Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa
File:                     3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa (raw, json)
Hash identifier:          6PZaJt1rSC2endiZzaMKjI3t8ohSg/oN6ZMZLnD9kk0=
Subject key identifier:   B4:90:D3:27:21:58:80:5E:53:F7:4A:79:17:CB:78:F0:B5:40:42:DE
Certificate issuer:       /CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
Certificate serial:       3781484694D1F6CB1D39DF8F4CB3F1D3621A8A15
Authority key identifier: 09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa
Signing time:             Tue 04 Feb 2025 18:16:14 +0000
ROA not before:           Tue 04 Feb 2025 18:11:14 +0000
ROA not after:            Tue 03 Feb 2026 18:16:14 +0000
asID:                     209588
IP address blocks:        179.60.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:48:46:94:d1:f6:cb:1d:39:df:8f:4c:b3:f1:d3:62:1a:8a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
        Validity
            Not Before: Feb  4 18:11:14 2025 GMT
            Not After : Feb  3 18:16:14 2026 GMT
        Subject: CN=B490D3272158805E53F74A7917CB78F0B54042DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ba:e0:7a:c9:7b:1c:eb:52:28:76:19:24:63:
                    b1:6f:ad:dd:3d:5e:9f:e1:5c:1f:1a:69:16:de:f4:
                    ce:ed:42:c5:11:6d:51:91:8b:f5:01:10:ee:f8:41:
                    2a:14:5b:cd:6d:25:fb:88:12:02:b9:53:80:a6:03:
                    83:87:b5:c5:46:59:6e:bf:70:d9:a7:5d:b2:c6:53:
                    2e:cd:d8:81:9b:c8:e3:55:f1:de:3e:68:2b:6c:38:
                    15:b1:6d:bb:d0:d9:bf:8a:c5:cf:91:c8:41:6c:ef:
                    75:63:42:df:39:d5:a6:26:8b:f4:f7:bd:d6:4d:93:
                    cb:4d:61:be:a1:84:d6:21:23:42:b2:26:ef:33:4d:
                    ad:48:1a:71:b6:ee:61:79:bd:12:09:25:9c:cf:f9:
                    94:18:65:ea:70:7a:14:ae:42:41:28:cc:80:b8:c0:
                    27:5b:16:a1:7f:96:b5:11:85:20:9d:b1:d6:00:8c:
                    41:06:37:b1:d2:87:01:91:79:6a:cc:3a:e8:e5:35:
                    88:4e:52:e8:d2:3b:90:79:9b:22:1e:b8:86:dd:3d:
                    d8:c6:e7:14:aa:30:6d:44:33:76:55:cd:b8:1a:e4:
                    24:9f:0f:9b:b7:d1:d6:ed:a5:ae:15:ee:b2:da:3e:
                    a2:ba:ad:38:42:3e:78:af:11:68:bb:b7:e1:5d:d8:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:D3:27:21:58:80:5E:53:F7:4A:79:17:CB:78:F0:B5:40:42:DE
            X509v3 Authority Key Identifier:
                keyid:09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:82:17:1d:cd:5d:4f:89:1d:c1:9c:d7:7e:0d:c9:a7:80:b4:
         0b:07:f2:fe:d4:11:4c:98:c6:00:c6:cd:e9:da:e2:51:ab:48:
