Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3137392e352e302e302f31362d3234203d3e203134373534.roa
File:                     3137392e352e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          dPrwSSZIkK/c9iPv9DtJyNe1dGXCPWdeqcSRd+dj/W8=
Subject key identifier:   36:4A:43:E5:FC:FE:6B:54:A1:6A:1E:A0:04:EA:E4:C2:FF:48:14:30
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       6F4AFC5522E18165478177896F6175E4F5C4E2F8
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3137392e352e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:01:01 +0000
ROA not before:           Tue 04 Feb 2025 17:56:01 +0000
ROA not after:            Tue 03 Feb 2026 18:01:01 +0000
asID:                     14754
IP address blocks:        179.5.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:fc:55:22:e1:81:65:47:81:77:89:6f:61:75:e4:f5:c4:e2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Feb  4 17:56:01 2025 GMT
            Not After : Feb  3 18:01:01 2026 GMT
        Subject: CN=364A43E5FCFE6B54A16A1EA004EAE4C2FF481430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:cd:73:3c:0c:f7:9f:47:53:a8:04:64:7f:
                    8f:f6:e5:25:fe:55:55:18:7e:11:62:4a:e3:76:0b:
                    fc:41:6c:85:52:2e:25:f9:2f:f5:36:98:b5:fe:61:
                    a1:be:f6:cd:77:7c:38:f9:bf:0c:3b:38:f1:aa:a2:
                    b8:76:93:e2:c5:9e:b7:8c:ff:3f:30:b1:3e:fe:58:
                    aa:ef:1d:e2:ad:2a:8a:10:8f:bd:69:86:c1:00:0d:
                    f5:88:73:6e:40:5c:9e:c3:99:b2:66:b5:19:a5:6c:
                    27:60:70:17:07:53:32:2a:4e:f1:f1:82:c9:17:e8:
                    91:f8:80:1b:02:9f:bd:66:18:1b:26:f4:ea:b6:40:
                    cf:4a:d4:14:4d:0a:6f:af:98:b1:9e:50:a9:44:a0:
                    00:e7:8b:5a:d5:52:83:7e:1b:98:50:c3:8e:1f:0f:
                    7d:f9:3e:cf:fb:13:1d:0b:b1:74:ea:38:4a:81:46:
                    e6:47:54:5f:3b:c2:67:35:42:68:45:43:06:04:78:
                    e9:48:bc:98:92:c6:22:3d:d3:43:11:d9:9a:9f:f8:
                    7c:b8:4f:94:59:e4:6b:a6:71:9f:40:be:5a:d3:ae:
                    1b:ae:78:00:94:29:9b:98:4c:cc:12:32:02:a9:81:
                    81:a1:ea:be:0b:50:51:e3:86:cc:3f:27:1e:48:f6:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4A:43:E5:FC:FE:6B:54:A1:6A:1E:A0:04:EA:E4:C2:FF:48:14:30
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3137392e352e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c8:8f:61:0e:43:5a:86:4b:17:2e:76:28:4f:28:7e:39:9a:61:
         5d:23:3a:ea:3f:16:45:37:e1:06:5b:e2:84:ad:88:7e:a8:93:
         6c:7c:e3:85:33:92:17:e9:49:f4:06:02:1d:c3:fe:b4:6e:a4:
         76:5b:b6:46:39:5d:df:10:e1:1e:f3:15:a2:cd:5b:8c:67:9d:
         e8:e3:31:e4:e5:71:bc:95:f0:38:ec:fe:25:65:17:80:9c:8d:
         68:e3:5e:30:53:33:db:7b:d4:db:dd:f1:58:a3:cb:91:d8:c0:
         ce:60:74:97:e5:4d:db:e6:62:85:55:e6:c9:45:bd:18:ce:3f:
         d2:9d:bf:a0:bb:ae:07:85:c0:0b:7f:da:99:0c:f6:8e:5e:3e:
         0f:5d:95:a7:e6:a4:d7:0b:6b:a9:ec:28:fc:5a:42:f5:a3:37:
         24:0c:31:25:ed:01:40:1a:ed:6a:87:cc:4c:d6:57:92:b5:f0:
         f4:a6:18:0b:e1:13:36:4b:7e:19:19:eb:e6:5b:60:00:e7:42:
         4d:24:7b:b2:22:c1:e7:94:40:4b:f3:c8:c2:d8:d3:e8:26:7d:
         d1:72:c1:d0:94:38:59:1a:36:bc:c1:a6:0b:68:35:ac:d6:b4:
         d9:84:b1:27:0a:d0:25:8c:a2:d7:77:5a:a8:b6:87:42:b3:a7:
         7c:4b:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:29:40 2025 by rpki-client