Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/3137392e36312e382e302f32322d3234203d3e203532353033.roa
File:                     3137392e36312e382e302f32322d3234203d3e203532353033.roa (raw, json)
Hash identifier:          yfj76bXbP2nJniXUG3XtTiMlcaXGIitqP+pTu7M03yY=
Subject key identifier:   7E:50:53:ED:75:54:00:F4:C2:9E:38:B9:79:6E:F5:7B:7C:0D:A1:23
Certificate issuer:       /CN=FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063
Certificate serial:       6F9D8B38744BA76A6286A71DB17CD1B5DF568EB4
Authority key identifier: FC:BB:CB:41:FD:2A:93:EB:EB:18:4D:5F:94:74:CD:CC:32:19:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/3137392e36312e382e302f32322d3234203d3e203532353033.roa
Signing time:             Tue 04 Feb 2025 18:18:01 +0000
ROA not before:           Tue 04 Feb 2025 18:13:01 +0000
ROA not after:            Tue 03 Feb 2026 18:18:01 +0000
asID:                     52503
IP address blocks:        179.61.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 01:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9d:8b:38:74:4b:a7:6a:62:86:a7:1d:b1:7c:d1:b5:df:56:8e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063
        Validity
            Not Before: Feb  4 18:13:01 2025 GMT
            Not After : Feb  3 18:18:01 2026 GMT
        Subject: CN=7E5053ED755400F4C29E38B9796EF57B7C0DA123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:87:c5:62:7e:84:49:24:73:6d:69:bb:ef:
                    92:f2:62:00:9c:b3:9d:22:4e:72:cc:53:f2:75:f7:
                    2b:d9:ca:d0:6e:7f:79:02:88:d7:61:7d:bd:94:5d:
                    f3:5d:a9:bc:1a:53:d0:64:96:d5:e8:f8:ec:2c:69:
                    32:6b:4d:f4:55:71:0b:d2:9d:13:8c:fc:17:7c:12:
                    a4:18:02:2a:45:ba:ed:7a:0b:14:da:e3:d7:e9:cf:
                    f0:f1:2f:3d:9c:de:74:c8:48:0c:50:f5:86:44:73:
                    88:1b:f2:f6:dd:36:3c:1b:17:27:e5:d4:29:c0:1d:
                    21:04:00:7e:06:5f:35:66:81:76:87:f9:78:d2:45:
                    07:1a:06:44:54:38:ed:d6:ea:29:a9:33:06:bb:19:
                    bf:9a:c2:55:11:bb:4e:f2:e3:3d:04:54:eb:fa:ce:
                    7d:79:0d:b4:49:b6:f6:78:59:db:75:96:05:0b:a0:
                    72:d8:2e:90:6a:c3:f3:22:6c:89:23:95:7d:aa:6f:
                    4a:7c:8c:9c:76:f7:03:e0:34:42:b4:18:14:6d:81:
                    bf:7a:2c:a5:a9:7b:a9:bf:64:be:9c:33:10:e8:f0:
                    ee:2b:2b:89:77:40:60:92:b3:03:f9:d1:26:59:e7:
                    0c:af:e5:02:ce:0b:53:6a:4e:3d:33:c4:dc:b1:ca:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:53:ED:75:54:00:F4:C2:9E:38:B9:79:6E:F5:7B:7C:0D:A1:23
            X509v3 Authority Key Identifier:
                keyid:FC:BB:CB:41:FD:2A:93:EB:EB:18:4D:5F:94:74:CD:CC:32:19:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/3137392e36312e382e302f32322d3234203d3e203532353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:97:64:70:eb:a0:2a:84:88:3b:e4:88:57:22:ff:b0:9e:
