Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
File:                     3137392e302e3138352e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier:          GyxFFx9WeHLOISGCFimf+ZCvzgD2D8fDofNkKqZcvl0=
Subject key identifier:   5D:87:AA:0C:28:7A:61:0C:81:4B:02:A1:54:94:28:3D:8A:50:CA:9A
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       456077E07713999A87EAF6FE5796FD2B9BE7741E
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
Signing time:             Tue 04 Feb 2025 18:02:04 +0000
ROA not before:           Tue 04 Feb 2025 17:57:04 +0000
ROA not after:            Tue 03 Feb 2026 18:02:04 +0000
asID:                     270047
IP address blocks:        179.0.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:77:e0:77:13:99:9a:87:ea:f6:fe:57:96:fd:2b:9b:e7:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Feb  4 17:57:04 2025 GMT
            Not After : Feb  3 18:02:04 2026 GMT
        Subject: CN=5D87AA0C287A610C814B02A15494283D8A50CA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:a6:ec:cd:e1:ab:54:1e:5a:dc:04:0f:f8:
                    1e:3c:c6:bd:76:49:43:5a:c6:d4:6b:7f:61:4f:bc:
                    35:93:c6:c9:46:09:f5:a8:ec:02:dd:a1:f1:3d:1f:
                    87:fa:d9:4d:95:56:05:9c:0c:34:db:4c:d3:52:27:
                    ef:04:57:35:ae:11:09:39:4f:c6:2b:8d:80:e5:ce:
                    19:2b:66:85:12:65:01:d0:ec:ba:34:db:9b:5b:7f:
                    81:3a:14:a1:9c:cd:1f:01:87:f4:29:85:2f:0c:30:
                    a1:d5:59:bb:05:56:ca:5f:3e:49:37:c9:52:6b:5e:
                    d4:56:0f:e2:c7:54:ef:04:ad:79:a8:62:12:72:e3:
                    ff:24:cc:4c:be:4a:fe:6c:88:20:3e:6f:c5:5d:ef:
                    0c:30:00:31:54:63:33:d9:c1:39:c8:aa:b2:cb:74:
                    af:2a:3f:7d:a2:a8:13:20:e1:d2:0c:bf:05:fb:01:
                    5f:8c:fc:27:30:65:3b:9c:e9:f8:5d:dc:9c:26:a5:
                    ca:21:a7:cb:4c:fe:f4:2d:16:5b:c7:6b:87:d5:49:
                    eb:82:9b:d0:ab:b9:3c:08:94:4e:27:3b:8f:84:e8:
                    4c:5e:2d:66:0a:ab:1e:74:5b:5c:3a:3a:0e:18:d3:
                    73:1b:45:5e:09:77:76:ae:d5:5e:ce:b0:45:55:ac:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:87:AA:0C:28:7A:61:0C:81:4B:02:A1:54:94:28:3D:8A:50:CA:9A
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:47:69:61:d4:a3:c2:c6:7f:86:6b:50:fb:c4:bd:80:72:
         71:9b:b3:5e:1a:ad:b0:33:98:f5:a0:29:32:39:d8:9f:80:0c:
         fb:cd:b1:5e:ba:b9:c5:8e:6c:de:4c:4f:ae:29:e1:c2:ed:19:
         f1:13:5c:84:d3:ff:be:c6:02:95:19:e7:49:97:16:ee:da:43:
         d0:04:6d:c5:e7:71:49:6b:03:d6:76:cb:f0:11:c8:f8:5a:dc:
         ff:cd:2d:6c:81:b0:8d:a3:fd:33:1e:de:c2:ef:ef:e2:7d:35:
         8e:e3:a2:07:31:51:8b:7b:f8:82:ae:ab:bc:5b:92:38:97:1a:
         fc:51:2f:d5:d1:fe:61:3e:9b:9f:fd:b1:e0:91:05:3c:66:5b:
         b4:04:89:6e:e6:0e:c1:09:2e:4e:b3:18:54:0b:e7:bf:6f:b7:
         43:be:3c:f8:ad:90:6a:de:35:f3:b5:c1:0b:76:89:89:da:a0:
         2d:e3:c1:5c:0f:23:ea:ea:30:a5:36:bc:1a:49:ec:2e:9b:f5:
         e6:e3:84:0e:39:a5:0c:0a:d7:72:51:99:f8:a2:7a:2b:34:21:
         12:d9:58:7e:85:5a:8f:bc:05:81:65:4a:25:c8:59:3e:8f:63:
         15:23:1c:6f:25:a8:10:cf:e0:e8:84:ee:52:c1:cd:06:54:33:
         1b:16:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:29 2025 by rpki-client