Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39332e302f32342d3234203d3e20323633313835.roa
File:                     3137392e34332e39332e302f32342d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          2sDtL3MRN6kub4ji8otgsTfmIFxF1YC310gc1PX+27s=
Subject key identifier:   C5:85:8F:5E:DD:75:8B:AA:09:A2:F2:18:52:D3:68:94:65:A1:4F:68
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       45C77B00E0AC17D2C8A498710D8D71EF95E7B6E3
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39332e302f32342d3234203d3e20323633313835.roa
Signing time:             Tue 04 Feb 2025 18:11:51 +0000
ROA not before:           Tue 04 Feb 2025 18:06:51 +0000
ROA not after:            Tue 03 Feb 2026 18:11:51 +0000
asID:                     263185
IP address blocks:        179.43.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c7:7b:00:e0:ac:17:d2:c8:a4:98:71:0d:8d:71:ef:95:e7:b6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Feb  4 18:06:51 2025 GMT
            Not After : Feb  3 18:11:51 2026 GMT
        Subject: CN=C5858F5EDD758BAA09A2F21852D3689465A14F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:26:47:2a:32:70:cf:c6:0e:55:e9:f3:05:
                    07:9b:b2:a1:ff:80:65:4d:d5:dd:52:4e:ef:f7:b8:
                    c8:9b:13:4d:6b:26:49:ee:b0:5a:da:aa:7e:f0:91:
                    ef:36:7e:f0:cb:93:64:77:7d:31:e1:7a:09:35:fd:
                    43:c3:e0:85:9e:f5:26:2d:03:e0:09:b3:06:88:2b:
                    06:d6:e3:19:c9:c4:b8:3f:a9:46:67:43:b4:63:98:
                    ba:bd:6b:ab:06:06:49:65:21:1e:34:62:ef:e6:ee:
                    fc:e1:07:61:b6:ee:c0:8f:bc:9c:9b:c9:dc:d4:5f:
                    58:b5:8b:54:9f:3c:12:39:f7:21:52:c4:18:4a:11:
                    39:76:68:95:c9:86:68:41:d5:33:0f:f6:1b:47:6f:
                    58:b5:4a:ed:1e:22:c1:1d:72:41:33:21:1e:21:c4:
                    f8:50:22:0d:c2:f5:da:a3:5a:68:16:5b:c1:55:3a:
                    3d:54:d5:11:a6:ca:0d:1c:49:39:6c:a5:22:fd:ce:
                    6a:a3:2a:4b:39:c8:71:66:db:84:d1:3c:ad:3f:a6:
                    3a:89:ef:06:e7:9f:77:1e:36:18:d7:1e:0b:f4:6a:
                    76:ff:fd:83:cd:9b:ed:e1:54:45:75:6b:51:27:fd:
                    79:e3:60:b8:57:49:85:07:19:c7:9b:15:86:eb:44:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:85:8F:5E:DD:75:8B:AA:09:A2:F2:18:52:D3:68:94:65:A1:4F:68
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39332e302f32342d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:ab:58:48:79:b6:95:d3:32:be:1b:fc:ff:35:f9:31:ca:
         b1:e8:b8:6e:42:d2:12:40:68:63:5b:cc:19:87:00:f6:a3:2f:
         a0:02:1e:b2:24:df:a0:f7:a4:d5:22:e5:28:b2:51:98:b6:3a:
         db:24:33:37:f2:ca:22:ce:b5:50:b5:c6:94:7d:1c:0b:03:c4:
         93:e1:4d:ad:8c:d5:51:28:a1:04:5d:3f:b7:5b:18:d7:73:c6:
         ed:c1:73:54:5c:0c:83:bb:db:be:96:25:28:3b:48:1b:63:8b:
         59:2e:fe:f7:07:e6:6c:58:85:f1:4a:a8:3c:0b:8f:7c:42:ed:
         be:65:ea:e7:12:ad:51:26:df:80:7d:98:06:e9:a5:f5:e3:9e:
         c4:1e:53:3d:f8:32:81:cf:d5:31:99:5a:dc:23:66:94:fc:c4:
         c2:e3:09:28:30:8e:70:5d:df:c4:93:12:63:73:bd:54:c2:92:
         3b:24:dd:16:dd:98:67:17:d5:a8:44:ad:61:ed:1b:41:08:9c:
         00:e9:60:2e:a8:04:e3:31:ab:c0:cf:30:28:aa:c4:4b:a5:1f:
         9e:d9:9d:d7:a7:b8:04:c4:df:f2:0b:37:99:7e:0a:56:cd:ab:
         a7:18:68:23:bb:a5:22:0e:af:98:2f:c5:29:e4:09:e7:9a:46:
         94:ba:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:48:17 2025 by rpki-client