Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38302e302f32312d3234203d3e20323633313835.roa
File:                     3137392e34332e38302e302f32312d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          HNxXBz3PJfZMQ+jmioco+BPL9RackFS3rau38NY04A8=
Subject key identifier:   11:84:11:7E:2E:8F:6A:E0:F3:16:26:95:7B:F2:88:17:E2:C1:4F:3D
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       7065B6799AE0B168A8CA7114D2E31C9D83857188
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38302e302f32312d3234203d3e20323633313835.roa
Signing time:             Tue 04 Feb 2025 18:11:51 +0000
ROA not before:           Tue 04 Feb 2025 18:06:51 +0000
ROA not after:            Tue 03 Feb 2026 18:11:51 +0000
asID:                     263185
IP address blocks:        179.43.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:65:b6:79:9a:e0:b1:68:a8:ca:71:14:d2:e3:1c:9d:83:85:71:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Feb  4 18:06:51 2025 GMT
            Not After : Feb  3 18:11:51 2026 GMT
        Subject: CN=1184117E2E8F6AE0F31626957BF28817E2C14F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:b3:3c:10:f4:6b:cc:35:43:39:ef:7c:e2:
                    b3:9a:89:b4:c1:80:69:21:4b:71:9c:e9:01:7a:91:
                    dc:79:46:7e:a3:ba:82:5a:b2:e5:21:b0:78:55:ac:
                    9d:68:1a:e7:0c:e7:69:6e:de:d3:cc:a9:ac:37:c0:
                    0e:b4:6e:9c:54:97:21:a1:d1:4e:24:46:26:e4:91:
                    64:2a:03:13:42:f2:65:87:19:36:8c:ce:b3:0d:af:
                    c5:97:64:f1:f4:ef:3d:9b:90:56:4a:7d:c7:07:31:
                    67:e8:ac:01:94:c7:43:38:57:33:42:70:21:f7:41:
                    5c:0c:d9:f8:fa:7f:0d:11:89:9b:f8:9a:b5:55:a1:
                    90:9f:29:f6:0d:46:ba:bb:89:f8:88:58:78:1f:cb:
                    9b:cb:a6:7b:df:09:85:71:f1:7e:18:a5:d7:b3:7c:
                    1e:45:f4:70:7a:ac:4b:8b:89:fd:63:c3:8b:9b:ae:
                    84:10:e5:e2:4e:6d:56:42:56:72:87:97:9d:c7:ee:
                    55:8c:5f:f6:d2:19:5d:b8:db:9a:39:2f:f0:bd:de:
                    15:98:07:b6:97:b5:77:fc:1f:52:e9:24:db:0e:47:
                    81:2e:4e:75:c4:1f:ff:3d:13:8e:ec:98:35:e6:83:
                    04:3a:a7:b7:1e:96:b3:18:4c:e3:83:cd:b1:1e:bd:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:11:7E:2E:8F:6A:E0:F3:16:26:95:7B:F2:88:17:E2:C1:4F:3D
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e38302e302f32312d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:98:37:bb:0b:5c:36:76:1b:e0:a6:de:cf:ee:1e:52:37:
         e0:46:cf:10:1e:18:79:e0:95:23:72:31:99:00:d4:5a:e0:1e:
         c5:7e:f8:b5:d2:79:3b:85:69:a5:41:1b:20:50:81:50:5b:94:
         ff:df:aa:da:e0:4a:3d:0b:13:40:54:25:8f:ed:c7:e5:36:97:
         60:79:19:25:97:9e:7d:57:68:d8:4a:5c:c1:2e:72:6b:cf:40:
         fa:71:d8:19:e2:18:2c:0c:38:15:aa:87:0f:5a:e6:39:f5:b5:
         94:91:bd:33:4a:6d:4a:0b:00:a0:f8:97:1e:cc:88:4f:a2:0d:
         99:15:8e:d9:8e:7e:2c:a4:26:87:65:cb:69:1e:7b:4a:8d:aa:
         d5:b0:74:4d:f6:fc:ba:36:b7:35:fc:5c:97:eb:ef:66:ac:7a:
         e3:76:d0:40:34:b9:37:17:f2:12:ac:50:1b:65:e5:1c:29:55:
         cf:4c:09:f9:19:55:d2:7a:2e:b9:33:4e:91:93:65:0f:01:c7:
         0b:85:72:71:f9:e9:f5:12:0d:84:47:6f:95:fa:88:c1:b0:93:
         46:80:87:3f:54:38:fa:88:7d:7d:c3:96:4c:b8:6f:99:87:ea:
         c5:c8:9b:a0:f0:43:36:db:67:5f:04:f9:9f:5d:de:28:16:0e:
         54:02:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:46:32 2025 by rpki-client