Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130382e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3130382e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          t0udlUASIPR4WKpzxhrY/PC9LBQdmZKgaQX2AHwzHZY=
Subject key identifier:   8D:E4:A0:3A:14:11:CA:74:AC:68:6F:C0:F6:8A:03:20:74:B1:EB:B7
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       7A0AEDC6E24D73717FC9445BE19DD1CEAB950CEA
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130382e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:21 +0000
ROA not before:           Tue 04 Feb 2025 18:51:21 +0000
ROA not after:            Tue 03 Feb 2026 18:56:21 +0000
asID:                     264780
IP address blocks:        179.61.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 22:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0a:ed:c6:e2:4d:73:71:7f:c9:44:5b:e1:9d:d1:ce:ab:95:0c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:21 2025 GMT
            Not After : Feb  3 18:56:21 2026 GMT
        Subject: CN=8DE4A03A1411CA74AC686FC0F68A032074B1EBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:ae:20:86:8c:60:ff:2b:75:6a:29:bb:ea:
                    d6:44:05:8f:f7:e1:f9:0f:e8:b7:66:db:34:4e:36:
                    6b:6e:ed:2f:43:b3:2c:46:18:61:55:41:6c:bc:4b:
                    52:d7:94:22:6a:e6:01:1c:49:d1:0c:05:6b:43:6e:
                    09:ee:28:60:ca:7d:0c:10:19:32:43:2d:a4:32:94:
                    9a:09:60:50:23:19:ee:b9:b9:0e:e4:93:ca:e9:3c:
                    d7:2b:c0:2a:79:75:9d:4d:71:bc:e4:b5:33:d5:02:
                    59:11:41:6d:3e:6a:cf:99:a8:0c:72:13:60:4b:e7:
                    0d:45:3b:5a:3f:5b:6b:22:69:5e:13:d6:30:98:41:
                    4f:e7:93:cd:bc:f3:b7:e7:95:88:88:1e:9e:1b:21:
                    bd:8c:f5:5a:b3:9a:a2:ea:d8:e0:62:63:25:3d:71:
                    a9:d1:1d:2f:8c:85:0c:76:40:fa:ea:f8:fe:76:2c:
                    0d:9a:24:47:1e:96:8c:a5:70:63:89:bf:6d:b5:27:
                    13:1a:ce:fc:09:69:95:d8:9a:58:c4:39:7d:47:02:
                    bc:ef:4f:19:4d:e7:6e:e2:8e:7f:8d:d1:a0:99:51:
                    f4:17:27:88:c4:a2:e5:52:24:3c:dd:14:13:c8:db:
                    77:4e:82:13:70:60:44:61:7a:4f:72:9b:2d:26:91:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:A0:3A:14:11:CA:74:AC:68:6F:C0:F6:8A:03:20:74:B1:EB:B7
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130382e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:95:37:99:9e:ec:35:4a:8a:11:56:d8:a1:d2:78:c0:ec:84:
         1c:d7:20:2f:35:69:50:1b:7d:f5:cd:ea:3f:12:ef:ef:a3:6f:
         44:a4:2c:f4:b2:32:23:d0:aa:b4:b0:68:d2:91:9a:a4:b9:68:
         4b:57:82:4e:5d:a8:81:9e:a8:ba:d5:b8:fd:3c:50:bd:8e:25:
         99:a1:3e:2f:1f:48:21:34:d5:4d:fb:d9:83:fc:59:5a:3c:81:
         77:dc:50:33:71:d0:07:a5:5f:a0:7c:69:12:7d:2d:b3:e6:ee:
         97:0b:6c:af:2e:87:ce:1e:cb:68:e5:e5:e4:47:a4:eb:f7:a0:
         f6:5c:3e:83:13:3d:6e:ad:10:94:4d:8a:99:e0:a3:02:91:8c:
         8f:e4:4c:9e:fa:9d:d3:d5:44:6c:20:17:c2:a9:e6:4b:5c:c4:
         69:26:1e:91:62:11:e0:1c:b7:be:32:62:ee:0e:f4:d2:3f:31:
         65:e0:3a:a4:00:63:9c:af:6a:ea:84:ec:34:35:46:1f:78:1d:
         6c:80:75:07:73:f6:c1:a6:64:6d:b4:b8:9a:39:d6:24:fe:56:
         b2:2a:57:f8:6c:75:ee:56:a7:8e:e6:8c:54:8f:ec:39:4b:61:
         1a:57:cb:72:2f:5a:d7:37:bd:66:a3:76:28:44:90:f0:9e:1a:
         cd:0c:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 20:13:59 2025 by rpki-client