Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e38302e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e38302e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          dJrPl0OVOnc8wCf6i1Fcf1ZkcsENSuXFgDY62SBjFao=
Subject key identifier:   46:8E:F4:67:4B:E5:69:E9:BC:18:66:F9:72:84:BD:A9:FE:77:86:7B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       4AB24F0B8559500041177312824087DBD6C8DDC9
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e38302e302f32302d3234203d3e203138363738.roa
Signing time:             Tue 11 Mar 2025 02:10:00 +0000
ROA not before:           Tue 11 Mar 2025 02:05:00 +0000
ROA not after:            Tue 10 Mar 2026 02:10:00 +0000
asID:                     18678
IP address blocks:        179.1.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b2:4f:0b:85:59:50:00:41:17:73:12:82:40:87:db:d6:c8:dd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 11 02:05:00 2025 GMT
            Not After : Mar 10 02:10:00 2026 GMT
        Subject: CN=468EF4674BE569E9BC1866F97284BDA9FE77867B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:ad:fc:69:51:9c:fe:6c:2f:b0:ea:f8:10:
                    e4:30:f0:f0:68:da:86:03:c3:95:51:17:68:f4:88:
                    d9:4a:18:8e:b4:53:b9:a4:02:36:e8:b2:fb:38:4f:
                    2d:5a:22:cb:be:c3:2e:1a:36:7a:e5:92:23:8c:74:
                    c2:54:c3:0c:c2:c1:fc:11:ad:a5:7c:6f:5b:ca:46:
                    e1:c1:62:9e:85:9c:d7:71:aa:ba:82:04:6f:91:6f:
                    5c:64:ca:52:a5:1e:b4:ce:ef:e4:08:99:8f:43:39:
                    bf:1c:41:7a:99:7d:c9:35:36:8a:75:c2:69:fb:9b:
                    d3:5f:da:6c:f9:9e:af:7d:e1:f2:f3:42:97:54:6f:
                    3e:f1:91:5a:2b:05:f2:8f:de:18:b8:af:0a:0e:87:
                    11:35:11:9e:f6:69:91:d1:54:d5:c5:78:3d:6f:e7:
                    1b:28:50:56:3d:38:8c:be:76:df:30:cd:c3:92:62:
                    c3:00:b5:ca:5c:d3:18:d4:bc:e2:3c:96:3b:fc:61:
                    2f:b9:40:75:ba:00:a3:b9:f2:53:07:cf:76:98:b4:
                    33:73:57:dc:05:a1:39:68:db:90:23:b1:96:c1:35:
                    2c:49:fd:0c:b6:9f:31:ff:3c:82:23:14:5b:c9:55:
                    c0:26:37:44:8b:fa:8d:fc:91:ff:ae:39:5f:56:f0:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8E:F4:67:4B:E5:69:E9:BC:18:66:F9:72:84:BD:A9:FE:77:86:7B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e38302e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:c5:2a:bd:48:f2:67:34:df:65:55:dc:2f:43:43:f3:dd:
         8e:18:3a:a0:71:58:c3:a2:23:d1:14:40:da:7f:0f:20:dd:0e:
         f4:6a:ae:77:9c:83:59:df:17:2a:28:e9:9e:30:6a:cd:4a:01:
         91:f7:d8:f1:1e:45:32:d1:66:48:93:8d:bb:36:7e:20:8e:30:
         c1:30:f0:c2:18:b9:ad:6c:af:9b:f4:bf:f8:95:9f:f0:c4:17:
         59:e6:47:43:5f:be:81:a9:ce:39:5a:e1:7c:6b:42:bc:fc:71:
         6c:7a:e8:24:05:f0:ec:b3:4f:52:55:39:16:d9:35:be:43:8a:
         bc:b1:84:0b:7b:ca:50:17:d6:f2:6b:7c:cd:bf:76:b9:ab:a7:
         f4:62:2b:1f:5f:0c:19:61:47:f8:51:7e:38:26:64:d0:2c:b8:
         69:e0:71:2a:f4:f3:06:7a:78:6e:bd:52:7e:ea:98:7b:9a:66:
         2c:4a:cb:c2:c8:98:9d:2e:6c:1e:5f:2e:83:c7:32:cd:bb:bf:
         de:bb:54:9a:e8:62:88:53:f1:b2:01:75:fc:3a:f2:60:31:2e:
         8f:aa:ef:23:9c:b4:1b:d0:55:df:82:78:38:a7:ec:76:de:c6:
         51:78:2d:76:c1:25:bc:c0:92:30:66:b3:c3:ee:87:29:19:8a:
         e5:b2:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:11:41 2025 by rpki-client