Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa
File:                     3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          P+N7KIq6ypIwyem7wcQZlrOF4DWhFwpIIlci4h/oPfA=
Subject key identifier:   C0:34:03:91:DF:59:02:D7:E5:9D:34:A9:4B:A6:35:BA:67:64:9D:B9
Certificate issuer:       /CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
Certificate serial:       42C7FFD337252159AF79AAD88FA54DC16E29AA0B
Authority key identifier: 09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa
Signing time:             Tue 04 Feb 2025 18:16:15 +0000
ROA not before:           Tue 04 Feb 2025 18:11:15 +0000
ROA not after:            Tue 03 Feb 2026 18:16:15 +0000
asID:                     395839
IP address blocks:        179.60.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:ff:d3:37:25:21:59:af:79:aa:d8:8f:a5:4d:c1:6e:29:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
        Validity
            Not Before: Feb  4 18:11:15 2025 GMT
            Not After : Feb  3 18:16:15 2026 GMT
        Subject: CN=C0340391DF5902D7E59D34A94BA635BA67649DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:cc:05:f6:ce:10:88:01:80:8e:64:87:71:
                    92:b0:d4:66:a0:7d:35:8b:e9:b1:d6:3d:e1:41:76:
                    42:e2:0d:04:20:5f:19:c0:2c:e2:43:53:9f:7f:65:
                    4c:c9:49:65:ae:4e:32:a2:b4:f4:a8:c7:d4:eb:de:
                    b1:73:d3:36:fb:c1:a4:34:dc:a6:00:a6:16:86:85:
                    8b:bc:ce:f3:c1:c8:d9:6e:37:64:e8:f5:e1:07:51:
                    5b:e6:b4:10:e1:f7:29:69:8b:39:0f:93:84:4e:03:
                    24:75:fd:40:9b:a7:bf:ef:d5:bd:8c:10:9d:95:18:
                    1e:7e:64:2d:65:cb:8f:4b:db:81:fb:9c:cd:30:00:
                    ea:a3:36:dd:00:0e:e7:7e:71:cc:c7:db:66:3d:45:
                    65:82:3c:35:92:70:56:47:ae:4d:2c:ed:5c:ae:6b:
                    cb:a7:98:95:0d:bf:3c:ee:e0:d6:9a:34:9b:18:34:
                    46:8e:9c:f8:7e:ae:66:10:21:cd:c2:d7:db:64:d9:
                    7c:d6:87:49:45:ec:22:43:a5:5b:e0:9a:1d:f1:7e:
                    04:74:4c:80:26:53:24:26:e1:6e:dc:86:a2:8d:2f:
                    c3:23:65:d5:86:87:cf:fb:7e:64:b1:6b:8a:ff:d4:
                    a1:ae:b0:29:2d:e3:b2:ae:f8:b3:41:71:fd:60:26:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:34:03:91:DF:59:02:D7:E5:9D:34:A9:4B:A6:35:BA:67:64:9D:B9
            X509v3 Authority Key Identifier:
                keyid:09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:71:a3:87:28:96:75:88:96:0a:7e:b4:88:2d:38:22:80:
         8f:9f:11:07:f5:05:73:6c:c8:02:56:4c:fc:c9:f8:d8:94:75:
         cc:55:e2:9f:3a:f6:6d:4f:9d:47:b5:12:b2:f7:3e:31:aa:df:
         6f:81:95:1b:7a:a8:1b:b0:d6:80:5d:ce:bc:82:b8:26:71:e4:
         fe:19:45:a0:0e:7b:eb:36:3b:7e:bf:26:19:9b:66:69:a1:d2:
         23:57:79:1f:ba:a6:aa:97:a1:cc:ba:0d:7a:45:05:22:d3:95:
         92:d2:72:38:c7:ca:8e:87:ac:92:a8:2a:a8:61:68:e7:16:a7:
         50:39:5a:ec:17:f5:64:e3:fc:cd:86:32:d5:f6:d5:f2:da:a8:
         15:58:ed:08:30:7a:78:8b:fb:94:e5:d1:6b:31:3b:50:ad:81:
         60:53:0c:e9:64:ec:68:97:d5:c6:81:01:36:00:1d:2c:cd:88:
         d1:19:42:b8:6d:60:1e:b7:de:ec:6f:27:5c:79:6b:a1:62:8f:
         ae:13:86:9b:96:b4:ae:61:ff:0a:fb:26:82:7c:eb:c5:4c:cd:
         b0:51:5d:9b:49:d9:6a:dd:38:96:78:59:92:21:74:bf:48:67:
         5f:59:42:40:bf:8e:ab:9c:ec:a9:d7:ed:e4:3a:1e:23:a7:0c:
         02:ab:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:11 2025 by rpki-client