Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3131332e302f32342d3234203d3e203237383237.roa
File:                     3137392e36322e3131332e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          C2z12Y0fWnKk7agNBHXYDLQ0Cuh5N5stmV4NzjCGtTQ=
Subject key identifier:   8E:1D:19:67:4B:0B:6F:B4:4C:1C:68:84:9D:43:D8:8D:F8:9B:3F:B5
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       25C485B09F3C7A5A6364F8FFCB2E4B8BBC8553D6
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3131332e302f32342d3234203d3e203237383237.roa
Signing time:             Tue 04 Feb 2025 18:30:37 +0000
ROA not before:           Tue 04 Feb 2025 18:25:37 +0000
ROA not after:            Tue 03 Feb 2026 18:30:37 +0000
asID:                     27827
IP address blocks:        179.62.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c4:85:b0:9f:3c:7a:5a:63:64:f8:ff:cb:2e:4b:8b:bc:85:53:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:37 2025 GMT
            Not After : Feb  3 18:30:37 2026 GMT
        Subject: CN=8E1D19674B0B6FB44C1C68849D43D88DF89B3FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:02:06:3b:db:74:ed:50:4c:07:0d:28:4e:
                    c1:52:8a:21:e2:1f:f5:46:fa:cd:7d:a4:3d:d7:ad:
                    df:5e:02:5e:33:bb:8c:6b:c8:e6:84:ac:ee:f6:1c:
                    46:ae:39:ce:a7:9a:86:46:b7:47:b8:ce:62:ce:05:
                    95:74:1b:e6:30:e8:68:23:04:f6:f1:db:e2:9b:5a:
                    e7:a5:9f:b8:b7:cc:58:ef:6e:eb:29:3e:30:d1:74:
                    9a:9e:6b:6a:c5:47:82:ae:8e:4c:ef:9e:82:5c:70:
                    09:17:a8:9c:aa:0a:fb:69:00:0e:9c:ab:ed:71:b3:
                    c8:c5:e7:4c:84:24:e3:75:00:3c:72:68:46:bf:cd:
                    ec:fe:26:83:5e:73:9a:8c:6a:61:60:cb:40:1a:7b:
                    a3:83:a2:56:81:0e:d7:e5:ae:23:a6:28:42:9f:30:
                    ef:04:05:22:83:d3:56:50:a5:8f:42:8d:07:70:1e:
                    2e:a8:7f:93:0d:60:f4:2d:c0:c7:a8:c6:31:f5:35:
                    9c:42:36:67:b8:4c:97:a9:01:df:14:e4:06:ec:d8:
                    fd:07:34:b5:0a:bc:c2:f0:4d:7c:c5:f3:05:7b:ce:
                    4e:2b:dc:10:fa:6b:26:cd:e7:8a:e3:d9:78:dc:58:
                    d9:44:b3:8c:ed:33:82:8e:4f:1e:df:50:ff:3d:f8:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1D:19:67:4B:0B:6F:B4:4C:1C:68:84:9D:43:D8:8D:F8:9B:3F:B5
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3131332e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:e9:27:e4:b6:db:93:54:06:30:e9:17:1e:2e:0a:95:85:
         35:7f:0e:1b:5e:ca:92:0b:60:c5:7d:8d:0b:d5:be:dd:0b:0a:
         59:ac:16:56:c0:47:30:6c:d2:5b:2e:47:86:29:59:11:65:ec:
         eb:e9:95:5a:0f:c0:d2:44:e0:17:8d:60:ec:95:3a:4b:7b:e9:
         19:4d:41:5e:57:80:85:c0:b0:b8:ce:c3:07:e2:39:ad:d5:d6:
         a1:c8:85:a6:93:af:d0:b8:1d:dd:39:82:f0:2d:28:b7:d5:d5:
         b1:ca:a7:fb:87:75:3c:92:60:a3:43:7e:97:4b:f8:03:4c:0f:
         68:5b:e9:4b:d5:ea:d5:93:65:de:da:22:91:36:64:17:f5:18:
         16:db:35:2c:7a:1a:db:89:32:39:25:aa:2b:dc:9c:66:ee:33:
         c5:88:1d:0e:76:db:04:31:4b:41:fe:d8:e3:81:8a:25:16:46:
         43:87:82:57:e1:88:e1:a8:d9:14:0d:e9:95:f8:a9:54:8b:e1:
         83:1d:48:01:86:76:63:cc:cf:ff:eb:e0:b0:26:d1:e9:70:20:
         76:a6:e1:85:e3:9b:c0:27:74:fc:62:f2:29:7e:09:0a:3a:f7:
         59:46:c6:c7:5e:02:02:8f:c0:39:79:07:fb:54:47:6c:fa:1a:
         ba:6b:4b:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJcSFsJ88elpjZPj/yy5Li7yFU9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNTAyMDQxODI1MzdaFw0yNjAyMDMxODMwMzdaMDMxMTAvBgNV
BAMTKDhFMUQxOTY3NEIwQjZGQjQ0QzFDNjg4NDlENDNEODhERjg5QjNGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2AIGO9t07VBMBw0oTsFSiiHi
H/VG+s19pD3Xrd9eAl4zu4xryOaErO72HEauOc6nmoZGt0e4zmLOBZV0G+Yw6Ggj
BPbx2+KbWueln7i3zFjvbuspPjDRdJqea2rFR4KujkzvnoJccAkXqJyqCvtpAA6c
q+1xs8jF50yEJON1ADxyaEa/zez+JoNec5qMamFgy0Aae6ODolaBDtflriOmKEKf
MO8EBSKD01ZQpY9CjQdwHi6of5MNYPQtwMeoxjH1NZxCNme4TJepAd8U5Abs2P0H
NLUKvMLwTXzF8wV7zk4r3BD6aybN54rj2XjcWNlEs4ztM4KOTx7fUP89+CLrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjh0ZZ0sLb7RMHGiEnUPYjfibP7UwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzczOTJlMzYzMjJlMzEzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM+cTAN
BgkqhkiG9w0BAQsFAAOCAQEAolzpJ+S225NUBjDpFx4uCpWFNX8OG17KkgtgxX2N
C9W+3QsKWawWVsBHMGzSWy5HhilZEWXs6+mVWg/A0kTgF41g7JU6S3vpGU1BXleA
hcCwuM7DB+I5rdXWociFppOv0Lgd3TmC8C0ot9XVscqn+4d1PJJgo0N+l0v4A0wP
aFvpS9Xq1ZNl3toikTZkF/UYFts1LHoa24kyOSWqK9ycZu4zxYgdDnbbBDFLQf7Y
44GKJRZGQ4eCV+GI4ajZFA3plfipVIvhgx1IAYZ2Y8zP/+vgsCbR6XAgdqbhheOb
wCd0/GLyKX4JCjr3WUbGx14CAo/AOXkH+1RHbPoaumtLFA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:44:54 2025 by rpki-client