Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39352e302f32342d3234203d3e20323639383035.roa
File:                     3137392e34332e39352e302f32342d3234203d3e20323639383035.roa (raw, json)
Hash identifier:          vfYb/0bEon/rtJF8n0D91Qktd+e3USnAsMP+iqy6n8A=
Subject key identifier:   1D:8D:DB:10:F8:A9:FF:31:6C:5D:8D:CC:9D:22:05:03:D7:0B:2E:83
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       27226959CDA46C36573A172E5A04C7AAF7FCBB70
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39352e302f32342d3234203d3e20323639383035.roa
Signing time:             Tue 04 Feb 2025 18:11:51 +0000
ROA not before:           Tue 04 Feb 2025 18:06:51 +0000
ROA not after:            Tue 03 Feb 2026 18:11:51 +0000
asID:                     269805
IP address blocks:        179.43.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:22:69:59:cd:a4:6c:36:57:3a:17:2e:5a:04:c7:aa:f7:fc:bb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Feb  4 18:06:51 2025 GMT
            Not After : Feb  3 18:11:51 2026 GMT
        Subject: CN=1D8DDB10F8A9FF316C5D8DCC9D220503D70B2E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:20:a4:cf:63:ac:92:ac:c0:73:4b:df:b6:
                    c6:46:af:eb:5d:79:38:eb:06:a8:3e:e7:59:08:23:
                    48:6b:91:3c:a0:b5:04:a4:8d:9e:e2:1b:b2:4c:61:
                    53:7d:d2:a9:7a:42:ce:9b:cb:1b:29:14:65:6d:58:
                    fa:ff:dd:57:be:ea:c3:c4:55:b1:73:37:08:e3:8d:
                    77:11:b2:74:8b:09:d7:41:f8:ad:d7:fd:16:77:6f:
                    ce:78:64:54:05:b0:60:54:c7:b5:69:54:4a:29:72:
                    fb:e8:f7:9f:4b:90:b0:28:5c:53:c2:40:ce:b2:3b:
                    b6:99:1e:8b:83:0e:8e:47:d6:2b:00:4f:3f:38:49:
                    a0:79:ac:05:1e:28:f3:26:f1:14:d9:a8:10:c4:a5:
                    df:ee:36:d9:15:bb:e3:ef:f4:7b:d7:63:5f:a7:2f:
                    52:b3:25:da:b6:8a:9b:4c:b4:7a:39:19:5b:44:2f:
                    d2:14:78:93:6e:7d:f1:ed:40:03:0e:9e:38:2c:11:
                    07:d6:46:6b:b5:43:e9:8f:1f:ad:44:f9:a1:7e:80:
                    8d:73:6c:6a:b8:e8:07:d9:1b:5b:55:df:7b:ff:80:
                    fd:d9:59:3a:d5:23:c5:da:5b:1f:b7:29:99:92:19:
                    a7:69:4e:0b:9a:39:bc:7b:9b:79:18:5b:f3:4f:27:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:DB:10:F8:A9:FF:31:6C:5D:8D:CC:9D:22:05:03:D7:0B:2E:83
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39352e302f32342d3234203d3e20323639383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:b4:a4:b6:7e:33:34:80:19:7b:10:db:29:7a:36:44:eb:
         ea:a6:90:66:14:4c:69:b7:3c:d1:02:4a:e1:13:39:b1:9e:79:
