Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130372e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3130372e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          6T7sbvl+lHbclRWBR7vG7heH+Iz5FGoy39/IYLZ1hl0=
Subject key identifier:   50:9F:0D:6D:6B:57:4D:29:26:01:17:21:F5:A5:06:AE:B1:5E:8D:34
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       0CDF4B6DBE6654250885FB13907C4FA99CF64F10
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130372e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:20 +0000
ROA not before:           Tue 04 Feb 2025 18:51:20 +0000
ROA not after:            Tue 03 Feb 2026 18:56:20 +0000
asID:                     264780
IP address blocks:        179.61.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 22:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:df:4b:6d:be:66:54:25:08:85:fb:13:90:7c:4f:a9:9c:f6:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:20 2025 GMT
            Not After : Feb  3 18:56:20 2026 GMT
        Subject: CN=509F0D6D6B574D2926011721F5A506AEB15E8D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:d0:15:5c:2e:41:3b:c9:f8:f7:40:6d:24:
                    c5:7d:66:93:90:33:b0:4e:62:85:1d:30:28:8a:63:
                    a2:66:4d:94:21:a0:77:59:37:a3:69:f0:53:9f:f8:
                    80:8c:e1:be:60:a9:83:f8:bb:12:2c:70:48:1b:a9:
                    3a:2d:7b:e5:2a:0a:cf:35:e5:d1:7a:37:81:77:67:
                    4f:4d:a1:03:0c:2e:0e:14:1b:5a:32:20:f4:13:6f:
                    ac:d1:41:d4:62:0b:3a:e8:30:20:40:33:5a:42:f7:
                    14:a5:f5:ce:2f:0a:e4:17:a6:af:c8:6d:fb:f0:0a:
                    e2:4e:2b:d8:7b:bc:b6:22:06:78:98:97:bd:70:84:
                    35:d9:68:b4:f3:74:ad:03:86:63:a0:6d:49:3a:b9:
                    9e:13:96:3d:4d:bf:28:44:c0:d4:5d:76:ed:38:04:
                    a7:70:09:09:1c:a2:6b:a2:52:aa:30:83:bc:fe:b3:
                    cd:e2:3a:42:8f:37:1b:aa:72:7f:04:04:db:b3:e6:
                    9d:a3:d9:14:10:8a:f3:18:c2:77:90:79:d7:3f:3c:
                    f7:7a:68:ed:73:38:2b:a9:0e:2e:40:eb:24:eb:ca:
                    1d:3b:4a:e2:db:ba:5f:ce:95:fc:cc:37:6a:e1:d4:
                    34:35:50:46:e1:b6:7e:d7:b6:ee:15:69:ad:8c:ec:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9F:0D:6D:6B:57:4D:29:26:01:17:21:F5:A5:06:AE:B1:5E:8D:34
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130372e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:1f:58:69:0a:b3:96:2e:c0:28:d5:71:a4:11:ab:e9:fd:
         15:ba:39:83:ba:e4:c6:3c:b5:d8:dd:00:9d:94:12:f8:53:f6:
         59:89:99:c4:cd:06:c2:41:1f:8b:69:11:35:9e:78:16:05:d0:
         03:17:88:35:a8:00:8c:6a:90:99:37:b6:1b:f6:70:7d:f7:cf:
         cd:29:e5:2e:f8:8d:9b:30:e3:82:93:e3:25:59:3c:c5:82:45:
         a9:2d:15:a4:09:72:11:f4:cc:09:5d:14:45:6a:35:c0:a3:63:
         6e:de:44:fe:ff:cf:3a:b7:0c:8f:38:ef:73:da:5d:21:f8:53:
         d2:b0:39:a8:b1:1d:73:0d:cd:f7:7a:2f:6a:75:7e:5b:ac:89:
         af:4a:d9:7f:0b:5d:92:9d:90:40:df:b1:0f:fd:b1:3f:dd:59:
         0e:67:38:52:bb:5a:aa:f0:e3:3d:40:3e:9c:73:4b:09:c7:e8:
         3e:32:a0:76:09:a9:5d:40:ef:8b:a8:31:53:8d:f6:cd:c6:5d:
         f4:53:78:2b:40:ea:d4:da:66:19:78:6a:86:c3:48:c7:9f:cf:
         b8:3a:d6:4c:39:90:f5:20:6d:37:09:db:7d:37:a6:6b:cd:b1:
         a9:bc:e0:7b:66:72:70:2d:7c:b9:6c:32:ec:78:f4:5a:c7:58:
         fb:5f:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 20:28:13 2025 by rpki-client