Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3137392e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3137392e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          QtjtmYdbCwwgcgxw6oiYb53pQxNjjSuz/EBiyyUIYz0=
Subject key identifier:   3F:BD:A2:16:DB:7A:F8:C1:5B:CB:90:F9:8E:E3:FC:E6:7B:5C:DD:09
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       0FE9034111DA748AFBEF7D5DCC94AE744F1D367E
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3137392e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:51 +0000
ROA not before:           Tue 04 Feb 2025 18:01:51 +0000
ROA not after:            Tue 03 Feb 2026 18:06:51 +0000
asID:                     18734
IP address blocks:        189.202.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e9:03:41:11:da:74:8a:fb:ef:7d:5d:cc:94:ae:74:4f:1d:36:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:51 2025 GMT
            Not After : Feb  3 18:06:51 2026 GMT
        Subject: CN=3FBDA216DB7AF8C15BCB90F98EE3FCE67B5CDD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:f0:27:b6:66:58:62:ce:3b:2c:db:90:05:
                    18:fa:81:85:67:c3:cc:9e:e2:73:e2:e8:e5:53:18:
                    96:d0:14:85:b4:c2:da:00:c2:78:3d:23:a7:60:ad:
                    9d:2e:d3:39:c5:e3:24:dd:3a:5d:f2:20:82:b8:db:
                    95:2b:63:32:37:eb:13:d9:fe:a4:87:0d:ca:72:9d:
                    d9:27:06:fe:7a:c3:2b:ae:26:37:15:7a:92:5f:da:
                    0c:59:a6:ac:9a:f3:8d:e6:d3:1b:5e:8c:e5:57:48:
                    8f:c4:1a:c5:fd:70:aa:ed:df:df:1b:9d:04:11:13:
                    b0:e0:b5:ff:f2:96:a8:cc:ff:fd:56:5a:80:0d:ac:
                    6e:c4:cd:db:1c:2f:01:61:22:58:0e:ce:a9:20:52:
                    66:66:70:9b:b7:e2:53:11:95:2b:6b:98:ef:6d:83:
                    3e:83:d3:cc:6d:5d:8e:9f:4e:d7:2c:c9:29:3d:13:
                    88:fa:5d:df:dc:9e:42:c0:9c:f7:69:44:99:e5:83:
                    8e:31:9a:14:cf:4b:40:c5:4d:d9:55:c7:37:1e:dc:
                    79:77:20:3d:70:25:b8:b2:c7:fe:96:96:dc:68:6e:
                    ac:7a:d0:ef:91:3f:dc:33:99:f1:95:55:93:e4:f2:
                    83:c2:d4:4b:2a:a5:90:46:a0:fd:df:52:51:de:52:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:A2:16:DB:7A:F8:C1:5B:CB:90:F9:8E:E3:FC:E6:7B:5C:DD:09
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3137392e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:74:28:ae:a8:f5:8b:73:52:0c:c7:c9:40:d7:58:5e:ea:
         11:ca:a2:7a:4e:a8:c3:59:2f:b9:7f:04:3a:87:7f:c8:c8:7a:
         4b:0d:e8:cc:41:8f:16:ea:28:e7:5e:ce:3a:d8:34:44:d9:8a:
         fd:99:53:9e:d9:fc:ca:d2:06:73:b0:ef:19:61:06:cb:39:b6:
         5c:ed:c5:e8:8c:66:f7:d2:40:c7:ef:9e:90:a1:27:71:d4:09:
         a7:58:c7:30:80:af:f0:55:de:ce:c3:9f:b0:88:5f:da:d3:15:
         7b:8e:6d:0c:37:c3:de:51:3f:0e:d5:f0:e0:bc:e7:61:0f:7b:
         2e:dd:53:36:fb:c1:b6:7b:58:19:70:b9:d1:1f:2d:b5:c6:08:
         e7:93:0d:1b:40:14:5b:2d:28:af:95:85:8f:0c:45:79:d6:6d:
         6b:c0:53:07:75:63:c5:99:34:16:d2:bb:b4:3a:8f:13:5f:9f:
         b8:7b:f6:67:03:8a:83:05:c3:9a:9c:86:c2:7d:ee:a1:9a:e7:
         b7:a2:46:68:bb:c4:8e:1e:98:62:07:5d:76:7a:67:18:2e:35:
         5f:0e:7d:fd:9c:3c:c4:da:00:04:06:03:ca:19:6d:c4:86:c3:
         dc:97:ec:15:fd:96:64:64:c7:6a:12:11:15:42:38:72:5a:c5:
         13:d0:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:59 2025 by rpki-client