1a:00:9e:f4:f6:26:88:ac:e6:ba:97:13:f7:d8:50:09:20:30:
         a7:0e:64:85:d3:49:a7:46:31:bf:61:00:05:94:1d:26:10:ce:
         3e:7d:08:ed:94:ba:f9:4f:cd:a1:31:b5:07:5d:85:32:dc:ca:
         88:cc:b0:1a
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUOCjoj/u4YFVAG3pam+Yk/UGdX98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzNzMxQjE4OEU2M0E2NTI5MTUyQTg2ODVERkQzQkQw
Q0IzNUE4MjAeFw0yNTAyMDQxODA1MDFaFw0yNjAyMDMxODEwMDFaMDMxMTAvBgNV
BAMTKDExOTg4NTE0MEY5NUQ5MzMxRDYxMzUwMUMyNkNGMEZGNDNEQTI3RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYKJIx3Tv1pMCVlsgUWwiIR73
pzQB7wEK8h95TwUoCLjGgKMm39fhECT2olbQJxfrDV2wC0VIfRhD6FvvUE2dI4vj
/IVNnTk66DjCr3d4igLLIGfIaP+BmEa0+r2fFv/fsT12aX6hZ52zjUPzMDWVLeGJ
BwmMJAqTOLe5NngmHyWPyMkl+uRmazL1HGmdVcvmuboyalrECV8Sh5JUW0hyBCMh
DMY+2L9l4OPOix/EH06qMsmFeuRRZcyjzHP98fWGpUCtCDXIGGPlQUnJF4ygGnmU
ZLlUOYUgjiPkTAPNhk1YDAIeE47a54bt+yF3B27jMKdiNslmDRPwdDFcI3QXAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUEZiFFA+V2TMdYTUBwmzw/0PaJ/cwHwYDVR0j
BBgwFoAUTTcxsYjmOmUpFSqGhd/TvQyzWoIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUYwNTIxRTE4ODZBNDhEMjhEQTM5NDFEOTNENkU5NkFC
OUU2QjE5RUIwQUExQjUzNDkyNDhEOEJGMjQxODg1LzAvNEQzNzMxQjE4OEU2M0E2
NTI5MTUyQTg2ODVERkQzQkQwQ0IzNUE4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RDM3MzFCMTg4RTYzQTY1Mjkx
NTJBODY4NURGRDNCRDBDQjM1QTgyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFGMDUyMUUxODg2QTQ4RDI4REEzOTQxRDkzRDZFOTZBQjlFNkIxOUVC
MEFBMUI1MzQ5MjQ4RDhCRjI0MTg4NS8wLzMxMzczOTJlMzAyZTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAswARMA0GCSqG
SIb3DQEBCwUAA4IBAQCOsM1CzPKQR5KBGhgwEBafPeGW5uLVGmRPSxbOcjI077tJ
EAGQTxip3u/URO5ZsiDI6xgplay5JxA85CMqyjQq1Za3uhADsLPiGmiVCj0XTdCl
31HoOVlMZXN8B0Gqbqu+Cs5VojxuLF6qBPSzoJVk8zX+npgHHEaYbJ41Bk0nn3xC
d5LyVFc2X7vTmh6CfVCzsYP3DXwB8nq04tqjMw9bJbPu5rNVsQ3kmFvnmzBCUIaa
V8k253r7P1pL456/AufcxXeck0saAJ709iaIrOa6lxP32FAJIDCnDmSF00mnRjG/
YQAFlB0mEM4+fQjtlLr5T82hMbUHXYUy3MqIzLAa
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:59 2025 by rpki-client