Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/3137392e35312e3136382e302f32322d3234203d3e20323731383137.roa
File:                     3137392e35312e3136382e302f32322d3234203d3e20323731383137.roa (raw, json)
Hash identifier:          v51hZnOR4U1tT235x1D3S9NYecWT1PDQvUxJYWc+ql4=
Subject key identifier:   13:F2:17:4F:CC:AB:C4:F2:A1:C2:F6:D8:9C:D9:31:4E:AD:26:8B:70
Certificate issuer:       /CN=4F552B32D5F869D8DBEF844D9523A2A5FBA57968
Certificate serial:       314CA999E309A16FF2CE67E69DE6C113145C9AF9
Authority key identifier: 4F:55:2B:32:D5:F8:69:D8:DB:EF:84:4D:95:23:A2:A5:FB:A5:79:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/3137392e35312e3136382e302f32322d3234203d3e20323731383137.roa
Signing time:             Tue 04 Feb 2025 20:05:01 +0000
ROA not before:           Tue 04 Feb 2025 20:00:01 +0000
ROA not after:            Tue 03 Feb 2026 20:05:01 +0000
asID:                     271817
IP address blocks:        179.51.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:a9:99:e3:09:a1:6f:f2:ce:67:e6:9d:e6:c1:13:14:5c:9a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F552B32D5F869D8DBEF844D9523A2A5FBA57968
        Validity
            Not Before: Feb  4 20:00:01 2025 GMT
            Not After : Feb  3 20:05:01 2026 GMT
        Subject: CN=13F2174FCCABC4F2A1C2F6D89CD9314EAD268B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:8c:7a:38:8e:aa:37:2d:75:ab:b3:cf:ac:
                    8a:9d:8c:72:25:1f:cd:9f:b4:a3:be:e4:51:d8:3d:
                    6e:65:8e:11:13:05:d0:75:05:7c:f1:8e:01:71:0c:
                    69:41:3f:70:cf:74:f6:68:ef:ef:c6:08:af:dc:25:
                    65:6a:e1:49:d8:4c:3b:ad:0c:d7:fe:fb:ea:cb:f8:
                    c8:eb:5b:a0:49:ea:f8:a9:18:91:23:6d:64:98:a9:
                    38:65:8f:39:af:69:b9:63:1b:54:f7:7f:31:ce:f8:
                    2f:e8:12:01:aa:59:0a:10:99:59:85:aa:86:d7:7d:
                    ff:97:ff:bd:e4:66:83:fb:cb:0f:c0:2d:b1:f2:ab:
                    7a:e0:07:fd:8d:0b:b7:94:23:9e:29:29:c6:c9:11:
                    81:59:98:b6:cf:e6:d1:ce:81:33:21:1b:ed:50:b8:
                    b1:3b:29:96:95:77:c1:57:f6:82:6c:1f:74:d5:50:
                    da:e4:5d:32:ee:db:66:b0:21:93:b6:45:9a:96:55:
                    9b:ac:e2:b1:3a:10:34:01:f8:1b:5d:7e:57:f9:a1:
                    c5:a7:d0:b4:f4:9f:86:b8:c8:c4:b6:9b:45:f0:d4:
                    8c:f0:3a:44:22:65:5f:32:05:b2:9e:f4:33:a3:13:
                    0d:75:f7:69:9b:a3:bc:23:e5:13:ca:a8:8a:27:19:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:17:4F:CC:AB:C4:F2:A1:C2:F6:D8:9C:D9:31:4E:AD:26:8B:70
            X509v3 Authority Key Identifier:
                keyid:4F:55:2B:32:D5:F8:69:D8:DB:EF:84:4D:95:23:A2:A5:FB:A5:79:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/3137392e35312e3136382e302f32322d3234203d3e20323731383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:f4:b0:28:2d:7a:32:2a:e3:69:2b:5f:1b:6d:02:67:0d:
         0f:50:e7:45:7e:19:ef:d6:aa:71:0e:a5:f8:ec:bd:a9:ff:91:
         67:5d:c6:74:b1:19:c0:2b:c1:9b:94:53:30:b6:7a:88:f0:9c:
         30:d3:ce:c7:14:2d:b9:eb:44:0e:ce:19:f3:08:f0:7a:c4:ba:
         cb:fc:7a:db:06:96:37:00:fd:cd:e2:6f:10:5e:43:84:17:2f:
         bc:9c:14:6e:40:29:e4:b1:9c:a9:1e:f8:a5:6c:ab:95:35:ec:
         fd:22:f6:f0:00:e8:ad:fc:71:b4:83:80:9b:87:2e:10:74:68:
         8e:4f:b4:84:2f:ff:90:29:6f:4d:4a:23:11:76:b7:fa:3f:1a:
         9f:a4:f3:03:1a:b8:e5:1b:7f:3b:3d:e2:7b:7a:a3:dc:57:5c:
         42:0c:be:fa:4c:b4:82:56:38:03:ca:38:bb:de:23:08:89:35:
         39:ff:b2:bc:ba:4c:19:14:23:76:70:fd:f1:0a:b7:fc:d5:0e:
         a9:dd:61:a0:34:f8:c2:6f:17:2e:3a:d0:f8:55:9e:81:3f:ba:
         9c:fc:de:b7:fc:a8:cb:48:bc:48:94:fb:41:91:a6:37:1b:10:
         c1:59:03:0a:8f:85:ce:8f:d2:56:51:76:e5:47:07:dc:09:b8:
         10:c1:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:24 2025 by rpki-client