Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137392e31322e302e302f31342d3136203d3e203237383331.roa
File:                     3137392e31322e302e302f31342d3136203d3e203237383331.roa (raw, json)
Hash identifier:          Swjq+Kt3N+Miq0LwoL453h2ssdlYFd/NgEQJpTEfiPM=
Subject key identifier:   B8:15:E8:30:89:A1:FD:1A:F4:6D:10:66:A9:7E:5F:E8:60:68:81:D9
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       14C5860DBE1916846D3816B41F728921B7F133D0
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137392e31322e302e302f31342d3136203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:34 +0000
ROA not before:           Tue 04 Feb 2025 18:17:34 +0000
ROA not after:            Tue 03 Feb 2026 18:22:34 +0000
asID:                     27831
IP address blocks:        179.12.0.0/14 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 05:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c5:86:0d:be:19:16:84:6d:38:16:b4:1f:72:89:21:b7:f1:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:34 2025 GMT
            Not After : Feb  3 18:22:34 2026 GMT
        Subject: CN=B815E83089A1FD1AF46D1066A97E5FE8606881D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:96:1f:7a:2e:96:af:cd:97:64:ad:13:c8:
                    2c:ae:ab:ae:cf:41:6e:2e:57:66:96:e9:91:00:fb:
                    d2:16:cc:e8:4a:28:ca:0a:06:44:0b:06:ad:d8:d9:
                    09:b6:44:bb:6c:ba:47:54:8a:7c:12:3f:18:b7:0a:
                    f0:d2:9b:42:d3:46:3d:c8:73:7b:4b:d8:d2:ce:4a:
                    ce:df:62:0d:9b:02:4c:85:ce:b5:12:f0:fc:6d:8e:
                    92:43:e4:73:7b:06:20:d7:5d:b2:96:dc:f9:7e:2c:
                    08:85:10:97:03:12:5d:35:9c:66:44:5f:dc:1a:33:
                    a7:83:a3:a6:f2:03:52:fe:85:f9:40:7e:6e:79:57:
                    d1:bc:89:58:3d:08:d6:9a:6c:eb:72:1d:30:d2:af:
                    98:7c:17:f4:2a:0f:e4:4c:53:a1:ff:de:ac:75:fa:
                    e1:a0:3e:7d:23:40:a0:e6:0a:ee:57:0c:b9:50:7c:
                    30:eb:3c:7d:68:c9:05:3d:61:c4:86:26:b6:73:42:
                    61:ff:f1:5e:37:63:c8:c3:eb:20:a4:eb:c8:08:ec:
                    6d:00:15:56:5e:02:b1:00:ff:1f:4a:19:f2:bf:88:
                    4a:01:7e:15:73:5f:46:00:b9:14:2a:51:15:4e:59:
                    97:ca:a8:a0:e5:86:8f:03:27:7b:c6:2a:bf:f8:4d:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:15:E8:30:89:A1:FD:1A:F4:6D:10:66:A9:7E:5F:E8:60:68:81:D9
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137392e31322e302e302f31342d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.12.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:5e:44:6d:58:e5:83:9d:ff:88:52:53:c9:2b:52:2d:ad:
         68:7b:71:1b:40:e5:fa:91:df:cc:80:7e:5c:12:1a:6f:52:bd:
         37:22:50:f0:50:c4:8e:d8:e1:67:86:f1:54:64:21:48:e5:21:
         a8:05:d9:8b:68:6a:ba:84:0c:c8:f3:6e:f0:65:f9:28:d5:16:
         e4:00:ec:13:85:a8:0a:15:b0:aa:1f:b3:3f:f7:29:2b:97:dd:
         d9:40:54:d9:49:58:25:3f:bf:82:98:4e:e6:07:b4:a3:ca:a5:
         ef:c0:5d:1c:d2:54:b8:00:2b:bf:39:a4:50:97:c1:8c:de:9f:
         ea:1b:02:7b:89:ba:f3:61:9f:e8:aa:26:43:34:30:f0:d7:56:
         e6:c6:bb:26:84:ce:24:95:da:91:8c:ee:80:7d:42:fc:68:d1:
         04:28:53:85:08:a3:ae:4d:c5:81:a6:a2:29:c1:9f:ed:6d:74:
         53:3c:bd:52:ae:d2:f8:f4:57:78:4c:d9:2c:91:8b:a0:87:33:
         ac:a2:0f:5c:ef:cc:01:a3:af:37:cd:71:c9:3c:d1:e8:ae:03:
         df:d3:b5:34:d8:6b:96:97:e3:9a:b9:98:f2:ad:1e:7f:fe:b5:
         89:d4:b5:9b:cc:d7:51:0a:ad:7a:f4:f9:7f:2e:d1:e0:b8:17:
         07:7e:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:29:53 2025 by rpki-client