Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35362e302f32342d3234203d3e20323633383035.roa
File:                     3137392e36302e35362e302f32342d3234203d3e20323633383035.roa (raw, json)
Hash identifier:          l4CjdEl1yGnDuHd/wJKz4ZA2iWrWy/UmeC3vLbR0yUw=
Subject key identifier:   41:B4:53:05:5C:8E:F4:8D:F7:B6:F0:1E:1B:96:25:03:38:78:F5:F9
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       2E597DB27005D7F6413BE8E9D3EDEDC57A201C38
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35362e302f32342d3234203d3e20323633383035.roa
Signing time:             Thu 03 Apr 2025 14:05:00 +0000
ROA not before:           Thu 03 Apr 2025 14:00:00 +0000
ROA not after:            Thu 02 Apr 2026 14:05:00 +0000
asID:                     263805
IP address blocks:        179.60.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 12:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:59:7d:b2:70:05:d7:f6:41:3b:e8:e9:d3:ed:ed:c5:7a:20:1c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Apr  3 14:00:00 2025 GMT
            Not After : Apr  2 14:05:00 2026 GMT
        Subject: CN=41B453055C8EF48DF7B6F01E1B9625033878F5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:65:8d:6c:d5:e6:a4:45:a6:63:13:20:b3:
                    49:ca:d9:ec:91:bb:39:d8:98:33:bb:b5:a0:bc:7f:
                    8e:12:d1:c8:ba:bb:44:3e:32:d8:a5:3f:e0:03:07:
                    fb:bb:66:34:43:58:1d:63:e6:7a:23:b7:bd:66:df:
                    db:cd:c6:7c:9d:ba:fc:e4:52:21:28:fa:c2:c1:28:
                    52:b4:e0:35:1f:ea:46:e8:de:de:fb:cf:aa:67:5a:
                    45:21:03:69:5b:1d:e0:2d:df:94:93:c2:5c:4a:e0:
                    6e:5c:62:b0:e1:c5:bb:c9:06:1c:6a:53:aa:7d:30:
                    b4:0d:23:66:62:31:8c:7b:a1:20:cc:3c:d4:47:e2:
                    2e:1f:1c:37:dd:3d:6f:f9:b5:d3:0e:02:8f:ae:80:
                    d0:ca:4a:79:df:26:2b:a4:9f:28:db:e4:2a:1c:0b:
                    00:9a:fe:45:5b:ae:02:35:a0:7c:4a:c4:b3:6d:28:
                    1d:33:31:7f:5f:31:31:07:bb:89:05:25:17:ae:d8:
                    fa:bc:7f:1e:40:3a:6b:ea:7b:7b:41:e3:d7:16:41:
                    cd:d3:0f:6a:82:20:95:61:0a:8d:83:c2:56:11:db:
                    21:af:f5:f1:43:fa:ce:38:72:9f:98:b5:b1:83:c8:
                    1a:bd:9a:fc:71:5e:13:f4:a9:cd:88:c3:6a:96:c0:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:53:05:5C:8E:F4:8D:F7:B6:F0:1E:1B:96:25:03:38:78:F5:F9
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35362e302f32342d3234203d3e20323633383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:ce:9b:b1:e8:57:2b:bc:fc:6d:73:85:2d:0b:94:fe:81:
         8d:d8:37:ba:15:3d:01:34:3c:59:6f:6a:6b:5a:14:f5:b7:2d:
         32:52:b0:52:40:30:da:a8:b4:1a:b9:cb:5d:44:a0:a1:f6:75:
         3a:69:04:34:96:0a:47:ba:25:25:5b:7a:8d:9c:ab:31:3f:e8:
         17:f7:22:57:d2:07:ee:3c:50:7f:b2:ba:8c:a8:3e:5f:2c:fb:
         a3:e2:86:c5:76:32:1a:f0:8d:7e:24:61:ae:66:99:51:bd:d4:
         4c:4a:f7:77:0c:4f:6a:56:b8:6b:63:94:00:ec:88:83:5b:69:
         28:a8:e9:bf:00:9b:e1:31:76:46:82:a4:3c:ae:4b:88:98:98:
         0a:af:51:64:8d:17:0b:e7:e7:b7:fd:f9:8c:34:64:09:56:3b:
         f0:15:0b:1c:29:ed:da:3d:67:4e:e3:ba:d5:2c:03:6c:4a:48:
         47:15:d3:43:a2:9a:65:9c:ac:3f:51:51:bd:2c:66:96:6d:1f:
         42:09:94:7d:f1:63:85:f6:8d:ee:45:e9:47:97:a7:48:d1:a6:
         26:ab:72:d9:84:b2:66:57:58:05:55:36:88:69:16:52:f1:95:
         62:f6:e4:79:da:9f:b5:90:75:cb:ab:31:72:06:f6:c1:85:f6:
         da:7b:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:13 2025 by rpki-client