Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130392e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3130392e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          rf1MKKMinq3Gmmghvta4pAdAzLjFEpNQQ1UJy/nWt78=
Subject key identifier:   CC:65:AF:85:EE:F4:0A:64:07:BD:F1:34:BD:F5:28:CC:F2:F2:31:86
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       29C22BB5C2955253FCC6F7A724A506F0BDA846CD
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130392e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:21 +0000
ROA not before:           Tue 04 Feb 2025 18:51:21 +0000
ROA not after:            Tue 03 Feb 2026 18:56:21 +0000
asID:                     264780
IP address blocks:        179.61.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 22:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c2:2b:b5:c2:95:52:53:fc:c6:f7:a7:24:a5:06:f0:bd:a8:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:21 2025 GMT
            Not After : Feb  3 18:56:21 2026 GMT
        Subject: CN=CC65AF85EEF40A6407BDF134BDF528CCF2F23186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:2f:43:1e:bd:64:51:5b:75:46:ce:04:10:
                    27:c1:28:90:81:ae:3d:c5:72:66:6a:7c:93:11:77:
                    9a:30:86:65:ec:0e:4f:60:63:e1:a2:87:c8:01:16:
                    1f:bd:41:9e:db:31:56:7d:f7:df:b8:d7:5d:f5:73:
                    5d:92:b4:92:32:02:04:28:b2:89:d2:1a:69:f5:42:
                    ac:6b:6f:fc:b7:95:8a:f9:c2:c6:11:3e:a4:f3:b7:
                    3d:90:c0:98:e1:f0:32:52:ff:62:46:32:12:af:fd:
                    23:9e:ed:fe:fa:65:13:74:91:f9:1a:3e:7e:b7:b6:
                    6e:e3:e2:14:36:f3:2d:80:80:3f:d6:4c:39:60:a9:
                    80:d9:97:7e:ed:cc:61:7d:1f:2c:dd:ee:99:90:91:
                    42:02:59:10:8d:06:9c:a4:01:b4:03:e4:e2:1d:ce:
                    f3:f2:30:c1:c9:09:01:66:5e:b0:01:4d:42:23:10:
                    e8:da:a3:f4:fc:e3:69:76:07:99:33:3f:ec:f3:3e:
                    7e:8d:1e:ae:ff:dc:b4:87:7d:61:f1:c3:36:45:85:
                    71:9a:39:00:e0:cf:ed:4c:4d:ae:cc:a4:7c:23:62:
                    bc:1f:b6:cc:7d:74:36:cc:3a:5d:7d:11:d2:46:bf:
                    24:85:a3:85:25:6f:d1:ea:66:3d:b2:db:4f:40:4d:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:65:AF:85:EE:F4:0A:64:07:BD:F1:34:BD:F5:28:CC:F2:F2:31:86
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3130392e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:da:8f:66:a9:e6:a4:f6:c3:35:7f:92:9b:ee:68:8c:7b:f2:
         b1:e0:ed:2e:a5:b7:f6:dc:40:31:a1:10:0e:7d:b8:74:a8:c5:
         9a:f7:b5:59:f1:db:10:8c:ea:61:15:b9:38:59:36:96:9f:fe:
         4b:92:87:7d:4e:d0:26:06:6d:20:6a:1c:10:45:ae:e6:82:47:
         d1:ef:51:2a:9f:5e:3f:86:3b:d4:ef:f5:73:73:55:5a:27:5c:
         f1:7c:a0:c6:5f:d0:c7:90:33:96:98:12:35:bf:38:47:88:f9:
         98:f1:ba:f0:ec:0c:f1:d8:a7:09:24:c7:ef:d1:da:87:d3:ed:
         21:93:a8:f3:79:cf:22:ce:4b:5d:fb:52:eb:fe:85:9c:d0:b7:
         49:af:fe:5f:5c:09:95:f7:43:af:82:76:8e:80:6f:b5:a8:db:
         37:30:68:d8:27:4d:6f:1e:6c:e5:68:a9:2b:45:79:21:c0:3a:
         93:64:35:87:cb:aa:da:63:47:b3:83:81:58:66:dc:ce:7b:f1:
         b8:54:bc:a4:07:f8:1d:e9:13:d0:bd:a6:9a:93:70:e1:32:18:
         c6:33:34:60:31:7b:34:fd:f0:93:b1:55:e8:f0:b1:f6:f2:43:
         73:61:31:bf:83:db:77:c1:1b:ec:94:ce:b2:23:10:bb:c5:20:
         d6:ff:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:51:27 2025 by rpki-client