Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e382e302f32312d3234203d3e203138363738.roa
File:                     3137392e312e382e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          oQ//dz3ZAdDNiuLa6qgd72w77n5S0EmlhlHFBMPMovI=
Subject key identifier:   34:17:CE:8B:BB:93:50:71:CC:0B:77:C5:19:3A:9C:71:B0:A8:05:5D
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       21F28ACA9CAD42AD63B886F2A6D3F914A8357365
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e382e302f32312d3234203d3e203138363738.roa
Signing time:             Mon 10 Mar 2025 14:40:00 +0000
ROA not before:           Mon 10 Mar 2025 14:35:00 +0000
ROA not after:            Mon 09 Mar 2026 14:40:00 +0000
asID:                     18678
IP address blocks:        179.1.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f2:8a:ca:9c:ad:42:ad:63:b8:86:f2:a6:d3:f9:14:a8:35:73:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 10 14:35:00 2025 GMT
            Not After : Mar  9 14:40:00 2026 GMT
        Subject: CN=3417CE8BBB935071CC0B77C5193A9C71B0A8055D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:77:fb:6c:9b:9d:b5:4d:f7:00:38:1e:e3:
                    8a:33:ef:ae:49:34:90:94:02:ea:4d:c4:2b:11:da:
                    5e:01:1d:79:67:13:a5:e7:96:4e:30:b3:60:72:c3:
                    24:45:b0:39:a3:ac:b2:39:a1:83:56:78:06:88:06:
                    f8:4e:4a:26:02:0a:f7:4a:06:19:af:82:56:18:ec:
                    14:fb:f7:aa:7a:b6:97:a7:41:f5:2c:85:c9:d0:85:
                    d4:8b:0b:26:0c:82:08:a4:3c:3e:8e:89:e0:fc:ba:
                    52:e2:0a:9c:d6:0d:3e:fc:8e:a1:2f:c2:b0:a9:71:
                    ce:f9:70:35:e7:d2:5a:c1:09:4e:55:32:72:6b:35:
                    38:2b:67:f4:5d:0d:ac:98:b9:dc:4c:01:e5:99:29:
                    83:cc:14:76:5e:ae:32:d0:fd:4c:1f:e5:44:bf:ae:
                    13:25:ac:81:3a:be:73:6c:cf:d4:22:a8:88:76:e8:
                    71:96:fe:c7:00:33:6f:92:8c:92:7a:7f:3d:c7:b4:
                    1c:52:e0:10:f1:23:d8:ec:a9:4a:bc:9b:15:a1:d5:
                    3b:5a:4b:b4:d5:04:f3:16:63:ac:0d:ca:34:14:9a:
                    db:96:25:ce:c9:87:8a:bc:d3:f9:6e:78:00:93:26:
                    96:13:7c:c2:87:03:a2:cd:70:21:9b:91:af:d1:00:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:17:CE:8B:BB:93:50:71:CC:0B:77:C5:19:3A:9C:71:B0:A8:05:5D
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e382e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:de:f1:86:66:a3:84:de:23:43:c9:a2:32:77:a8:5a:d1:
         ea:6a:ba:a3:4a:fa:b2:95:fb:79:b2:4b:bb:ea:14:90:cc:f4:
         18:5e:96:45:01:7b:a6:ca:ba:51:cd:36:58:6c:c8:d7:9a:e5:
         df:cd:52:f1:e4:fe:c3:78:d6:a9:b5:fe:90:2b:6f:78:1a:b0:
         f9:4c:fb:ec:44:1b:f8:58:00:09:22:42:1b:4d:db:3b:be:aa:
         24:d7:85:b4:b9:4e:ed:f4:36:c8:b4:bd:d6:71:dd:b5:d3:af:
         4f:4d:64:89:ea:bd:dd:6f:30:77:ee:f8:78:c8:ab:b7:a9:b1:
         42:61:7d:e1:30:29:26:95:6e:de:8d:e2:ac:aa:6a:69:c6:19:
         f9:57:a8:c5:8a:f0:98:78:a5:f0:ca:6e:fb:eb:7b:7f:7a:c4:
         2f:dd:b4:d6:45:c9:37:b3:16:9d:5c:e1:c0:86:ef:d8:10:9b:
         19:9d:e0:0a:06:22:84:da:8a:6e:a5:f3:36:88:ed:67:60:55:
         41:2d:bd:66:62:10:d3:82:5a:87:12:ca:5a:5e:76:02:57:a0:
         33:20:0e:65:6b:56:b9:fa:5e:15:4d:52:69:46:92:d3:6e:bf:
         90:6c:87:c7:7a:52:f2:56:d2:54:0a:4e:3a:c6:70:a0:9e:87:
         9c:46:f4:8a
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUIfKKypytQq1juIbyptP5FKg1c2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMTAxNDM1MDBaFw0yNjAzMDkxNDQwMDBaMDMxMTAvBgNV
BAMTKDM0MTdDRThCQkI5MzUwNzFDQzBCNzdDNTE5M0E5QzcxQjBBODA1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOc3f7bJudtU33ADge44oz765J
NJCUAupNxCsR2l4BHXlnE6Xnlk4ws2BywyRFsDmjrLI5oYNWeAaIBvhOSiYCCvdK
BhmvglYY7BT796p6tpenQfUshcnQhdSLCyYMggikPD6OieD8ulLiCpzWDT78jqEv
wrCpcc75cDXn0lrBCU5VMnJrNTgrZ/RdDayYudxMAeWZKYPMFHZerjLQ/Uwf5US/
rhMlrIE6vnNsz9QiqIh26HGW/scAM2+SjJJ6fz3HtBxS4BDxI9jsqUq8mxWh1Tta
S7TVBPMWY6wNyjQUmtuWJc7Jh4q80/lueACTJpYTfMKHA6LNcCGbka/RACpXAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUNBfOi7uTUHHMC3fFGTqccbCoBV0wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTM4MmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7MBCDANBgkqhkiG
9w0BAQsFAAOCAQEAAeLe8YZmo4TeI0PJojJ3qFrR6mq6o0r6spX7ebJLu+oUkMz0
GF6WRQF7psq6Uc02WGzI15rl381S8eT+w3jWqbX+kCtveBqw+Uz77EQb+FgACSJC
G03bO76qJNeFtLlO7fQ2yLS91nHdtdOvT01kieq93W8wd+74eMirt6mxQmF94TAp
JpVu3o3irKpqacYZ+VeoxYrwmHil8Mpu++t7f3rEL9201kXJN7MWnVzhwIbv2BCb
GZ3gCgYihNqKbqXzNojtZ2BVQS29ZmIQ04JahxLKWl52AlegMyAOZWtWufpeFU1S
aUaS026/kGyHx3pS8lbSVApOOsZwoJ6HnEb0ig==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:48 2025 by rpki-client