Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303538.roa
File:                     3137392e302e31342e302f32342d3234203d3e203131303538.roa (raw, json)
Hash identifier:          mAeao6xZGjCCsSNgz9f0qMNjtLfZLPGvDUCrLNis4cw=
Subject key identifier:   3B:79:9D:4D:B9:07:02:CB:11:D7:DE:18:CF:7D:68:E1:0D:E4:16:DF
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       1A7C557E0B2F8ADC8CC4D8486B733B9F500A3691
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303538.roa
Signing time:             Tue 04 Feb 2025 18:37:12 +0000
ROA not before:           Tue 04 Feb 2025 18:32:12 +0000
ROA not after:            Tue 03 Feb 2026 18:37:12 +0000
asID:                     11058
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7c:55:7e:0b:2f:8a:dc:8c:c4:d8:48:6b:73:3b:9f:50:0a:36:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:12 2025 GMT
            Not After : Feb  3 18:37:12 2026 GMT
        Subject: CN=3B799D4DB90702CB11D7DE18CF7D68E10DE416DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:c0:38:c4:9f:81:f7:68:d1:02:46:0e:18:
                    6a:9e:a1:3b:cd:a7:fe:2e:7e:a5:38:cc:8b:2a:22:
                    7b:a1:d2:65:b8:b6:1b:d5:92:24:e3:69:9a:54:1a:
                    df:1f:2c:83:e5:5c:4a:32:bb:28:11:4e:6a:43:2d:
                    d9:b2:06:e2:a1:7c:7a:2c:91:a6:17:1b:cb:54:df:
                    58:06:0f:a7:d2:18:c0:e0:1c:d5:a6:f0:ba:6d:d6:
                    a9:e5:80:1d:67:b4:34:ad:ff:1e:43:cb:12:a7:fe:
                    71:8f:e7:10:3c:f2:0e:3a:28:2d:45:8d:33:76:61:
                    c5:9d:bc:85:d8:ce:1d:f6:4a:c7:ca:98:5f:c5:cc:
                    ee:7a:3e:85:c3:e3:67:10:49:03:8c:94:c9:1a:f6:
                    4b:69:8e:11:46:7d:29:f5:b4:f0:90:1c:cb:f8:87:
                    9d:d0:36:f6:fd:f8:a7:f7:18:d0:c3:ad:7e:89:88:
                    e8:b1:04:95:be:b9:a0:fb:13:38:00:3a:b4:46:23:
                    b1:d6:d1:b9:55:12:b8:be:b1:dc:e4:83:df:ea:58:
                    66:36:78:26:50:81:56:7e:b0:bd:82:04:4c:35:39:
                    14:22:a4:1b:59:48:9e:19:5e:bf:ee:31:81:f1:ca:
                    d7:05:9c:25:1b:87:a8:4d:9d:4b:6d:5d:58:61:67:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:79:9D:4D:B9:07:02:CB:11:D7:DE:18:CF:7D:68:E1:0D:E4:16:DF
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:29:22:32:41:e3:81:3f:4d:11:4c:4d:32:e8:15:10:11:9b:
         34:08:e7:41:4b:f9:fd:74:30:a3:c1:d7:56:18:17:15:d1:9c:
         6d:b1:53:8e:e8:8e:30:c8:d0:42:10:04:0c:56:fd:1e:34:c2:
         60:15:b6:8f:47:ed:68:47:64:33:fa:87:b5:62:53:09:ac:5b:
         e2:4f:40:c1:51:40:73:ec:c6:fa:bd:cf:70:6d:79:e2:9f:95:
         b0:3e:86:ca:76:ce:d5:ad:94:9f:29:ab:ee:0a:f4:d8:51:17:
         f7:09:e0:bc:50:e0:0b:e0:76:e3:8c:de:55:a8:2b:5e:f9:7f:
         69:dc:f9:10:d3:dd:ea:9f:77:5e:48:53:d0:75:f1:a1:75:9f:
         08:dd:5e:5b:af:05:9f:12:89:4e:29:81:22:ac:cf:92:e8:03:
         82:9c:95:de:9d:b8:39:42:81:84:d2:ba:ac:4e:2f:ac:25:da:
         23:91:2e:0c:ca:44:b0:6d:f6:30:1f:f8:67:14:a9:48:8b:c3:
         26:82:0d:f2:a5:6f:3c:f4:77:0f:24:e0:97:86:41:58:3e:a6:
         f6:c0:01:73:57:2a:8c:51:7f:9f:a6:54:8d:c6:94:e5:3a:4a:
         f7:f3:53:35:1e:ee:9f:8f:96:0e:9d:87:93:64:ec:e7:bd:52:
         0a:d0:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:57:07 2025 by rpki-client