Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137392e36302e3131322e302f32302d3234203d3e20323632313539.roa
File:                     3137392e36302e3131322e302f32302d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          WcfwpncT8qAjgfCOjiDPhNu7pm/yMpMSX4y1j8cc4P8=
Subject key identifier:   F1:6E:6E:50:3E:9C:3F:2C:2F:61:70:66:9F:78:9F:A0:34:C6:BD:A4
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       01E192E5C9A5FB366B677861820234DF0D7E4874
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137392e36302e3131322e302f32302d3234203d3e20323632313539.roa
Signing time:             Tue 04 Feb 2025 17:58:51 +0000
ROA not before:           Tue 04 Feb 2025 17:53:51 +0000
ROA not after:            Tue 03 Feb 2026 17:58:51 +0000
asID:                     262159
IP address blocks:        179.60.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e1:92:e5:c9:a5:fb:36:6b:67:78:61:82:02:34:df:0d:7e:48:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Feb  4 17:53:51 2025 GMT
            Not After : Feb  3 17:58:51 2026 GMT
        Subject: CN=F16E6E503E9C3F2C2F6170669F789FA034C6BDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:7f:27:32:6e:b2:8d:e6:c2:89:b3:cf:a3:
                    c3:36:44:bb:07:56:bf:81:0d:8a:f0:0e:79:a0:66:
                    b8:68:d3:4a:2b:3b:0f:49:b4:50:b4:a2:46:0d:be:
                    6c:6a:5f:0e:49:92:52:7e:a3:42:cf:c6:89:af:f1:
                    2e:f4:2b:7a:d5:79:49:2f:7b:b3:53:43:0b:f6:4f:
                    72:99:1b:82:5e:e3:4b:b5:e6:df:b9:63:66:a3:f5:
                    ef:e1:da:de:0e:2f:38:7e:25:6f:64:84:b3:4f:63:
                    07:6d:5c:bb:ac:58:cc:ff:de:42:e3:9d:c0:88:42:
                    3d:be:0e:09:b7:30:b6:b6:29:bf:d0:42:ea:82:51:
                    54:16:f6:2b:6f:34:e0:9d:5e:be:89:4c:78:bf:1a:
                    f7:f8:40:e8:d1:ee:24:ea:b6:a4:13:47:fd:61:d7:
                    bb:5f:cf:f3:55:d2:e1:1d:d7:06:dc:7b:86:d1:b6:
                    37:93:25:2e:90:61:9e:19:d5:84:2c:fb:02:6e:1d:
                    51:f3:ae:75:64:b5:6f:49:e2:6f:d0:a9:a1:f6:56:
                    e0:47:3f:86:86:bd:cb:d9:b4:a6:5d:92:a4:06:75:
                    49:13:5b:eb:45:93:83:86:3f:ac:ae:43:af:2c:4c:
                    9b:07:4e:85:6d:cc:d3:2d:b6:45:c5:2c:d1:f2:c8:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:6E:50:3E:9C:3F:2C:2F:61:70:66:9F:78:9F:A0:34:C6:BD:A4
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137392e36302e3131322e302f32302d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:0a:e0:cf:c8:4d:ad:c6:d1:e0:8e:e5:69:15:fe:a6:72:
         04:01:68:a6:31:a6:4a:78:c9:d1:30:8b:56:f0:28:a1:c5:c8:
         1c:dd:5d:3c:bb:3a:e7:1d:17:9a:49:0e:ac:20:f5:36:a2:88:
         90:c9:d1:f0:02:89:d7:67:40:b6:c6:08:bc:d4:5e:a9:1e:7d:
         b4:b3:d4:4c:c3:0b:f3:59:42:30:7e:03:b8:92:8a:2e:b0:d7:
         09:b3:3b:bf:68:4e:7c:c9:37:7a:8d:74:38:c7:4b:d9:b1:51:
         9e:2a:f0:b5:d2:51:5c:be:f2:66:5e:7d:a2:c6:6d:2e:39:e0:
         f8:0d:c9:ee:31:0b:fe:0d:54:7a:f3:40:1b:a1:be:91:31:e1:
         b5:16:47:48:c1:e6:52:2f:62:45:78:ca:55:4a:f3:49:21:92:
         65:bd:ec:d8:0e:bc:44:71:02:c9:14:65:2d:57:ec:2c:16:74:
         30:3e:9c:c7:a5:fc:a8:9f:7e:8b:97:48:26:14:3c:2f:8c:e2:
         07:85:7a:27:d2:ab:a7:38:4f:fe:28:da:81:44:f5:68:aa:c6:
         4d:06:ac:bd:e1:8d:0f:0d:0a:09:52:a2:0b:2b:eb:20:18:ac:
         6b:50:5e:45:0a:45:85:59:a0:ea:91:51:ef:46:37:de:2d:c4:
         c9:0d:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:11 2025 by rpki-client