Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3131312e302f32342d3234203d3e20323632323138.roa
File:                     3137302e37392e3131312e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          1BCdC0qVvIWW0LlD8qOGsoqAtVPj5BxIcsUaRbG2L50=
Subject key identifier:   56:BE:E5:14:F4:A6:9A:26:E0:84:D8:6B:03:36:F8:3B:05:F4:42:53
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       1A5A475BD113B17D5C2A6261CEB324DD5A3B722E
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3131312e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 04 Feb 2025 18:53:20 +0000
ROA not before:           Tue 04 Feb 2025 18:48:20 +0000
ROA not after:            Tue 03 Feb 2026 18:53:20 +0000
asID:                     262218
IP address blocks:        170.79.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5a:47:5b:d1:13:b1:7d:5c:2a:62:61:ce:b3:24:dd:5a:3b:72:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Feb  4 18:48:20 2025 GMT
            Not After : Feb  3 18:53:20 2026 GMT
        Subject: CN=56BEE514F4A69A26E084D86B0336F83B05F44253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:e5:fd:9f:f9:54:49:a5:45:fa:f4:15:e5:
                    cb:8a:74:ef:96:fd:f7:3a:b5:3c:f6:f0:46:8d:7f:
                    c6:db:2a:44:3f:4f:5b:ff:94:fc:70:8f:25:dd:3f:
                    10:06:77:b9:56:54:96:57:15:f0:41:9b:f0:24:4c:
                    bd:df:de:91:df:92:a7:d4:c6:34:4e:aa:8a:7f:78:
                    1b:50:80:4d:0c:33:1e:19:86:2f:6b:0d:f9:a2:1f:
                    0c:39:ed:07:6b:4e:35:34:e4:0a:9a:52:04:4b:91:
                    07:a2:66:1e:9e:a7:67:63:48:d9:a5:e7:9d:6f:18:
                    35:77:75:42:83:25:1c:c9:14:b2:d6:b8:a5:2b:d7:
                    7f:90:7a:ba:61:57:0e:f8:9e:49:91:a8:e1:c5:c0:
                    78:2a:f4:e9:2a:5d:d4:a4:04:b8:7d:69:3f:08:ea:
                    10:4f:83:e1:e2:8c:ee:c8:7a:ed:3f:66:b6:d9:f8:
                    e7:c6:1f:43:b9:7a:cc:cc:49:8b:8d:83:03:12:43:
                    2d:a7:2c:03:1f:b7:00:13:68:57:67:0f:d5:cb:49:
                    b9:81:5e:64:16:a8:b6:74:74:3d:f8:94:cf:84:68:
                    21:c2:46:28:6b:fc:85:46:87:8d:84:0e:a5:41:ce:
                    5a:1a:3b:ea:cb:4e:b6:06:9b:97:ef:b5:b3:d3:0f:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:E5:14:F4:A6:9A:26:E0:84:D8:6B:03:36:F8:3B:05:F4:42:53
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3131312e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:e6:ea:fd:6d:90:01:73:90:1c:08:81:04:00:37:3d:ec:
         fb:a4:72:f5:29:33:56:b4:5d:32:66:52:3c:7f:cc:c6:f8:8b:
         a1:40:21:43:9c:a8:4b:de:8d:32:76:54:9f:94:9c:6c:d1:3b:
         c7:f3:ab:ff:7c:d9:19:ee:ba:97:7c:b1:8b:f0:ce:26:07:93:
         c1:0b:d0:97:e2:57:16:69:a8:bd:a7:e6:25:92:e2:ab:bc:47:
         22:13:79:92:d9:c2:ee:39:63:c8:10:40:24:0e:20:e1:61:81:
         3c:dd:08:f9:9f:14:dc:3f:d8:35:04:9d:e4:30:41:ec:a6:18:
         48:22:cc:8d:d6:cc:61:79:18:13:26:a7:d2:1c:0a:8f:8d:7c:
         5b:4d:35:a9:4b:9d:bf:e4:65:9b:46:85:2e:42:6a:ef:81:8f:
         9e:17:43:e9:2c:be:34:d1:6c:a4:b5:9d:9c:bf:97:af:48:d4:
         ff:6b:42:e9:f4:a4:00:42:03:ff:63:a9:2f:4a:5e:63:01:95:
         89:0e:99:e2:02:89:02:14:8f:33:33:93:10:31:a4:bc:4e:04:
         a2:de:38:db:fa:a9:d9:61:c4:b5:11:bc:4e:e7:f8:fd:6c:c7:
         dd:f1:7b:16:8c:23:73:b6:f6:03:67:9b:e6:47:73:3d:68:0b:
         95:d2:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:44 2025 by rpki-client