Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/3137392e302e3230382e302f32302d3234203d3e20323633323332.roa
File:                     3137392e302e3230382e302f32302d3234203d3e20323633323332.roa (raw, json)
Hash identifier:          vgNvIi7ro8AtMgxXwykL7Nhah3sO2yRnBGtQd2Loe0A=
Subject key identifier:   49:0E:E1:EA:FC:5D:30:76:D0:01:45:C1:40:68:12:16:AF:AC:60:1D
Certificate issuer:       /CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
Certificate serial:       578D95E9B9E02C17120C6E58267573FA79030DFE
Authority key identifier: DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/3137392e302e3230382e302f32302d3234203d3e20323633323332.roa
Signing time:             Tue 04 Feb 2025 18:10:38 +0000
ROA not before:           Tue 04 Feb 2025 18:05:38 +0000
ROA not after:            Tue 03 Feb 2026 18:10:38 +0000
asID:                     263232
IP address blocks:        179.0.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8d:95:e9:b9:e0:2c:17:12:0c:6e:58:26:75:73:fa:79:03:0d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
        Validity
            Not Before: Feb  4 18:05:38 2025 GMT
            Not After : Feb  3 18:10:38 2026 GMT
        Subject: CN=490EE1EAFC5D3076D00145C140681216AFAC601D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:f5:e4:b8:61:c6:3d:e3:08:92:85:2f:8d:
                    4a:c6:ef:90:8c:0a:de:b0:18:16:a4:f4:66:f6:df:
                    2e:bf:ee:b6:45:1f:53:8f:7d:38:aa:ec:1e:bb:48:
                    b4:14:55:fd:fb:d8:04:4f:6e:ec:2d:e0:cd:df:c7:
                    e1:e1:ae:d9:ed:d0:cd:e7:34:8c:fb:ef:da:82:42:
                    d0:f4:2e:13:a6:f7:16:a8:d3:be:7d:6f:b8:c1:28:
                    54:d3:ab:89:9b:d8:af:5a:60:0f:d3:7e:86:05:9e:
                    a7:20:0c:26:d8:91:cd:6c:d7:a9:df:49:29:14:db:
                    c7:54:f3:89:c7:46:b7:ab:e7:ed:1b:c0:5c:1b:37:
                    68:12:cd:7b:5e:1f:9b:bb:9a:f2:9d:3f:83:1d:35:
                    a7:d6:40:47:66:5f:f5:23:00:ec:66:1d:04:8d:bf:
                    4a:1d:e1:20:1a:d6:70:e7:49:22:0e:f0:9a:c3:3b:
                    65:93:85:ca:21:4c:d1:df:72:99:5c:04:d2:e8:da:
                    ff:1d:cd:73:5b:a6:2b:78:7a:73:50:5f:ba:64:30:
                    5e:4e:b2:0a:f8:60:c3:65:34:2f:8a:39:02:93:64:
                    33:68:b6:d0:e6:ad:0d:1e:02:85:3c:a7:81:95:7d:
                    af:9b:7a:0a:4e:36:33:79:f2:6d:ee:9b:4b:8f:6f:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:E1:EA:FC:5D:30:76:D0:01:45:C1:40:68:12:16:AF:AC:60:1D
            X509v3 Authority Key Identifier:
                keyid:DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/3137392e302e3230382e302f32302d3234203d3e20323633323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:5a:15:c0:12:48:e3:2b:d8:56:23:3b:3b:14:d7:94:0c:74:
         2d:3f:14:57:1c:56:82:a7:9e:e8:7c:a4:db:e8:5d:5d:4e:26:
         5e:62:08:5d:88:dd:2c:3a:25:b9:c4:f9:76:14:1b:b4:c3:71:
         05:3b:5f:97:ba:7c:4d:66:b8:95:72:c7:2a:2f:f8:be:89:0c:
         92:3d:d9:64:32:c1:af:2f:82:a8:c6:d9:6f:ca:f4:10:dd:d6:
         cf:b3:1b:fe:5c:a1:a0:9a:5e:43:98:81:48:f2:8f:87:af:97:
         a3:7c:0a:ef:4e:ab:cb:a2:7b:ef:89:22:8f:72:51:8f:ec:dd:
         58:d8:99:d8:ab:a8:e3:99:c1:83:84:15:b5:99:66:53:b0:33:
         46:0a:14:88:9c:8f:c6:ac:e2:9a:1e:95:5d:c4:b2:df:6f:87:
         f4:5e:2f:19:19:28:06:18:4d:49:db:b7:dd:5f:32:1b:d8:15:
         b8:a2:7d:3d:b6:52:0b:1e:93:aa:9a:db:81:7d:f7:53:c0:23:
         a8:ed:f9:1c:72:0a:b2:3e:0c:09:92:5e:ed:00:ea:a0:e6:8b:
         f2:cb:d7:cd:b4:e1:c6:1a:95:67:4e:1c:48:46:6c:51:e8:ca:
         1a:85:26:70:92:8c:e2:f5:f6:4a:82:78:1c:c6:aa:38:c9:84:
         47:f4:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:47 2025 by rpki-client