Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e37342e302f32342d3234203d3e20323632353839.roa
File:                     3137392e312e37342e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          ze+0/ZSsVXhjGe+2HK1d1LYRbxQWTVkpD6a+oAiBhM4=
Subject key identifier:   85:6B:F5:73:27:CF:75:BC:87:7A:2F:6B:CA:04:5D:38:C3:98:51:A2
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7ADB24086D1BC37CC89C908DF33CD23E0F9D3521
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e37342e302f32342d3234203d3e20323632353839.roa
Signing time:             Wed 19 Mar 2025 22:15:00 +0000
ROA not before:           Wed 19 Mar 2025 22:10:00 +0000
ROA not after:            Wed 18 Mar 2026 22:15:00 +0000
asID:                     262589
IP address blocks:        179.1.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:db:24:08:6d:1b:c3:7c:c8:9c:90:8d:f3:3c:d2:3e:0f:9d:35:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 19 22:10:00 2025 GMT
            Not After : Mar 18 22:15:00 2026 GMT
        Subject: CN=856BF57327CF75BC877A2F6BCA045D38C39851A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:cb:c0:d0:56:e8:fe:f9:18:8a:16:97:c0:
                    f2:41:ca:bc:0b:29:50:6f:95:54:91:fc:19:8f:8a:
                    a9:3b:65:f7:0a:c9:90:85:16:d5:c0:4b:6f:ce:81:
                    f5:57:16:5c:38:ca:7c:7f:a2:d0:77:49:b5:70:ad:
                    7f:f3:88:8d:2d:11:89:e3:12:b5:ec:9d:d9:a7:2e:
                    f3:9d:4e:c9:e8:b9:b0:5e:12:90:41:81:af:4c:a5:
                    04:12:bc:68:45:cb:2f:f0:94:08:24:52:74:f1:f3:
                    19:a2:0f:bf:22:04:bf:54:6f:d6:a6:68:d4:ea:63:
                    c1:c5:31:a5:7f:b3:4e:cd:1b:b3:c1:68:d5:29:b9:
                    27:38:29:25:7e:98:dd:82:b2:9c:a3:15:2f:f3:0d:
                    38:49:38:02:32:ba:61:43:e8:80:bb:03:5f:4c:e5:
                    b8:0c:95:82:f6:f3:c4:a6:f8:41:dd:e3:1f:78:4b:
                    73:0b:bf:c2:52:29:ed:db:c8:13:6b:bb:e9:03:9e:
                    dd:2c:88:9b:fe:3b:bb:94:0c:e8:be:19:8d:a6:10:
                    54:ad:fc:bc:cf:70:a8:4e:4d:3d:3e:c6:14:83:fc:
                    be:cf:4e:ac:99:97:3c:71:fc:83:25:ba:be:80:a5:
                    5d:eb:96:6d:d5:c8:cb:e1:b8:54:bd:d4:fe:5b:b8:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6B:F5:73:27:CF:75:BC:87:7A:2F:6B:CA:04:5D:38:C3:98:51:A2
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e37342e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:5e:95:6f:9f:de:8a:e7:16:29:1b:1e:a0:5f:ac:40:16:
         f4:99:da:3d:15:d9:f3:b8:8e:e5:70:78:2b:3d:f0:aa:fd:4c:
         14:91:86:70:b6:cc:63:c5:aa:a4:26:04:3c:bd:c2:9b:6e:26:
         c8:ed:23:fc:12:46:7f:ce:b6:d2:23:89:a8:c7:5c:86:44:29:
         88:30:25:76:f4:57:45:a0:d2:ea:12:0f:fd:e9:9a:1f:c5:ca:
         90:d2:eb:78:34:e0:a1:7b:46:21:fd:a1:41:4f:da:3f:fc:25:
         d1:ed:21:93:bc:ec:52:c7:99:92:84:49:c2:8c:81:8f:38:8f:
         8f:a7:f8:df:00:fa:a6:c7:a6:e2:23:81:34:2e:c4:76:35:78:
         0e:fb:26:7a:16:d5:56:9e:90:c8:43:13:1e:3a:e4:aa:6a:ce:
         f5:3e:8c:8f:77:5b:27:5c:ac:d6:4d:a0:cb:d3:45:19:51:6e:
         33:3f:5c:d4:9c:75:8b:56:bf:82:67:1d:d2:f6:08:fa:99:8b:
         e9:9c:a2:64:cc:75:e9:a6:9a:34:05:25:e1:78:a5:62:63:c2:
         39:28:0c:72:e5:88:49:e8:2b:84:9f:3d:67:61:b0:ad:1c:b7:
         df:f9:69:7c:80:31:93:a1:fd:38:e2:40:11:76:37:71:fc:a7:
         24:0c:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:25 2025 by rpki-client