Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3332203d3e20313938393439.roa
File:                     3137392e36332e382e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          PZKcxK/9GlDdrVofC7xqBGFD+srw2A1LW9fgTh35LIk=
Subject key identifier:   D9:34:DE:96:DE:D5:95:22:9E:26:ED:41:64:81:31:E9:88:18:70:E1
Certificate issuer:       /CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
Certificate serial:       2008A80D727BD1AA9DB76223BCF1739EAD2B0B53
Authority key identifier: 15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3332203d3e20313938393439.roa
Signing time:             Wed 26 Mar 2025 21:25:00 +0000
ROA not before:           Wed 26 Mar 2025 21:20:00 +0000
ROA not after:            Wed 25 Mar 2026 21:25:00 +0000
asID:                     198949
IP address blocks:        179.63.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:a8:0d:72:7b:d1:aa:9d:b7:62:23:bc:f1:73:9e:ad:2b:0b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15AEFB47DDB077551B2BC6F226A051855E0A0F6D
        Validity
            Not Before: Mar 26 21:20:00 2025 GMT
            Not After : Mar 25 21:25:00 2026 GMT
        Subject: CN=D934DE96DED595229E26ED41648131E9881870E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:48:b9:ed:66:35:bd:ae:ee:8b:4d:aa:e8:
                    b2:1a:ef:65:26:a6:c1:f7:6e:55:32:85:ef:21:a4:
                    d4:c0:61:66:89:af:cc:c9:3f:97:a4:d0:23:3c:e6:
                    0b:fc:44:29:7a:59:e4:92:ba:d2:f4:4a:59:86:c7:
                    b9:cb:1c:03:85:8f:f8:c6:58:a8:33:bd:a9:88:c9:
                    86:c9:90:cf:8f:88:31:8c:da:32:26:53:77:dd:83:
                    ef:20:f3:41:b4:09:4b:f9:97:69:a0:40:d4:1d:4b:
                    10:a7:db:cd:b4:c3:99:d1:72:2c:82:a5:d3:a8:2b:
                    3b:15:6a:2d:00:b9:d7:6d:e0:16:44:a1:3f:62:1a:
                    4b:32:97:19:fb:46:15:d1:1f:a0:db:bf:e9:9f:1b:
                    b3:35:86:8d:af:5c:57:70:cc:b4:c8:51:96:20:77:
                    85:b7:1a:a8:1b:18:23:11:66:18:79:85:6d:3e:ae:
                    4c:1b:c9:35:be:6a:cf:a7:a6:87:f8:39:d6:2d:c6:
                    fa:38:9f:52:d6:51:4c:6c:f9:7a:11:2b:c5:7f:eb:
                    2f:55:06:dd:01:71:d5:1a:ba:bf:d3:fc:16:82:de:
                    bd:51:22:0f:0e:22:c5:7e:bc:6a:24:aa:13:ec:f7:
                    f6:e0:db:b2:c9:1a:81:2f:21:62:20:34:db:0c:e2:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:DE:96:DE:D5:95:22:9E:26:ED:41:64:81:31:E9:88:18:70:E1
            X509v3 Authority Key Identifier:
                keyid:15:AE:FB:47:DD:B0:77:55:1B:2B:C6:F2:26:A0:51:85:5E:0A:0F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AEFB47DDB077551B2BC6F226A051855E0A0F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8878DCFCFC33260C0BD8A2A683F9F67692E21FD4F744652DFD6BAB651BD2E782/0/3137392e36332e382e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:b5:fb:fe:a4:90:6a:ca:86:be:21:00:8b:f6:ae:66:06:dd:
         9c:8c:98:6b:7e:25:53:7d:17:ef:9f:94:cb:c1:7b:c0:aa:81:
         a5:6d:27:0d:13:83:46:0f:87:a1:dc:5a:a1:a9:ff:2e:e1:f6:
         a7:c2:a6:45:b9:86:c8:9c:2a:7a:48:ff:97:d6:c5:c7:61:c1:
         85:8e:41:6b:38:f5:ce:f0:bb:40:b9:2e:cd:b1:5b:b0:2e:19:
         6f:16:e2:e6:2a:01:21:f5:30:ea:9d:02:59:7b:99:64:29:7f:
         c9:2c:7c:98:63:01:1d:05:b6:35:3b:b8:45:a7:ae:4c:99:df:
         6f:08:3c:c7:5f:a7:5c:3b:56:a8:9f:4f:cb:f3:1b:3d:9c:a6:
         d1:24:f7:2b:2f:4b:d6:15:cb:fa:aa:ef:df:41:a4:06:96:2c:
         cc:84:38:ee:6b:02:36:56:39:2d:ca:99:22:05:4c:d4:65:c1:
         40:35:ca:64:bc:c4:3f:08:90:b2:f4:f9:50:cb:fa:29:d1:5e:
         0d:1a:89:ef:ec:9f:dd:cc:53:7a:bd:d6:5f:95:07:70:6f:c0:
         fc:44:65:92:82:ca:16:5b:58:66:39:1f:f3:57:17:ab:80:4d:
         91:f0:a9:43:5c:4e:3c:37:ae:17:d2:78:21:cd:d6:1d:cb:2c:
         a5:1d:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:39:51 2025 by rpki-client