Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa
File:                     3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          2JyDmsttwRtkKUHz0Pppiz2PddBMGY0ATVbZd7w9TzA=
Subject key identifier:   26:0E:BB:A8:10:82:98:4A:B2:78:A8:DB:57:38:2A:A8:0A:01:8F:E5
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       1DD997860FD6007EEBD2773EF11C64ED503CA26E
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa
Signing time:             Tue 04 Feb 2025 18:30:38 +0000
ROA not before:           Tue 04 Feb 2025 18:25:38 +0000
ROA not after:            Tue 03 Feb 2026 18:30:38 +0000
asID:                     263822
IP address blocks:        179.62.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d9:97:86:0f:d6:00:7e:eb:d2:77:3e:f1:1c:64:ed:50:3c:a2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:38 2025 GMT
            Not After : Feb  3 18:30:38 2026 GMT
        Subject: CN=260EBBA81082984AB278A8DB57382AA80A018FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:32:53:e2:52:e5:48:fa:b9:ca:d1:82:a2:
                    af:a9:d4:1c:f6:a2:b3:c8:2f:50:3a:53:81:92:54:
                    8c:8c:7e:08:3c:10:76:55:93:da:ff:d0:dc:4f:ad:
                    01:71:9d:ee:ca:46:2f:da:7d:fe:41:7b:f3:04:cf:
                    f5:69:d5:7a:00:00:2d:ea:e5:ca:a4:e0:3e:59:f0:
                    82:46:bc:ea:36:8d:5c:a0:b5:32:10:fd:d0:74:f6:
                    8c:b7:b4:b8:7b:7a:d4:ea:2b:3e:c5:d0:b6:7e:c1:
                    9c:9b:8e:f3:4c:18:7f:ef:ac:a7:90:5c:6c:9c:33:
                    79:81:5a:90:2a:ea:cc:e3:83:bf:8f:54:46:26:50:
                    f2:19:c7:65:09:38:98:2b:a3:ba:56:3e:fd:1c:e7:
                    05:fb:cb:bf:34:ee:76:bd:59:a0:7b:85:84:79:16:
                    4d:a9:f9:66:6e:34:74:5c:33:a6:4b:0b:80:94:49:
                    56:eb:ca:1d:7a:c9:d9:6c:68:82:35:0e:6c:b5:ff:
                    e5:c7:1d:fd:be:97:56:8f:56:e3:39:c0:f1:69:34:
                    d6:f9:5d:08:39:06:01:e1:48:fd:98:cb:fa:eb:a2:
                    ee:50:a6:95:28:85:36:67:6c:06:f0:39:49:86:99:
                    25:fa:f9:72:bb:1e:c4:d0:d0:e8:ba:b4:f6:ff:9b:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0E:BB:A8:10:82:98:4A:B2:78:A8:DB:57:38:2A:A8:0A:01:8F:E5
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:87:4b:38:f1:b4:ad:74:49:27:f5:29:fc:f7:4e:78:8c:78:
         f3:bb:ca:f6:7e:ae:6d:a8:e2:5e:ea:8d:22:dc:f9:9e:e5:61:
         48:6e:49:69:9f:36:3d:e8:21:12:f5:99:da:47:ec:54:91:f6:
         e8:82:a7:cc:cd:d8:51:92:bf:a3:ad:d6:0d:1c:51:bf:87:7b:
         47:ab:55:ff:e0:b2:13:67:5d:d3:3f:37:52:5d:87:cf:fb:1a:
         6e:6b:11:78:da:a5:29:ff:69:6e:47:af:f3:d0:48:5b:70:94:
         43:97:1b:12:45:9f:dd:d3:e5:c1:70:12:94:65:96:d5:15:33:
         b2:77:7e:47:17:a2:49:85:57:fa:75:fc:8d:ce:7c:3a:11:e8:
         48:ef:e2:4b:4a:35:ed:8c:1a:e2:48:82:d4:e2:13:2b:d1:58:
         65:6c:2c:4f:68:3b:f0:f9:5f:40:3c:3f:bd:6d:74:4f:a6:6f:
         2f:cb:02:b0:0f:9c:03:ba:1c:45:f6:c8:ea:fb:c0:37:9d:28:
         60:3a:21:7b:9b:8e:f3:b8:53:5b:e8:dc:b3:5f:ba:81:30:1c:
         e8:77:2f:f6:ad:05:21:94:de:de:0b:43:a9:bc:e4:57:02:e8:
         db:94:1c:a0:39:84:6a:d4:e8:8d:35:e2:fd:45:4d:3d:92:d3:
         f9:b4:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:53 2025 by rpki-client