         89:35:4b:0b:0b:9c:e9:bc:91:99:aa:bd:99:da:a3:fd:44:df:
         c2:7c:fa:fa:9f:4b:c7:45:cb:d0:ee:58:e4:06:8b:99:d4:8b:
         42:93:a9:13:ec:57:ff:dd:e7:c3:16:db:02:28:ed:4c:d6:d2:
         0d:9a:f0:f9:9d:59:85:29:f7:c0:77:49:03:a4:a7:e8:96:e4:
         b8:ba:c7:09:b7:6b:75:79:7f:b4:bf:b9:56:17:bd:61:2c:e7:
         eb:5d:f6:86:a7:0d:74:26:80:e2:a6:41:f9:a4:fc:73:fb:8a:
         59:1c:9c:c1:7b:22:c7:5f:20:4a:8c:35:a5:19:31:17:5e:58:
         b8:ae:db:ca:0a:0d:eb:0d:6f:9f:1f:b1:e0:a3:b0:06:d6:e6:
         be:20:2a:66:d6:88:43:26:08:b1:e7:79:20:d7:3d:46:68:22:
         00:7d:b6:cd:5a:46:78:73:ac:dd:59:f7:54:cb:55:c2:1a:9e:
         60:21:ea:07:90:cd:c9:cb:82:b1:0b:a4:16:4b:4c:74:9e:32:
         44:5b:4f:e3:ae:17:ba:0b:59:1f:57:0f:d7:b1:d9:da:1e:01:
         36:40:f0:d5:f6:4f:75:89:fe:b4:21:36:3b:f4:b3:b5:12:59:
         6f:ad:b9:cf
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUb52LOHRLp2pihqcdsXzRtd9WjrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNCQkNCNDFGRDJBOTNFQkVCMTg0RDVGOTQ3NENEQ0Mz
MjE5QTA2MzAeFw0yNTAyMDQxODEzMDFaFw0yNjAyMDMxODE4MDFaMDMxMTAvBgNV
BAMTKDdFNTA1M0VENzU1NDAwRjRDMjlFMzhCOTc5NkVGNTdCN0MwREExMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU6ofFYn6ESSRzbWm775LyYgCc
s50iTnLMU/J19yvZytBuf3kCiNdhfb2UXfNdqbwaU9BkltXo+OwsaTJrTfRVcQvS
nROM/Bd8EqQYAipFuu16CxTa49fpz/DxLz2c3nTISAxQ9YZEc4gb8vbdNjwbFyfl
1CnAHSEEAH4GXzVmgXaH+XjSRQcaBkRUOO3W6impMwa7Gb+awlURu07y4z0EVOv6
zn15DbRJtvZ4Wdt1lgULoHLYLpBqw/MibIkjlX2qb0p8jJx29wPgNEK0GBRtgb96
LKWpe6m/ZL6cMxDo8O4rK4l3QGCSswP50SZZ5wyv5QLOC1NqTj0zxNyxynXdAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUflBT7XVUAPTCnji5eW71e3wNoSMwHwYDVR0j
BBgwFoAU/LvLQf0qk+vrGE1flHTNzDIZoGMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0Y0MTJGOTA2RTBDMTg0NEE1MEJGRkE3NThCRUNDRTA5
REZFMzZENEIzNEVBQkI4NEM1M0JCQTE3OEJGRkY3LzAvRkNCQkNCNDFGRDJBOTNF
QkVCMTg0RDVGOTQ3NENEQ0MzMjE5QTA2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQ0JCQ0I0MUZEMkE5M0VCRUIx
ODRENUY5NDc0Q0RDQzMyMTlBMDYzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNGNDEyRjkwNkUwQzE4NDRBNTBCRkZBNzU4QkVDQ0UwOURGRTM2RDRC
MzRFQUJCODRDNTNCQkExNzhCRkZGNy8wLzMxMzczOTJlMzYzMTJlMzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsz0IMA0GCSqG
SIb3DQEBCwUAA4IBAQAcbpdkcOugKoSIO+SIVyL/sJ6JNUsLC5zpvJGZqr2Z2qP9
RN/CfPr6n0vHRcvQ7ljkBouZ1ItCk6kT7Ff/3efDFtsCKO1M1tINmvD5nVmFKffA
d0kDpKfoluS4uscJt2t1eX+0v7lWF71hLOfrXfaGpw10JoDipkH5pPxz+4pZHJzB
eyLHXyBKjDWlGTEXXli4rtvKCg3rDW+fH7Hgo7AG1ua+ICpm1ohDJgix53kg1z1G
aCIAfbbNWkZ4c6zdWfdUy1XCGp5gIeoHkM3Jy4KxC6QWS0x0njJEW0/jrhe6C1kf
Vw/XsdnaHgE2QPDV9k91if60ITY79LO1EllvrbnP
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:37:22 2025 by rpki-client