Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130322e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3130322e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          reW9nbRW+N3PXgrZHUhZT8178GbYOxjK+ZcQ+1QMTrY=
Subject key identifier:   8B:6F:6A:6B:B9:16:27:3B:02:77:E9:76:20:12:97:C5:25:E0:4D:9D
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       5D31E61EDEC11F386E1A90A4386A355DD7CF6EDF
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130322e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:20 +0000
ROA not before:           Tue 04 Feb 2025 18:51:20 +0000
ROA not after:            Tue 03 Feb 2026 18:56:20 +0000
asID:                     264780
IP address blocks:        179.61.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 22:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:31:e6:1e:de:c1:1f:38:6e:1a:90:a4:38:6a:35:5d:d7:cf:6e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:20 2025 GMT
            Not After : Feb  3 18:56:20 2026 GMT
        Subject: CN=8B6F6A6BB916273B0277E976201297C525E04D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:74:cc:9c:27:64:3e:fb:4d:02:81:1b:86:
                    b3:a3:77:86:de:f2:33:7c:ad:26:c9:d3:d4:6a:76:
                    c9:8f:49:c5:a5:1d:07:3d:19:69:c7:78:47:e1:72:
                    ef:62:40:d7:17:a0:74:59:f3:91:5a:1e:86:b3:a3:
                    8d:a1:57:2c:eb:5b:ea:72:b4:82:d5:25:2a:06:59:
                    11:d2:f6:56:44:95:fc:42:6c:bb:b7:fd:21:d8:19:
                    27:b8:fb:4b:56:ac:a9:f8:ca:95:e9:c4:42:e8:f6:
                    55:8e:1e:6a:1f:75:4c:54:e4:7c:63:d1:1a:ae:e2:
                    79:48:e9:35:ae:3a:1a:ae:95:f3:b4:97:f2:54:81:
                    43:0c:de:86:7a:ec:c3:0c:5f:27:d1:66:96:d3:71:
                    e8:49:59:18:bf:92:e8:48:8b:b1:cc:c4:ed:9e:ce:
                    4f:28:a7:dc:cb:56:0f:a7:d7:ed:ac:aa:cd:17:73:
                    34:8d:40:f7:0f:1d:46:09:27:9a:d4:99:b5:01:30:
                    85:89:f5:05:c8:26:fe:d8:c2:4b:dd:88:60:40:84:
                    08:0e:c9:5b:8e:d0:4f:58:11:a1:53:91:79:3d:b0:
                    9d:40:5b:23:95:d5:6b:2b:55:40:cf:c9:e9:19:d4:
                    1a:83:57:df:66:50:3e:92:8c:b9:04:a6:ea:9b:45:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6F:6A:6B:B9:16:27:3B:02:77:E9:76:20:12:97:C5:25:E0:4D:9D
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130322e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:3b:c3:fe:60:d8:e5:9e:ca:88:a4:46:23:63:c6:c6:0b:
         77:57:54:3a:2a:5f:2e:7f:5f:4d:92:0e:98:01:84:63:cf:dd:
         e8:cf:68:ab:e8:63:64:f7:5c:b8:e0:99:01:72:c3:1e:ce:e9:
         a3:a2:52:3b:54:ac:57:e9:bb:96:46:2f:bb:9e:4f:d5:8b:82:
         d8:cc:e9:5f:d0:2d:59:a6:df:99:61:5e:3e:49:c8:cb:d7:ab:
         59:dc:fd:37:64:f0:ab:86:f7:be:2c:10:ad:75:4f:8e:74:7e:
         38:09:a4:1c:8e:11:33:19:a2:a6:d9:63:87:0c:ed:de:a7:0c:
         6d:d8:90:cc:ca:a5:ea:f7:03:2a:7a:81:fd:71:83:0a:c3:83:
         18:43:64:d0:2a:3c:45:2a:dc:f0:bc:49:07:34:42:29:cd:d3:
         6f:6f:28:40:f8:72:92:ba:aa:23:b6:52:64:29:6b:78:e4:bf:
         01:2b:7f:ba:91:7a:dd:70:a0:a7:3a:28:c7:48:ad:f1:a7:2a:
         2e:4d:75:54:56:da:5c:12:ac:12:36:e5:f1:45:d7:73:4e:3a:
         a1:72:83:f4:4d:fc:78:21:39:fd:ff:b9:a6:dc:da:7a:bd:7d:
         2e:b7:57:d1:e0:e2:a5:42:b2:7e:e7:d6:90:fa:82:40:12:4f:
         f2:41:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 20:11:22 2025 by rpki-client