Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e34382e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e34382e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          b83Z/ko+hi/I2McxIwHh8SdPnHHUYkYwIOOKXdWJ3wo=
Subject key identifier:   C2:46:21:A9:11:40:27:7C:2D:D8:B6:A3:DC:05:76:B2:82:1D:02:FF
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7DA0E7F950020EF03F0EFD51899A6414510EF06F
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e34382e302f32302d3234203d3e203138363738.roa
Signing time:             Mon 10 Mar 2025 16:25:00 +0000
ROA not before:           Mon 10 Mar 2025 16:20:00 +0000
ROA not after:            Mon 09 Mar 2026 16:25:00 +0000
asID:                     18678
IP address blocks:        179.1.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a0:e7:f9:50:02:0e:f0:3f:0e:fd:51:89:9a:64:14:51:0e:f0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 10 16:20:00 2025 GMT
            Not After : Mar  9 16:25:00 2026 GMT
        Subject: CN=C24621A91140277C2DD8B6A3DC0576B2821D02FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:06:88:32:b5:2d:01:47:7b:51:7d:71:d6:4d:
                    43:1c:a4:78:3c:eb:d5:02:2a:dc:5c:f6:98:fd:ef:
                    d0:22:52:3a:c9:13:f7:d0:8e:8a:87:7f:9c:f3:56:
                    4a:92:33:4b:f4:38:ab:ab:68:19:0b:a2:54:ae:72:
                    c4:28:60:e0:7d:e7:50:e2:71:81:13:95:4b:90:6c:
                    04:37:93:ad:eb:d8:93:ae:91:4f:20:ab:3c:8f:38:
                    4f:af:df:be:0f:ae:b8:64:c5:3a:9e:07:35:21:0c:
                    81:c1:ad:05:95:ab:f5:d6:76:9d:3c:f3:d7:9c:d6:
                    32:f1:e1:1a:ff:24:e8:e7:42:67:aa:9c:05:26:96:
                    05:78:78:63:18:77:5d:e5:81:20:e9:d0:ae:6d:87:
                    28:69:73:4f:f6:f6:20:34:cc:2a:27:b3:a3:90:6c:
                    7d:0c:13:51:4f:fa:05:59:4b:78:26:38:f0:50:29:
                    9f:04:2a:bd:63:96:cd:00:1d:33:fb:b8:a7:cb:eb:
                    c4:ab:72:71:37:62:f3:e8:17:74:38:e6:cc:4f:ab:
                    ea:f7:68:8a:a0:7a:2f:6b:14:2f:5b:bf:66:8f:31:
                    a3:72:0c:9b:9b:89:ab:81:f7:f6:ff:33:62:3d:a8:
                    53:e0:0f:86:ed:6a:ae:49:f8:ad:85:6f:c4:fd:8c:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:46:21:A9:11:40:27:7C:2D:D8:B6:A3:DC:05:76:B2:82:1D:02:FF
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e34382e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:85:0c:ca:85:c9:39:50:03:bb:c0:c6:2c:a5:e6:03:ff:
         31:3e:63:92:e0:7b:01:2e:42:99:89:fa:cb:05:e3:5d:1e:d2:
         07:1b:21:dd:35:70:a5:75:12:f7:32:dc:35:52:9e:42:55:2b:
         8e:ad:18:ff:05:4a:28:10:c5:74:76:66:fa:40:5d:b5:47:77:
         8f:42:df:e5:9d:ec:c3:c7:4b:c0:b1:4e:6d:cd:2e:02:1d:28:
         4a:6a:a7:b0:26:cd:7f:17:2b:57:a1:ee:c2:9f:1c:1f:e6:f4:
         b4:c9:ea:e9:57:9c:1b:4f:70:31:22:b6:73:30:cd:26:d4:bd:
         70:5b:c6:9c:e9:84:af:0e:d3:1b:c3:9d:af:a2:37:02:64:2e:
         b9:cd:55:95:f0:c3:e5:de:40:13:8f:8e:fc:a1:0f:bc:93:b4:
         e5:f3:5a:1c:3a:a9:c1:9e:18:b8:26:ff:f3:0d:fe:a4:f1:89:
         e8:69:e1:36:6a:8c:0c:10:77:8a:a1:5f:bc:e4:d6:8a:5c:44:
         5c:10:d9:bb:14:f4:16:f9:44:0b:b4:5a:dc:81:5e:89:83:41:
         81:86:30:2f:44:48:23:f1:cc:fd:ec:69:63:4e:26:69:f8:2d:
         87:2e:a6:a8:cd:22:d1:7e:52:47:57:50:f9:00:67:5b:f2:63:
         db:25:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:52 2025 by rpki-client