         dc:d7:a3:9a:71:a8:3b:0c:a4:46:12:33:a1:73:2c:a8:93:3b:
         50:5f:eb:25:e3:96:d4:1d:fe:2a:46:9e:eb:04:24:28:47:35:
         ff:7f:11:67:2b:b2:7e:cf:dc:19:6b:30:e4:70:11:50:0a:43:
         41:47:56:33:7b:62:e3:21:bb:a0:5a:18:44:3f:8e:4b:26:19:
         37:6a:88:48:51:06:de:0c:a0:93:d2:95:68:00:0f:8d:30:97:
         38:27:6b:64:62:85:b8:42:b1:65:47:19:f7:2c:6e:06:19:e7:
         bc:da:31:9b:eb:ac:b1:7f:c8:4c:cf:91:a2:73:23:55:87:19:
         92:44:dd:f8:da:39:73:a5:80:d5:3d:c1:53:69:e1:dd:60:24:
         6b:6d:eb:79:f2:77:10:ba:dd:05:37:c8:40:82:68:00:2b:08:
         dc:4f:97:3e:eb:14:ce:19:e2:a6:e1:fe:16:18:12:57:8e:36:
         a4:f3:53:78:2c:39:d7:29:b3:23:31:45:66:91:83:c0:c8:48:
         0d:e6:21:59:d4:b0:67:aa:e2:23:0c:ca:9f:7c:e5:19:22:93:
         74:ad:44:7b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUN4FIRpTR9ssdOd+PTLPx02IaihUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlFRDY5NjUwODBFQjUzOUU1RUYwREFGQ0U0NDhFQUI4
RDQxQ0ZERTAeFw0yNTAyMDQxODExMTRaFw0yNjAyMDMxODE2MTRaMDMxMTAvBgNV
BAMTKEI0OTBEMzI3MjE1ODgwNUU1M0Y3NEE3OTE3Q0I3OEYwQjU0MDQyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2uuB6yXsc61IodhkkY7Fvrd09
Xp/hXB8aaRbe9M7tQsURbVGRi/UBEO74QSoUW81tJfuIEgK5U4CmA4OHtcVGWW6/
cNmnXbLGUy7N2IGbyONV8d4+aCtsOBWxbbvQ2b+Kxc+RyEFs73VjQt851aYmi/T3
vdZNk8tNYb6hhNYhI0KyJu8zTa1IGnG27mF5vRIJJZzP+ZQYZepwehSuQkEozIC4
wCdbFqF/lrURhSCdsdYAjEEGN7HShwGReWrMOujlNYhOUujSO5B5myIeuIbdPdjG
5xSqMG1EM3ZVzbga5CSfD5u30dbtpa4V7rLaPqK6rThCPnivEWi7t+Fd2HaXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtJDTJyFYgF5T90p5F8t48LVAQt4wHwYDVR0j
BBgwFoAUCe1pZQgOtTnl7w2vzkSOq41Bz94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85ODI5MzExQjBEQUVCMTg4ODBGRkM5NkM3N0Q4Q0YwN0U5
NTMxQUU0RTc5QjBCMjNGQzBFRDE2RkU1NDVBRTBELzAvMDlFRDY5NjUwODBFQjUz
OUU1RUYwREFGQ0U0NDhFQUI4RDQxQ0ZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOUVENjk2NTA4MEVCNTM5RTVF
RjBEQUZDRTQ0OEVBQjhENDFDRkRFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTgyOTMxMUIwREFFQjE4ODgwRkZDOTZDNzdEOENGMDdFOTUzMUFFNEU3
OUIwQjIzRkMwRUQxNkZFNTQ1QUUwRC8wLzMxMzczOTJlMzYzMDJlMzEzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzUzODM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAszyT
MA0GCSqGSIb3DQEBCwUAA4IBAQAAghcdzV1PiR3BnNd+DcmngLQLB/L+1BFMmMYA
xs3p2uJRq0jc16Oacag7DKRGEjOhcyyokztQX+sl45bUHf4qRp7rBCQoRzX/fxFn
K7J+z9wZazDkcBFQCkNBR1Yze2LjIbugWhhEP45LJhk3aohIUQbeDKCT0pVoAA+N
MJc4J2tkYoW4QrFlRxn3LG4GGee82jGb66yxf8hMz5GicyNVhxmSRN342jlzpYDV
PcFTaeHdYCRrbet58ncQut0FN8hAgmgAKwjcT5c+6xTOGeKm4f4WGBJXjjak81N4
LDnXKbMjMUVmkYPAyEgN5iFZ1LBnquIjDMqffOUZIpN0rUR7
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:19:11 2025 by rpki-client