Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/3137392e34322e37382e302f32332d3233203d3e20323731373839.roa
File:                     3137392e34322e37382e302f32332d3233203d3e20323731373839.roa (raw, json)
Hash identifier:          addfK2h7KWvLqW3Ut2MHAuIjBjXhH6gXv+rbecifa44=
Subject key identifier:   CC:7D:44:1D:9C:49:E7:D3:57:E1:BC:13:09:6A:8F:B7:13:44:C4:F7
Certificate issuer:       /CN=11014FEC5A6AAC08A3AAED5BB2E455971184D6F8
Certificate serial:       6C249FDE8F90D49AA256B9479B187858D6763840
Authority key identifier: 11:01:4F:EC:5A:6A:AC:08:A3:AA:ED:5B:B2:E4:55:97:11:84:D6:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/3137392e34322e37382e302f32332d3233203d3e20323731373839.roa
Signing time:             Tue 04 Feb 2025 18:23:26 +0000
ROA not before:           Tue 04 Feb 2025 18:18:26 +0000
ROA not after:            Tue 03 Feb 2026 18:23:26 +0000
asID:                     271789
IP address blocks:        179.42.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:24:9f:de:8f:90:d4:9a:a2:56:b9:47:9b:18:78:58:d6:76:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11014FEC5A6AAC08A3AAED5BB2E455971184D6F8
        Validity
            Not Before: Feb  4 18:18:26 2025 GMT
            Not After : Feb  3 18:23:26 2026 GMT
        Subject: CN=CC7D441D9C49E7D357E1BC13096A8FB71344C4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:e4:53:18:51:22:aa:ab:55:f4:e9:57:3b:
                    41:c0:be:86:da:1a:ef:b9:3f:e0:d9:3c:f5:05:c3:
                    bb:a0:02:b9:6f:cd:04:7d:ca:7b:b4:69:9e:2c:a2:
                    31:d8:38:11:2d:34:c4:93:f1:0b:e7:f2:79:42:d3:
                    c0:bf:ea:f0:ee:86:85:9c:e1:65:7b:0e:cf:95:81:
                    29:9c:b7:d8:20:27:94:ce:e2:e9:e8:8e:48:ba:27:
                    eb:9e:72:c8:58:69:38:9a:a0:4e:c6:ca:2a:e4:e0:
                    f5:f0:ac:bb:07:c6:15:56:97:e2:50:d5:ba:7c:80:
                    d3:d5:c2:92:11:cc:7a:34:1b:02:8e:e0:88:f0:9f:
                    a1:11:20:3a:fa:bb:9d:d2:ef:ab:c7:a2:12:68:28:
                    bd:e3:70:50:32:78:61:02:83:60:9a:35:17:9a:43:
                    b0:ef:3b:b7:6f:ee:fb:08:42:d3:fa:d4:4a:92:80:
                    6a:a7:bd:8e:8c:7e:7d:59:24:a7:1b:e3:9d:bc:a3:
                    c2:fd:05:4c:bd:e3:da:30:98:ba:95:69:a6:c8:91:
                    4b:df:8b:f8:e0:81:9a:4d:80:26:ba:d4:f5:df:e5:
                    86:b5:44:c5:a5:23:1a:ff:f1:f5:3f:d4:58:bc:80:
                    0b:4f:2c:b6:0a:c8:3d:a8:82:08:be:46:5f:6f:41:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:44:1D:9C:49:E7:D3:57:E1:BC:13:09:6A:8F:B7:13:44:C4:F7
            X509v3 Authority Key Identifier:
                keyid:11:01:4F:EC:5A:6A:AC:08:A3:AA:ED:5B:B2:E4:55:97:11:84:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11014FEC5A6AAC08A3AAED5BB2E455971184D6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E648298EC37E5BA4A53EC5F6D19A4484AB25A95AFF79269BF5F637115301E3/0/3137392e34322e37382e302f32332d3233203d3e20323731373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:23:be:97:f7:60:ff:3c:98:df:33:cd:8a:d2:3c:40:fc:45:
         d9:89:82:01:b0:e0:ac:c8:b6:33:32:f3:df:67:25:dd:42:41:
         17:5d:4e:cb:32:67:bd:63:44:ea:9b:c0:10:a2:52:55:54:ce:
         68:e7:a0:89:a2:05:1e:12:c9:87:cf:12:f3:20:9e:80:e3:32:
         2e:e6:ff:21:e2:a9:ca:0c:23:36:5b:ee:7c:68:86:67:87:c4:
         51:68:35:9e:94:67:a4:15:8d:a7:7d:29:f4:c7:54:d8:68:bc:
         10:74:60:b2:e2:05:62:b8:6e:2b:cb:02:86:fe:74:7e:a7:08:
         73:27:79:9d:6f:31:0e:94:e0:23:6e:d8:4d:fd:3d:d2:55:a2:
         55:1d:bf:47:12:d8:2b:9a:45:ad:69:6c:7c:5b:97:5f:7d:68:
         af:e2:92:c5:40:0b:c7:99:2b:cd:c2:2c:cd:24:91:22:b0:ac:
         1c:38:0c:4f:55:41:3e:03:8e:0e:6f:6b:c7:3d:c5:91:c7:c3:
         34:c8:e5:5f:7c:0a:d3:f2:1f:fe:ed:5c:91:15:e2:87:f1:1d:
         3c:71:5d:04:1c:b5:59:db:8b:71:a4:89:d3:c8:ab:1b:ff:54:
         eb:12:48:ee:b4:a4:a0:86:13:a0:a8:6c:9b:b4:e1:a3:a0:8d:
         f9:90:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:05 2025 by rpki-client