Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f32312d3234203d3e203138363738.roa
File:                     3137392e312e302e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          z7I1K8Kaoh3FfVs+QJVuhKpLXF3+tOat+NlnzLljnyk=
Subject key identifier:   6B:15:90:E1:D4:F2:19:ED:8F:74:1B:73:43:FC:AB:3F:EF:C1:93:3C
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       60D3D4DE5FAC89C185CC2FE75EDCE2B379A06AB6
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f32312d3234203d3e203138363738.roa
Signing time:             Mon 10 Mar 2025 14:40:00 +0000
ROA not before:           Mon 10 Mar 2025 14:35:00 +0000
ROA not after:            Mon 09 Mar 2026 14:40:00 +0000
asID:                     18678
IP address blocks:        179.1.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:d4:de:5f:ac:89:c1:85:cc:2f:e7:5e:dc:e2:b3:79:a0:6a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 10 14:35:00 2025 GMT
            Not After : Mar  9 14:40:00 2026 GMT
        Subject: CN=6B1590E1D4F219ED8F741B7343FCAB3FEFC1933C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:65:1a:12:8f:25:39:1f:07:91:1f:50:5b:f7:
                    f5:82:93:70:d6:4f:b6:66:ef:17:69:00:89:c6:5d:
                    39:77:e7:e8:df:57:24:6b:b3:43:ae:95:ca:2b:3f:
                    f9:1c:f7:13:6b:17:13:59:33:52:35:8d:7d:d0:1e:
                    81:94:8c:4c:c9:c8:fe:72:48:4e:61:17:b7:4e:e4:
                    1d:99:c2:ef:df:71:56:0d:55:cb:8e:56:c4:20:54:
                    0a:d9:69:15:26:22:59:fe:86:e5:fa:4f:69:d9:8b:
                    c7:6e:d2:8f:ee:d3:5f:de:ae:94:d5:08:97:60:7b:
                    55:db:08:e9:e6:b9:f2:0c:bd:0e:4b:0c:f6:de:62:
                    9e:65:e9:96:13:48:63:0b:1a:50:39:4d:f8:64:30:
                    86:84:57:ed:1c:39:c7:4f:7d:60:ad:ca:ea:6e:61:
                    9b:06:b3:e0:8b:a3:ef:f4:11:61:21:ad:b8:2b:00:
                    30:68:20:5e:ac:88:83:46:4b:eb:b8:e6:2e:61:d0:
                    e4:ca:14:28:24:5f:07:c2:2c:cc:f3:c9:b3:20:3c:
                    41:2f:d2:93:b1:62:8f:a0:ab:0c:23:ef:7e:2f:16:
                    9f:aa:8e:a3:c3:ee:ef:9d:ad:c4:e1:ba:bb:6c:50:
                    3f:8c:db:f0:5d:f3:c8:d6:c1:fc:d4:41:e1:aa:47:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:90:E1:D4:F2:19:ED:8F:74:1B:73:43:FC:AB:3F:EF:C1:93:3C
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:93:d6:af:d4:3e:33:c9:93:8d:cc:1e:ba:a9:6b:b1:0e:
         fe:bf:9d:41:b2:be:ed:7a:37:f6:a2:87:2c:e4:46:be:a2:10:
         9c:a2:d5:53:46:74:88:5c:47:54:8a:5c:1c:44:57:d3:4a:04:
         d6:f5:c3:92:6d:b0:43:e0:64:38:2a:93:d7:61:38:10:b7:c7:
         7b:93:ca:7d:82:f7:c9:24:f7:e9:55:8d:e4:90:42:4a:a9:4a:
         75:e8:df:ab:91:16:26:ae:d6:b7:a0:1a:da:c9:ee:fc:6d:74:
         d9:e1:dd:11:e2:91:ff:50:61:85:a4:ee:d1:a8:56:4f:5c:47:
         1d:57:be:b8:6c:0c:5e:43:dd:40:c3:31:65:45:ed:55:00:d7:
         e7:4d:d1:7b:36:e1:13:85:7d:16:22:44:27:92:9d:64:31:eb:
         ed:48:67:ec:39:26:00:d6:a0:f8:90:62:95:d7:d4:39:a4:23:
         2c:05:e5:6c:4e:dd:f9:36:2d:7c:3d:c9:e7:b1:c2:dc:2b:0d:
         1e:00:d9:1e:78:a5:31:ff:a4:b0:49:82:a6:ca:a4:5a:5c:56:
         94:d5:20:31:9d:2e:51:71:f7:ba:10:93:7a:95:59:4c:9e:6d:
         ce:78:48:79:88:61:7f:2e:00:b5:15:ad:da:b0:ca:5c:12:0c:
         eb:67:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:58 2025 by rpki-client