Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e3132382e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          sCEYjAH+rIEoODpow8+6y0YqPLfV6k7+NohY42BssaY=
Subject key identifier:   1A:18:B9:61:FB:AA:3C:8B:A8:B1:DD:04:6A:4C:19:B8:2C:07:94:23
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       461E998760F53C3EE83F258DAAC60E7692B798A7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e203138363738.roa
Signing time:             Wed 19 Mar 2025 16:10:00 +0000
ROA not before:           Wed 19 Mar 2025 16:05:00 +0000
ROA not after:            Wed 18 Mar 2026 16:10:00 +0000
asID:                     18678
IP address blocks:        179.1.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1e:99:87:60:f5:3c:3e:e8:3f:25:8d:aa:c6:0e:76:92:b7:98:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 19 16:05:00 2025 GMT
            Not After : Mar 18 16:10:00 2026 GMT
        Subject: CN=1A18B961FBAA3C8BA8B1DD046A4C19B82C079423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:31:21:53:15:c7:97:69:8f:e5:45:9a:a2:
                    01:97:b3:bb:37:0c:fa:31:89:f8:c8:41:66:26:7a:
                    37:e5:ae:2f:fd:19:a1:c8:69:d9:bb:a9:7b:53:ba:
                    9f:bd:78:a3:4b:bf:a6:e6:41:75:00:ff:39:c2:33:
                    3b:7e:4f:e9:06:85:67:2e:c8:9a:70:56:f4:69:c1:
                    54:ea:ae:c9:b9:29:21:96:66:13:3c:74:4b:61:a0:
                    ed:57:be:17:68:b0:c6:ff:f4:be:d0:c8:77:ed:58:
                    cc:74:60:63:67:1c:8a:7c:ed:7a:18:1e:50:50:1b:
                    6c:b3:40:68:13:7f:43:e6:94:ce:a3:d9:ab:a8:f4:
                    fb:67:8d:a1:d3:05:55:cd:98:6d:3e:c8:51:4a:3e:
                    b6:a7:3b:ba:77:96:e3:02:8b:b9:2a:b8:37:fc:1b:
                    88:8e:2e:2f:f6:d3:59:2a:63:5d:32:13:dc:90:72:
                    df:ea:78:8d:e2:03:ab:ac:81:b2:8a:c3:80:3d:5d:
                    9c:cc:47:64:5e:fb:2a:4a:28:0e:a8:bc:88:cf:b4:
                    3d:c4:ed:57:bf:ac:0c:06:38:7f:ba:43:28:9a:bc:
                    24:dc:ff:ae:ce:09:ca:6a:08:c1:98:cd:bf:1a:07:
                    ec:63:45:4b:47:8b:6d:36:2a:3b:0f:92:9c:00:23:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:B9:61:FB:AA:3C:8B:A8:B1:DD:04:6A:4C:19:B8:2C:07:94:23
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:8e:e8:0f:7c:82:64:b0:42:91:ad:22:20:72:28:64:e4:
         ee:ef:43:ab:7a:79:57:b8:c9:f2:37:73:75:ea:84:12:e8:87:
         74:80:5b:18:ef:8a:14:d3:e6:82:a9:f1:b9:17:80:0b:82:ae:
         9b:8b:7e:88:6b:c2:6f:e8:57:2b:f4:a4:a7:29:3f:86:07:a6:
         ef:9d:8e:71:11:22:fd:92:c3:b1:0f:3d:14:99:44:c7:d8:80:
         12:d0:d9:90:7d:fd:4b:1c:ff:7f:f1:99:ab:86:e8:38:36:72:
         0c:94:d4:ef:56:5d:1c:e4:9f:d0:2d:c2:d7:b8:6b:c1:4f:fe:
         45:4d:15:cd:e9:6f:2c:ea:ed:8e:e0:15:f3:c0:d9:8c:4d:cc:
         73:b6:81:25:8f:69:8e:4b:c7:be:0d:bb:3e:a3:4f:da:49:e9:
         00:9c:d5:bc:20:0d:a6:2d:4a:39:8c:fb:30:4c:b2:f6:41:64:
         b3:30:9e:3d:8a:74:6f:75:1d:f3:43:40:0c:1b:38:a2:26:55:
         84:f6:c3:22:fc:0f:99:9b:45:e1:29:a2:45:a6:09:bd:f2:d1:
         35:59:be:55:7b:8c:81:24:44:4f:a3:40:53:a8:2f:75:b6:49:
         cb:b2:cb:a4:49:68:8e:58:bc:14:8b:ac:24:0e:ec:0f:3e:92:
         33:7c:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:57 2025 by rpki-client