Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35332e302f32342d3234203d3e203532343638.roa
File:                     3137392e36302e35332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          tJWnRb5eowxJncmo8LxGwbc/E8diLmCqTp86vBWztWk=
Subject key identifier:   DB:24:BD:0A:F7:06:1F:22:09:C6:3F:F3:BD:B2:E2:77:A6:29:D0:ED
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       05A47613062B8B6A67AD769EFA4E55E893028942
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:20:30 +0000
ROA not before:           Tue 04 Feb 2025 18:15:30 +0000
ROA not after:            Tue 03 Feb 2026 18:20:30 +0000
asID:                     52468
IP address blocks:        179.60.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a4:76:13:06:2b:8b:6a:67:ad:76:9e:fa:4e:55:e8:93:02:89:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Feb  4 18:15:30 2025 GMT
            Not After : Feb  3 18:20:30 2026 GMT
        Subject: CN=DB24BD0AF7061F2209C63FF3BDB2E277A629D0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:9f:3d:f8:04:03:75:6c:cc:d5:57:a3:9e:
                    95:5d:c7:fa:6d:18:72:b2:b4:9d:fe:c0:34:ce:de:
                    f2:f0:36:8b:32:6f:0d:b8:c4:6e:f3:44:e3:e0:50:
                    ae:d1:b7:f9:d2:2b:66:b0:11:86:21:1a:c5:d1:bc:
                    79:d3:21:8c:8e:5e:e9:48:f6:fc:7e:55:e3:dd:b3:
                    02:23:a6:b2:69:30:1f:5d:62:81:ad:59:8e:ef:aa:
                    26:06:05:c0:da:98:10:77:7c:9a:17:a4:1d:32:9b:
                    62:94:e4:98:36:3d:24:6b:54:13:38:fe:d8:48:0c:
                    c8:f3:c1:ba:4d:ce:42:c2:1e:b5:1e:6e:5c:6b:c6:
                    1c:89:ea:77:f1:b8:73:8f:42:a2:3b:d8:03:16:9c:
                    74:89:5c:19:cf:10:3c:d7:2d:1b:96:10:6a:05:aa:
                    d4:75:c1:a7:69:b5:15:98:ec:d5:62:a9:ca:c8:d8:
                    ef:d3:03:39:ae:94:93:9d:08:cb:ec:29:ec:96:59:
                    97:40:1f:66:c2:20:71:d8:7f:73:c4:f3:32:be:bf:
                    09:dd:e5:5a:76:04:d5:04:a6:6e:cd:20:e2:5e:ce:
                    1f:2e:d6:a9:54:55:b4:3a:6c:3e:02:dc:38:cc:88:
                    ea:0b:ad:52:5c:8e:23:a1:55:db:23:02:2c:ab:49:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:24:BD:0A:F7:06:1F:22:09:C6:3F:F3:BD:B2:E2:77:A6:29:D0:ED
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:46:2f:41:f2:f6:4d:3f:3b:62:72:f3:63:5e:4c:91:f4:85:
         0b:e3:72:da:c1:f0:1c:f9:0b:85:e9:f2:1c:31:b7:1a:1b:ff:
         ec:00:3d:2a:51:8b:30:3d:7c:90:3c:f9:09:38:86:fa:6a:a6:
         de:d7:af:a4:5c:51:a4:59:0c:9e:38:b1:a9:68:ab:d3:0d:ed:
         27:d4:1b:e8:14:f0:1c:17:94:ca:67:05:70:1f:45:9d:b9:97:
         22:a7:0d:80:1c:c9:c2:0f:98:aa:aa:64:45:ee:ed:5b:47:26:
         aa:9a:90:b9:be:04:f9:5c:8b:87:38:e4:a5:dc:15:75:f5:da:
         a4:a2:42:36:42:00:4e:f9:5e:4c:1c:1a:96:37:71:59:74:56:
         c9:33:e3:57:4c:e3:86:e9:79:52:7f:ae:0f:ed:a9:a6:31:55:
         73:4b:14:7e:c1:b8:66:59:c6:0d:af:20:8a:ea:ec:12:88:12:
         f6:41:54:4f:f4:06:62:f6:f5:56:c6:40:2c:30:0a:65:64:c9:
         31:c1:ce:f1:26:f1:59:c8:81:ea:a8:f9:be:69:c5:47:a3:4c:
         e4:2b:6d:c1:ba:52:17:f3:f5:49:08:4b:49:33:e3:35:fe:68:
         11:72:8e:81:c3:72:84:31:47:b5:64:2e:b8:80:c7:02:84:aa:
         dc:22:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:38 2025 by rpki-client