Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137372e3235322e302e302f31342d3136203d3e203237383331.roa
File:                     3137372e3235322e302e302f31342d3136203d3e203237383331.roa (raw, json)
Hash identifier:          4Tr6fzHxNkjgONEDLU49Tdj9cF8voWyn6y6GaBdyxHA=
Subject key identifier:   58:9B:AD:EF:2C:21:A2:61:97:B2:90:05:75:87:BB:C9:A4:8F:45:90
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       5B68D81D1CD4BBD8B7A463963FB44E7E5577C30E
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137372e3235322e302e302f31342d3136203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:33 +0000
ROA not before:           Tue 04 Feb 2025 18:17:33 +0000
ROA not after:            Tue 03 Feb 2026 18:22:33 +0000
asID:                     27831
IP address blocks:        177.252.0.0/14 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:68:d8:1d:1c:d4:bb:d8:b7:a4:63:96:3f:b4:4e:7e:55:77:c3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:33 2025 GMT
            Not After : Feb  3 18:22:33 2026 GMT
        Subject: CN=589BADEF2C21A26197B290057587BBC9A48F4590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:eb:5f:df:32:4e:7a:3a:aa:53:32:cc:c4:
                    60:cf:16:1e:a6:f9:31:9f:ee:d3:35:b9:84:8a:13:
                    d4:02:ba:c3:71:14:80:b6:7f:ab:a0:09:26:9d:a6:
                    0f:47:eb:ac:3f:88:ae:fa:52:04:a4:7e:82:26:0e:
                    ba:ce:ee:e7:f9:57:9b:79:cc:c1:3b:c7:00:c7:a5:
                    e1:26:f2:24:71:f5:bb:16:b8:b1:cc:58:01:c6:b6:
                    0c:3d:72:bc:e2:e3:f1:fb:d6:c0:ac:82:d3:de:ca:
                    53:b8:2d:56:e1:90:fd:5a:5e:10:81:49:29:ea:e5:
                    35:e9:26:5d:df:1d:69:a5:4c:97:c6:f1:da:3f:21:
                    85:33:7e:57:5b:af:b3:79:ac:d2:b1:e8:b9:07:68:
                    74:ba:67:b9:2d:8b:83:01:24:42:0e:77:c4:b8:01:
                    79:a9:ed:b3:ef:d7:78:ed:2b:b2:f9:3d:d8:f0:b8:
                    30:0d:19:67:12:55:f2:0e:3d:fb:a0:36:77:07:03:
                    1d:ac:74:47:3f:30:a1:26:6b:68:8c:86:9e:e8:a3:
                    e0:2c:10:a6:c7:7c:43:4b:f3:26:41:bd:73:e4:1c:
                    61:02:1a:87:7a:4b:ea:6d:d7:86:8c:86:b0:d7:e6:
                    08:a1:01:66:1c:bd:aa:41:c7:56:02:20:1e:01:fd:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:AD:EF:2C:21:A2:61:97:B2:90:05:75:87:BB:C9:A4:8F:45:90
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137372e3235322e302e302f31342d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.252.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:ed:04:6f:49:dc:33:82:50:7f:b9:d6:a5:45:81:3b:51:
         f9:a6:53:00:76:2d:f9:83:70:ee:91:8c:85:52:2f:b6:0d:f2:
         bd:61:eb:71:a8:5a:ea:c9:31:09:45:70:03:fd:3a:65:43:88:
         16:1b:df:99:86:a9:ca:9d:9a:d3:87:bb:97:b9:b7:9f:92:4a:
         6f:a3:ed:d3:60:fd:be:02:b7:56:0a:e3:5c:31:ec:f5:06:73:
         fd:98:76:7e:8d:3e:3e:4f:35:76:58:fc:d7:fc:94:a4:82:7d:
         f6:04:f1:b4:a5:f9:f0:30:1f:28:cb:bc:8e:6f:35:13:ae:ef:
         8b:af:3c:da:60:d5:03:af:67:b8:f0:d0:cd:4c:0e:ff:7c:50:
         47:d9:97:d7:de:8d:e8:e6:01:42:ea:88:cf:ab:da:65:7c:24:
         ac:e2:31:ca:13:fa:1a:1b:6a:24:d2:2c:68:9e:82:ac:91:7c:
         93:75:a9:67:8d:24:90:7d:57:0f:14:2f:ad:fb:36:4b:ea:91:
         89:30:60:cf:62:f5:ea:b7:99:f9:7a:95:73:e7:e3:40:bd:56:
         5e:bf:aa:3b:e9:75:a3:02:40:e7:0b:2d:67:4b:2a:54:11:6a:
         0e:1c:8c:7a:87:33:bd:50:a3:bb:4f:50:7b:12:84:0d:e2:e1:
         dc:5f:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:25 2025 by rpki-client