Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3135382e302f32342d3234203d3e20323636373934.roa
File:                     3137392e36322e3135382e302f32342d3234203d3e20323636373934.roa (raw, json)
Hash identifier:          ik8kKLjiXGau6KilNT08ZeBxNDIEiHMGuEc6MSS5Now=
Subject key identifier:   B3:09:82:D1:59:A6:06:E3:31:DB:DF:3E:FB:C0:CF:B5:D7:18:CD:E7
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       3CAACA8D517BA90E03F05847CD1626A69D3C8297
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3135382e302f32342d3234203d3e20323636373934.roa
Signing time:             Tue 04 Feb 2025 18:30:37 +0000
ROA not before:           Tue 04 Feb 2025 18:25:37 +0000
ROA not after:            Tue 03 Feb 2026 18:30:37 +0000
asID:                     266794
IP address blocks:        179.62.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:aa:ca:8d:51:7b:a9:0e:03:f0:58:47:cd:16:26:a6:9d:3c:82:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:37 2025 GMT
            Not After : Feb  3 18:30:37 2026 GMT
        Subject: CN=B30982D159A606E331DBDF3EFBC0CFB5D718CDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:1f:45:ea:65:19:c6:47:52:7b:a6:e1:b4:
                    08:8d:21:c9:db:8f:c2:8e:88:38:43:df:45:b1:9d:
                    77:26:77:09:1d:ab:af:3f:c0:64:b2:bc:2c:d4:d6:
                    b8:c5:4b:25:35:29:f0:6d:78:b8:b8:a0:12:82:97:
                    e2:5f:ee:ce:e5:f9:be:8d:4b:44:51:01:be:4b:27:
                    4b:e3:e5:eb:60:96:ee:14:c3:64:79:bf:8e:c0:c7:
                    de:77:2d:83:ff:bf:dc:98:ee:4b:91:a4:d0:da:15:
                    c0:50:41:c6:d1:4e:d9:a2:eb:c8:2b:21:23:10:97:
                    66:82:21:af:d3:34:1b:c1:fc:26:22:00:bf:19:72:
                    3a:7a:d3:96:41:0d:a7:73:32:a8:d3:6a:17:ab:cd:
                    0f:96:59:97:fc:19:2e:e5:bc:7d:35:78:ec:fe:c0:
                    63:c9:2c:38:63:d9:5d:2d:94:8a:d8:59:53:f3:96:
                    d3:75:05:1f:b1:cb:bf:d9:51:d7:8d:f1:2f:14:19:
                    89:2c:c4:f4:6d:b7:b8:1b:83:c7:6f:65:94:4f:31:
                    82:13:3c:b7:4e:cd:87:5d:ce:e3:a4:73:6f:aa:aa:
                    0d:26:1a:b6:6e:84:0b:27:dd:09:7a:65:d9:92:25:
                    87:e3:26:94:b0:4f:27:be:db:2a:b9:ed:a6:22:66:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:82:D1:59:A6:06:E3:31:DB:DF:3E:FB:C0:CF:B5:D7:18:CD:E7
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3135382e302f32342d3234203d3e20323636373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:08:ea:56:87:ad:2a:b8:37:00:48:2f:6c:2a:8f:3a:5f:
         31:01:6a:34:98:b2:fb:b8:f9:de:6b:f6:a5:9b:68:a4:56:55:
         71:61:ca:43:53:72:2b:b8:51:7e:c9:5b:62:da:8f:c6:05:c5:
         f6:6f:c5:3a:73:2f:04:37:72:8e:b1:68:39:a4:3e:af:00:dd:
         e2:43:84:08:d8:3e:15:cd:81:38:d3:00:e2:79:20:89:50:0f:
         d0:b2:01:e6:eb:65:5b:df:b8:74:e6:21:58:7b:aa:60:b1:e4:
         01:02:3b:33:be:a5:60:91:09:67:41:b1:20:05:44:87:5e:a8:
         4a:cd:4c:5b:fc:af:55:a0:1a:43:5b:b8:04:b5:8d:2e:bb:54:
         06:cb:f9:bc:ad:be:41:5f:7c:83:1e:91:0b:78:e7:17:f1:d4:
         46:0c:f4:60:17:32:34:73:61:4d:26:22:7f:3b:c1:9e:a7:d5:
         1c:35:01:f0:58:28:e8:d6:cc:f3:c0:6d:e1:04:3c:fd:b7:6e:
         0f:6d:c8:ec:3e:1d:29:ff:5e:a8:45:f3:b1:68:b3:31:d5:ed:
         11:b0:3f:c7:bd:d3:45:a3:ad:90:f8:67:52:76:90:92:9d:0d:
         2a:e4:e0:81:e7:9d:e6:00:9d:ad:6e:e1:79:c6:60:58:64:a2:
         27:62:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:09:02 2025 by rpki-client