Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203130343831.roa
File:                     3137392e302e31342e302f32342d3234203d3e203130343831.roa (raw, json)
Hash identifier:          sM7tp6efudp8MeQ9rncdwW/4o+Sstpkg8urIZP7vkpk=
Subject key identifier:   C4:5F:55:DE:2C:EB:D5:43:BF:BC:DB:52:FC:B8:DE:F8:CA:71:AA:53
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       29B74854F29B11B58A68134A505946D1F599979D
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203130343831.roa
Signing time:             Tue 04 Feb 2025 18:37:07 +0000
ROA not before:           Tue 04 Feb 2025 18:32:07 +0000
ROA not after:            Tue 03 Feb 2026 18:37:07 +0000
asID:                     10481
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:48:54:f2:9b:11:b5:8a:68:13:4a:50:59:46:d1:f5:99:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:07 2025 GMT
            Not After : Feb  3 18:37:07 2026 GMT
        Subject: CN=C45F55DE2CEBD543BFBCDB52FCB8DEF8CA71AA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1b:c9:9c:9c:ed:f7:7a:e2:fd:35:11:8d:a7:
                    94:3d:53:49:6d:03:ae:5b:2d:58:11:a8:cd:0f:e1:
                    05:7d:86:0c:29:2e:15:96:ef:db:e5:30:2f:2e:61:
                    3f:8c:ae:24:60:24:31:bb:20:ee:8e:74:b2:a0:a2:
                    3d:1b:30:f2:1c:ea:b8:51:8f:ab:e2:49:c1:d7:ba:
                    f1:19:05:28:cb:f0:89:d7:8b:de:0b:b6:71:f6:d3:
                    fd:dc:d7:2a:c0:28:d4:a8:4d:d8:11:70:fb:75:81:
                    0a:04:4f:19:03:68:ff:f6:db:d4:d6:a0:b1:23:c7:
                    80:66:31:91:e4:7e:8c:5b:b7:f7:29:f4:a7:80:30:
                    1b:e5:d4:d4:97:8a:25:37:53:ae:eb:03:78:b9:f3:
                    0b:b5:95:a6:0f:df:aa:ed:00:a5:4d:9b:79:71:23:
                    9b:05:50:60:cb:52:f8:62:15:b8:0a:27:7a:67:f3:
                    48:d3:98:67:b9:f1:40:3c:03:ad:a0:9a:58:96:87:
                    48:a7:55:a2:b1:3c:6a:ec:a0:5a:02:59:3a:70:a7:
                    d7:8f:54:e6:c4:db:1c:7e:81:24:9f:ef:a8:90:9e:
                    4e:64:a8:10:b6:b4:8b:8a:a6:ed:39:94:96:e8:e6:
                    a5:d9:44:dc:77:25:52:92:f1:a7:50:28:32:3b:5a:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:55:DE:2C:EB:D5:43:BF:BC:DB:52:FC:B8:DE:F8:CA:71:AA:53
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ce:76:76:e4:d4:46:08:85:ed:71:09:83:4d:fd:77:69:1b:
         b8:33:73:d2:5e:e2:dc:37:48:38:0a:b0:fd:91:17:b0:4d:90:
         f9:b5:7e:e2:f8:02:cb:14:65:98:fa:f4:fb:65:4a:ff:54:ad:
         50:d4:5d:0b:63:4e:9a:98:a3:e6:b2:d1:62:1c:92:d9:66:65:
         4d:43:72:59:d8:c3:ba:51:a5:99:eb:66:1c:80:54:e0:61:c8:
         63:a8:cd:da:dd:3f:76:b2:d5:6a:f0:7a:41:91:5e:65:a9:15:
         53:45:c7:06:2f:e0:73:b5:bb:f7:21:a8:e2:be:55:8a:a4:25:
         2a:f0:ef:ac:95:da:af:0d:4f:f2:61:96:4a:0d:16:c7:a8:cd:
         df:9b:59:41:50:06:ed:c8:fe:5b:d0:1c:e9:cd:fc:d2:02:df:
         96:15:54:02:3b:80:85:13:24:f0:50:cb:32:0e:fe:83:d1:8e:
         f0:0b:5a:7b:f6:6e:cb:7a:d2:79:e3:74:00:78:55:49:a5:e0:
         45:52:03:5e:78:85:48:5b:bc:2d:96:9c:11:42:bc:c6:ba:e4:
         35:67:aa:f1:d9:99:61:e1:0f:09:8c:69:f2:b7:fb:0b:42:c3:
         d3:05:93:6b:72:27:f3:d9:85:f5:ed:a1:c1:27:b8:4d:15:5c:
         24:88:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:44 2025 by rpki-client