Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32322e36342f32362d3236203d3e203635313035.roa
File:                     3137392e302e32322e36342f32362d3236203d3e203635313035.roa (raw, json)
Hash identifier:          R6mtpzoUA60V397hZKWJBQadz8Qws4PYXH9aRFRMeKs=
Subject key identifier:   46:56:6A:A0:7F:E0:26:47:11:F2:70:77:97:7C:42:73:ED:C4:FE:04
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       234C469B1F4BF632442BC5EDA25C484E3224DE38
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32322e36342f32362d3236203d3e203635313035.roa
Signing time:             Tue 04 Feb 2025 18:20:59 +0000
ROA not before:           Tue 04 Feb 2025 18:15:59 +0000
ROA not after:            Tue 03 Feb 2026 18:20:59 +0000
asID:                     65105
IP address blocks:        179.0.22.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 16:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4c:46:9b:1f:4b:f6:32:44:2b:c5:ed:a2:5c:48:4e:32:24:de:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Feb  4 18:15:59 2025 GMT
            Not After : Feb  3 18:20:59 2026 GMT
        Subject: CN=46566AA07FE0264711F27077977C4273EDC4FE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f0:14:9c:3e:32:be:42:4a:dd:44:ba:2d:1d:
                    2d:d7:c8:79:ff:ec:18:d2:0a:7f:39:63:6f:7f:e1:
                    68:c7:78:cc:58:c1:7f:80:da:94:8d:35:cd:7e:20:
                    ae:84:a1:23:5c:4d:c1:84:2b:bb:55:f6:f4:ea:6f:
                    78:19:b7:3d:9d:67:08:aa:6c:73:a3:65:4a:fb:55:
                    08:c2:2f:1e:51:c1:2e:f0:bb:1b:16:21:99:33:dd:
                    4f:83:1c:aa:04:97:89:b8:fa:4a:25:36:00:90:88:
                    5f:c3:be:69:f8:7b:af:eb:a1:ae:2f:de:66:4c:39:
                    32:42:fc:a7:0c:2b:6a:fa:93:2e:bb:89:79:fb:f8:
                    b7:7b:3c:21:5b:b0:dc:cd:94:64:26:da:d5:0e:ee:
                    a6:91:98:e3:70:a7:55:08:69:55:6b:3b:59:39:31:
                    c4:08:14:4c:ad:b4:65:15:99:b6:46:4f:c2:c4:bf:
                    51:ff:07:50:8d:7e:b6:5e:ad:0d:3d:5e:7c:34:6f:
                    4b:8f:04:6f:1f:6e:71:c0:a6:64:df:a0:cf:94:64:
                    c6:22:67:96:f0:e9:24:41:4c:b1:b1:12:e9:e0:de:
                    c5:70:d1:d8:e6:a1:e9:ce:1a:46:50:83:43:2e:dc:
                    ef:66:6f:88:d2:e1:38:a8:c3:1e:fd:7d:20:62:5c:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:56:6A:A0:7F:E0:26:47:11:F2:70:77:97:7C:42:73:ED:C4:FE:04
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32322e36342f32362d3236203d3e203635313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.22.64/26

    Signature Algorithm: sha256WithRSAEncryption
         b5:56:a3:10:69:3f:3f:2f:f5:25:d5:e8:8e:c7:1c:83:cf:72:
         9f:b8:49:45:ad:6f:f7:e4:3d:35:1f:e9:6b:0d:46:b2:b8:d1:
         8f:97:26:ce:9f:63:b3:b6:53:fd:1f:cb:09:ef:9e:d8:62:6b:
         94:d4:57:88:b5:f1:a6:2e:ef:59:b0:0a:9f:6c:57:d4:3a:4b:
         83:9f:79:4d:2b:61:0c:a5:d9:5f:68:83:c4:26:25:00:15:f3:
         dd:a7:43:93:2b:0c:2b:67:fa:f5:23:ce:7f:f3:b2:24:fe:4d:
         ad:76:c2:a2:3f:4f:e6:bc:f4:7e:93:a1:30:9a:83:21:fb:ed:
         d7:ab:43:fc:b7:e9:59:cc:9f:5e:28:f4:55:28:e1:f4:bb:8a:
         70:5e:d4:1e:85:c4:4a:c7:eb:91:ca:3c:84:9c:76:1e:eb:03:
         17:94:ea:fe:a0:10:3f:4f:e4:b4:33:6c:ee:00:94:ad:3b:dc:
         9d:4c:e0:cd:39:a0:04:a4:be:11:73:74:40:a8:f3:2a:92:0f:
         b4:5c:34:91:43:b2:b2:9a:27:93:b0:df:82:c7:b6:96:fe:65:
         5c:9d:61:1e:ba:e8:31:ff:4b:b4:9f:56:24:43:16:80:23:a3:
         2d:63:24:e4:5b:f1:9b:3c:17:69:7f:95:56:6f:be:36:19:67:
         2b:ad:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:53 2025 by rpki-client