         d2:f6:e7:e7:55:c4:70:7f:1c:86:32:1c:cb:8d:56:70:54:9c:
         7e:0e:ce:d7:5c:dc:51:52:73:a6:88:8b:18:2d:83:b9:5a:b1:
         39:c7:8c:b1:d6:7d:66:a4:25:bb:ec:57:0c:68:29:a0:07:67:
         0b:f0:6e:f4:17:cf:07:14:5a:7c:43:6d:8a:d6:47:a2:65:36:
         bd:9c:92:1e:bb:02:c4:8e:69:c4:a7:15:da:b7:61:11:15:68:
         7b:85:e0:87:3a:40:af:ae:7f:4e:82:1a:d9:e7:5e:73:f3:e7:
         4a:56:6b:98:74:03:f1:57:81:fe:33:68:ba:91:df:5c:10:58:
         8b:ce:86:47:98:4a:1f:a8:fd:79:89:a9:01:be:43:fd:48:3c:
         3c:83:ff:e2:e5:76:f9:20:a9:02:00:29:69:89:8d:93:d9:18:
         b0:60:d8:bd:84:c8:6e:3b:dc:e7:e6:75:79:e9:4e:b3:dc:e0:
         a6:59:bf:cc:a1:23:fc:bb:cc:af:89:60:62:87:91:b9:d9:a5:
         f6:16:71:f3:97:d9:a8:a5:f3:9b:12:45:fb:a6:e0:30:45:dc:
         35:64:e6:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJyJpWc2kbDZXOhcuWgTHqvf8u3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkzOUNCNUQ2RDU5MjgxQkE5M0M3NzRBOTY2ODQzQzUz
NjE5QzIwMjAeFw0yNTAyMDQxODA2NTFaFw0yNjAyMDMxODExNTFaMDMxMTAvBgNV
BAMTKDFEOEREQjEwRjhBOUZGMzE2QzVEOERDQzlEMjIwNTAzRDcwQjJFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOziCkz2OskqzAc0vftsZGr+td
eTjrBqg+51kII0hrkTygtQSkjZ7iG7JMYVN90ql6Qs6byxspFGVtWPr/3Ve+6sPE
VbFzNwjjjXcRsnSLCddB+K3X/RZ3b854ZFQFsGBUx7VpVEopcvvo959LkLAoXFPC
QM6yO7aZHouDDo5H1isATz84SaB5rAUeKPMm8RTZqBDEpd/uNtkVu+Pv9HvXY1+n
L1KzJdq2iptMtHo5GVtEL9IUeJNuffHtQAMOnjgsEQfWRmu1Q+mPH61E+aF+gI1z
bGq46AfZG1tV33v/gP3ZWTrVI8XaWx+3KZmSGadpTguaObx7m3kYW/NPJ9LrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHY3bEPip/zFsXY3MnSIFA9cLLoMwHwYDVR0j
BBgwFoAUmTnLXW1ZKBupPHdKlmhDxTYZwgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQkRDRENBNjlCMjJDRTkyMDJDMDkxNUI5MjIzODQzMjU1
OTU1QkVCODNGOUZCRTAyNUM0NUY1OTFEQUFDQ0M1LzAvOTkzOUNCNUQ2RDU5Mjgx
QkE5M0M3NzRBOTY2ODQzQzUzNjE5QzIwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTM5Q0I1RDZENTkyODFCQTkz
Qzc3NEE5NjY4NDNDNTM2MTlDMjAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUJEQ0RDQTY5QjIyQ0U5MjAyQzA5MTVCOTIyMzg0MzI1NTk1NUJFQjgz
RjlGQkUwMjVDNDVGNTkxREFBQ0NDNS8wLzMxMzczOTJlMzQzMzJlMzkzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMrXzAN
BgkqhkiG9w0BAQsFAAOCAQEAjL+0pLZ+MzSAGXsQ2yl6NkTr6qaQZhRMabc80QJK
4RM5sZ550vbn51XEcH8chjIcy41WcFScfg7O11zcUVJzpoiLGC2DuVqxOceMsdZ9
ZqQlu+xXDGgpoAdnC/Bu9BfPBxRafENtitZHomU2vZySHrsCxI5pxKcV2rdhERVo
e4XghzpAr65/ToIa2edec/PnSlZrmHQD8VeB/jNoupHfXBBYi86GR5hKH6j9eYmp
Ab5D/Ug8PIP/4uV2+SCpAgApaYmNk9kYsGDYvYTIbjvc5+Z1eelOs9zgplm/zKEj
/LvMr4lgYoeRudml9hZx85fZqKXzmxJF+6bgMEXcNWTmrw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:06 2025 by rpki-client