Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e36342e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e36342e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          hYdrZCr4ctPNdyqsZkA7dCxWcGeD4PD8Us6cyXDAmEc=
Subject key identifier:   B7:AD:1B:C0:43:8F:2E:F0:40:63:31:68:7F:6A:64:3F:AF:B3:74:22
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       181FBC7E395819D02B4C5D5DF5254402E71FDCE5
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e36342e302f32302d3234203d3e203138363738.roa
Signing time:             Tue 11 Mar 2025 02:10:00 +0000
ROA not before:           Tue 11 Mar 2025 02:05:00 +0000
ROA not after:            Tue 10 Mar 2026 02:10:00 +0000
asID:                     18678
IP address blocks:        179.1.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1f:bc:7e:39:58:19:d0:2b:4c:5d:5d:f5:25:44:02:e7:1f:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 11 02:05:00 2025 GMT
            Not After : Mar 10 02:10:00 2026 GMT
        Subject: CN=B7AD1BC0438F2EF0406331687F6A643FAFB37422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:e2:2e:cb:dc:38:43:7e:c9:04:84:aa:e2:
                    d5:f7:71:b2:3a:95:9f:77:ad:40:11:43:9b:1a:e1:
                    80:37:96:a1:89:78:33:46:ae:16:c0:28:1d:98:e1:
                    d5:35:4d:99:4d:a5:ac:f1:cc:fa:86:2a:52:a4:98:
                    c9:d9:ad:09:3b:49:44:c2:d2:33:ec:e7:ba:9c:ab:
                    71:9e:4d:45:df:00:84:4e:95:a1:a1:51:14:0d:cd:
                    fa:0a:3e:7c:14:97:80:4d:38:80:f9:f0:ad:28:b4:
                    e6:6b:48:3b:c2:90:f9:ac:c3:36:ae:d6:91:dd:35:
                    73:1c:45:b3:f9:d6:f5:ab:da:da:5f:85:12:91:52:
                    fa:c3:47:02:69:50:9f:95:80:53:f2:f5:e3:5a:e0:
                    cc:a1:42:19:61:74:ed:d1:2a:2e:36:91:0e:cb:bb:
                    f9:f0:be:b7:83:88:15:11:a2:47:4b:8f:43:a3:5b:
                    50:30:21:ff:ab:1d:28:d4:36:8c:a1:6e:11:07:63:
                    cb:cf:71:e7:5e:4d:fa:55:c8:94:45:42:9d:29:20:
                    2e:3b:58:d2:a1:5c:68:d9:23:9c:8d:e0:49:dd:bc:
                    4d:b1:30:91:09:e3:29:81:ab:d9:4d:4f:34:31:17:
                    d8:d5:d6:e5:d1:77:d0:62:d1:3d:4f:8f:b0:9a:24:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AD:1B:C0:43:8F:2E:F0:40:63:31:68:7F:6A:64:3F:AF:B3:74:22
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e36342e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:46:84:70:2d:54:34:ad:cf:b7:13:9f:cf:e9:bd:5c:2c:
         35:8b:f3:09:77:f6:93:d6:16:a0:d7:e2:1a:c5:76:4c:40:51:
         60:91:3f:7f:ed:11:a3:27:0d:de:0a:49:4f:00:bc:25:50:75:
         14:4a:85:55:5e:c8:75:df:8e:77:29:10:1d:81:8d:4f:08:92:
         66:55:ea:1c:3e:cb:f6:18:c8:8f:8c:5d:76:66:5d:4d:e7:63:
         3b:48:4a:83:5f:d7:0d:5d:6f:48:c6:6a:a3:01:6d:1c:7e:ab:
         4d:0e:19:80:63:75:45:e8:97:ae:09:5f:06:60:fb:8f:da:8f:
         24:74:8f:97:b8:04:24:64:8a:3b:a5:8b:70:4d:11:14:be:b0:
         17:c1:dd:a9:de:5d:f7:f0:c8:30:9a:59:9a:b6:65:79:d7:72:
         bf:d3:d0:12:b1:ba:25:a7:7f:43:31:80:54:c9:1c:6b:23:80:
         32:4e:cc:1c:cd:68:d2:75:3a:49:97:65:69:27:47:68:ef:01:
         ab:ba:fd:dd:55:fc:58:ba:ba:00:15:4f:2b:ed:08:d4:9a:52:
         f3:0b:07:61:e6:28:84:ae:4c:49:e8:26:12:ad:4f:45:16:4e:
         93:e8:f8:a0:24:7b:f5:ad:87:65:ed:c2:6b:39:85:c3:12:c2:
         78:18:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:10 2025 by rpki-client