Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa
File:                     3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          8usLwQRjQhPRV1wJDfMQerrfwP6dbbiidxymeut9z1U=
Subject key identifier:   1E:4E:32:26:C5:3A:F8:CB:43:8C:48:1B:B1:16:10:F8:5C:68:87:31
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       4D80A98817977A50A824AB3763CCD0FD1BCD9EBF
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 04 Feb 2025 18:53:19 +0000
ROA not before:           Tue 04 Feb 2025 18:48:19 +0000
ROA not after:            Tue 03 Feb 2026 18:53:19 +0000
asID:                     262218
IP address blocks:        170.79.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:80:a9:88:17:97:7a:50:a8:24:ab:37:63:cc:d0:fd:1b:cd:9e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Feb  4 18:48:19 2025 GMT
            Not After : Feb  3 18:53:19 2026 GMT
        Subject: CN=1E4E3226C53AF8CB438C481BB11610F85C688731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:12:8b:9f:55:33:88:16:27:06:80:b6:c8:
                    fb:08:42:91:41:b0:09:c9:94:69:14:a1:53:5c:ad:
                    09:10:0b:ac:40:95:93:2b:b4:58:93:b8:74:ca:d1:
                    22:55:13:98:8d:a1:3d:65:90:55:5c:2c:1f:e6:22:
                    67:69:9b:bc:97:57:fa:c2:fe:d1:f6:3a:65:0a:a0:
                    21:d7:fb:6e:d3:71:a7:8b:a3:c8:1f:9c:b7:b5:23:
                    99:b2:a6:01:a0:aa:f3:05:ea:ef:64:bd:26:36:fc:
                    8f:c9:c3:ed:cb:2f:01:c0:0a:90:68:43:b8:b5:57:
                    43:a9:15:19:0c:45:8e:95:14:3b:48:1b:5c:73:7a:
                    6b:aa:fc:75:e7:84:16:af:b3:c3:4c:ed:a9:00:c7:
                    1c:34:33:bc:17:82:15:71:33:48:32:5b:61:7e:d3:
                    b0:4f:1a:6c:be:8f:87:4f:8d:fa:aa:6d:39:a4:6e:
                    52:dc:ff:7e:a5:de:01:42:fe:3d:6a:c0:fa:f0:c9:
                    85:30:6d:5e:58:5c:32:35:f7:0c:69:b2:24:54:52:
                    1f:87:51:40:eb:52:c1:1b:0c:2f:ff:a0:36:aa:02:
                    2e:fe:95:91:42:8b:2a:29:fc:4c:33:51:6a:36:c7:
                    1f:1a:11:73:25:e4:08:d8:a6:44:61:86:be:de:4a:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:32:26:C5:3A:F8:CB:43:8C:48:1B:B1:16:10:F8:5C:68:87:31
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:57:89:a7:f4:1e:89:04:42:9c:bb:da:ff:3a:d9:38:8c:
         bb:5a:6f:e4:38:65:a3:82:bf:3a:f1:1c:28:20:8e:05:bc:8c:
         c8:76:71:ef:28:5e:87:9b:62:2d:81:d5:d1:70:e6:bf:e7:0f:
         8e:d3:f0:0b:b8:66:5b:15:bf:bb:75:9a:f8:fb:2c:b3:dc:fa:
         16:50:78:7e:51:e6:1b:3d:3c:cc:75:91:7b:37:82:be:e3:54:
         8b:2f:66:8a:64:3c:39:81:ef:53:59:29:2f:27:48:79:cb:7d:
         a7:2b:a1:59:9c:21:20:5e:2b:e8:ea:77:96:f5:29:47:8e:1c:
         05:bd:c7:6e:ab:cd:bc:28:8e:fb:89:cb:b4:cf:71:e3:5f:70:
         5d:8e:84:10:09:58:cd:2e:e6:62:3a:a6:17:64:64:4f:5d:a8:
         7e:df:aa:e4:e0:a5:e8:d2:ab:de:ba:d5:d7:45:a7:ba:94:04:
         24:ea:e9:0b:32:b0:27:0e:88:ca:58:59:52:e7:63:79:39:85:
         81:3d:8e:c3:47:11:fa:5f:81:04:1d:d7:cc:f9:8a:fa:a5:6a:
         93:26:7d:93:8f:82:76:5b:55:8c:fb:5d:4b:79:a3:b3:6b:a6:
         17:5f:97:fd:6b:c7:94:e1:3b:92:3a:78:8b:f3:4b:6f:a9:e5:
         1c:99:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:17 2025 by rpki-client