Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135322e302f32332d3234203d3e203532343934.roa
File:                     3137392e302e3135322e302f32332d3234203d3e203532343934.roa (raw, json)
Hash identifier:          CYmtTc9xvMCzZu4Nj417T90shlXtgVnnJAQNFQXQm9A=
Subject key identifier:   85:2B:A0:ED:33:BF:20:CA:10:9F:E6:12:3B:6B:FC:DE:EF:1F:DA:2C
Certificate issuer:       /CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
Certificate serial:       0124434B2E8D28F9B9846F3F2BA4169FFED4D6C4
Authority key identifier: 8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135322e302f32332d3234203d3e203532343934.roa
Signing time:             Tue 04 Feb 2025 18:11:32 +0000
ROA not before:           Tue 04 Feb 2025 18:06:32 +0000
ROA not after:            Tue 03 Feb 2026 18:11:32 +0000
asID:                     52494
IP address blocks:        179.0.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:43:4b:2e:8d:28:f9:b9:84:6f:3f:2b:a4:16:9f:fe:d4:d6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
        Validity
            Not Before: Feb  4 18:06:32 2025 GMT
            Not After : Feb  3 18:11:32 2026 GMT
        Subject: CN=852BA0ED33BF20CA109FE6123B6BFCDEEF1FDA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:84:c5:f4:36:39:d0:a4:26:7c:e7:68:97:
                    92:c9:a7:95:b6:2e:aa:0c:4a:8a:73:3b:ab:21:ef:
                    01:1e:b8:a1:b2:57:08:6d:09:4d:85:9d:2f:ad:18:
                    37:59:6b:71:7b:07:f9:3c:f3:4d:c3:43:9a:b2:2d:
                    59:2a:91:e6:c2:0f:3a:03:b7:56:89:50:62:c2:ab:
                    31:60:35:6f:7a:6a:9d:db:b0:1c:5e:df:82:e3:da:
                    55:36:34:f3:45:c5:55:a1:e1:00:29:3b:8d:fa:c5:
                    61:06:53:4e:d9:fa:2c:e7:83:c7:2e:7b:9b:40:d6:
                    eb:8f:e3:8d:ef:2f:17:ea:0a:a8:a5:18:00:36:e6:
                    82:34:fd:52:42:88:5b:84:aa:21:b9:0f:5a:37:cb:
                    00:eb:c1:fa:02:37:d9:84:82:8b:8e:1e:94:3f:1c:
                    ff:df:4c:88:5f:bb:c4:98:85:88:3d:01:f5:a0:b6:
                    00:2c:db:57:cf:a7:e8:12:94:c0:46:5d:9a:d4:1e:
                    99:d2:64:4d:bc:42:0a:5f:1d:2e:31:63:c1:35:6f:
                    bd:3e:15:46:a9:a0:07:c7:10:b9:ac:dd:f5:f5:e8:
                    e3:15:52:33:d6:4f:53:d6:f7:1c:0e:94:3b:9f:ca:
                    09:fd:bb:0e:b4:56:93:98:62:f5:a1:9c:fd:26:79:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:A0:ED:33:BF:20:CA:10:9F:E6:12:3B:6B:FC:DE:EF:1F:DA:2C
            X509v3 Authority Key Identifier:
                keyid:8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135322e302f32332d3234203d3e203532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:3e:ad:44:76:6b:a7:86:2c:1c:e8:76:04:16:f5:21:65:86:
         0f:36:7a:a2:49:76:81:c9:91:b4:c2:e3:fe:4e:03:42:df:1a:
         f3:86:66:d5:fc:ec:a3:92:35:a0:6f:f9:af:6b:01:70:9d:c2:
         b1:bc:3e:dc:51:a0:c5:c5:c5:ec:a1:84:4b:54:66:ab:4b:4a:
         7b:7c:b1:7c:13:10:5c:1d:7f:e5:ff:fc:a8:ff:fe:85:67:15:
         6f:01:08:51:63:ca:bb:0c:41:2d:bf:73:4c:d9:59:3c:80:97:
         68:8a:2d:7c:0e:d9:a6:61:cd:68:05:a8:f4:f3:3a:5f:1d:83:
         84:49:da:89:92:fc:56:f1:5d:4a:aa:53:b3:84:ca:87:51:c3:
         17:8b:c1:ed:33:14:0b:11:c4:83:be:4f:ee:eb:b8:cf:35:e5:
         fd:f6:06:af:1e:2a:94:af:39:d6:84:26:bf:ce:f6:4e:83:e3:
         8f:9d:d7:8a:20:10:e2:2c:19:11:a6:6a:b8:e4:79:7a:cb:10:
         71:1a:7b:cb:a8:d6:09:2c:9a:1d:a8:c8:ea:a0:ac:e2:bf:f6:
         97:9c:82:a6:4c:c1:51:1c:0f:aa:de:46:3e:ef:f5:c5:12:f5:
         09:c1:e1:61:0e:94:b6:32:4f:f9:a9:31:63:4e:b8:d3:7f:16:
         3e:3a:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:52:38 2025 by rpki-client