Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3139322e302f31382d3234203d3e20323632353839.roa
File:                     3137392e312e3139322e302f31382d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          88oRr3z8E4yn9sHaVWpZ4+H/+gg0kzhCfmr8gvKU4kw=
Subject key identifier:   F4:95:AD:A6:07:3C:7C:8F:E7:CB:CE:16:81:27:3F:63:D2:AF:D1:5F
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       695D9BED94D8AA58BBDD6954072EC8516C7A9D08
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3139322e302f31382d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:26 +0000
ROA not before:           Tue 04 Feb 2025 18:12:26 +0000
ROA not after:            Tue 03 Feb 2026 18:17:26 +0000
asID:                     262589
IP address blocks:        179.1.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5d:9b:ed:94:d8:aa:58:bb:dd:69:54:07:2e:c8:51:6c:7a:9d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:26 2025 GMT
            Not After : Feb  3 18:17:26 2026 GMT
        Subject: CN=F495ADA6073C7C8FE7CBCE1681273F63D2AFD15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:11:84:17:c4:98:a1:b4:34:18:4f:ea:af:
                    b2:55:38:c1:20:d9:29:db:6a:e2:15:85:0b:7a:1d:
                    e6:8a:6e:b0:19:18:66:4d:f0:93:07:ee:bf:4c:fb:
                    c5:20:b1:36:7c:5c:f7:63:27:08:9a:87:e5:37:1a:
                    7e:31:10:e8:dc:f6:f0:8d:92:72:c3:f6:fa:b3:85:
                    15:7f:4d:f4:6c:97:5c:fc:35:ca:d8:dd:d7:4d:b2:
                    7a:92:1a:11:5b:ec:7e:ca:a0:3e:76:ea:9d:72:aa:
                    0d:03:4b:a7:ec:f5:86:84:56:3a:f0:97:39:fd:36:
                    a5:b8:f1:47:cd:f8:04:76:2d:9e:99:83:f5:bc:4f:
                    73:7e:0e:8f:05:e9:73:d4:17:0f:08:3a:30:61:a4:
                    44:95:40:0d:e0:4e:aa:03:4c:bc:70:d4:f7:54:08:
                    7e:a7:89:fa:dc:d9:53:e7:e9:62:62:33:ec:5f:09:
                    33:13:68:6c:2b:0e:40:a9:e2:64:99:c9:bc:b1:1f:
                    30:37:27:7d:0b:bf:40:69:d3:be:13:8b:cc:08:a8:
                    a1:aa:4f:5f:02:7b:90:39:bb:c1:73:1e:0b:22:26:
                    72:18:7c:1c:0d:d4:3a:99:74:d7:6e:0d:f0:94:0d:
                    7d:76:ac:8c:5b:ef:1e:e4:e4:b7:45:99:24:ff:74:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:AD:A6:07:3C:7C:8F:E7:CB:CE:16:81:27:3F:63:D2:AF:D1:5F
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3139322e302f31382d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:63:a7:f4:e9:6c:ae:f2:7d:65:66:f1:9f:8d:5b:fc:7a:
         38:40:4c:80:a9:b4:c3:87:a7:d3:a4:56:dc:76:0d:fb:53:2b:
         54:81:b1:9f:3c:5a:e6:16:be:bf:7d:23:2b:16:cd:8b:5e:ae:
         fb:79:63:a3:bd:0a:5c:be:69:ed:22:8e:59:b6:ec:0f:8c:66:
         ce:a7:e3:36:5b:36:51:f5:11:78:5c:41:b3:02:99:77:21:6a:
         6d:31:62:a7:1a:9c:87:e8:21:26:2a:89:0d:50:d4:fa:d0:07:
         6e:d4:94:55:73:10:1e:6d:c7:c8:bc:58:15:08:32:d9:81:4d:
         c4:83:18:c9:57:55:6e:61:06:1b:29:ff:37:34:4d:eb:c3:25:
         e9:12:6a:fd:e7:ac:d5:90:b8:b5:fe:ea:5a:68:7f:4c:59:b8:
         b2:68:4d:69:a6:f1:b4:6b:2c:af:25:08:73:10:04:ac:bf:f4:
         cc:68:43:2a:81:b3:3c:1f:19:2c:0e:50:1d:62:c0:93:7a:2e:
         a0:ee:61:2e:59:9e:c5:a6:c9:d0:fe:c5:23:be:ac:da:1d:c0:
         2c:76:ec:72:a1:95:32:5a:18:80:82:c3:19:89:bd:85:d9:91:
         68:24:a9:39:d8:61:92:23:37:81:cc:45:93:ad:26:53:a3:42:
         fd:f0:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:17 2025 by rpki-client