Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135342e302f32342d3234203d3e203532343934.roa
File:                     3137392e302e3135342e302f32342d3234203d3e203532343934.roa (raw, json)
Hash identifier:          z2oRwzKWvPTVdYvKcgXiQZI8QqrrVfKmmcODWS8ur28=
Subject key identifier:   AB:BF:51:4A:15:BE:22:5F:C9:04:DC:74:05:EF:EC:67:50:DA:E3:6C
Certificate issuer:       /CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
Certificate serial:       56CB5ADB35A8919C80413FC234F6E01D3584EA85
Authority key identifier: 8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135342e302f32342d3234203d3e203532343934.roa
Signing time:             Tue 04 Feb 2025 18:11:31 +0000
ROA not before:           Tue 04 Feb 2025 18:06:31 +0000
ROA not after:            Tue 03 Feb 2026 18:11:31 +0000
asID:                     52494
IP address blocks:        179.0.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cb:5a:db:35:a8:91:9c:80:41:3f:c2:34:f6:e0:1d:35:84:ea:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
        Validity
            Not Before: Feb  4 18:06:31 2025 GMT
            Not After : Feb  3 18:11:31 2026 GMT
        Subject: CN=ABBF514A15BE225FC904DC7405EFEC6750DAE36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:fc:c2:9c:cf:35:2f:d6:ff:5a:1f:75:d2:
                    d3:37:77:04:b3:78:5f:1f:f0:6d:4c:41:c9:75:90:
                    f9:01:5f:dc:08:c0:32:ca:59:a6:2a:d9:41:66:1f:
                    46:10:ee:13:d8:e9:be:a4:8f:be:28:e5:07:88:01:
                    8b:3c:f3:1f:fd:82:0e:7f:42:34:67:93:aa:18:94:
                    28:17:82:6b:4a:f2:c0:7e:c2:fe:97:df:21:5c:ec:
                    89:6c:74:37:2b:9b:8f:7a:c9:e4:93:8a:8c:ed:a3:
                    06:ea:3d:1c:92:96:42:45:25:65:4c:69:24:12:81:
                    90:6e:2e:b2:8c:36:af:08:10:c2:db:26:3d:c9:37:
                    00:f7:92:7a:ab:f0:87:f0:18:98:e3:82:7b:34:e9:
                    35:f7:42:1f:4a:13:f9:e6:49:c7:ed:c9:76:95:03:
                    14:bc:09:57:21:70:62:b1:cc:69:28:a9:bc:84:93:
                    ca:f9:5e:9d:c4:21:50:86:47:bb:1e:b8:fa:fe:00:
                    ea:b8:16:cf:2c:70:ca:c1:37:60:c3:f0:93:58:c0:
                    65:18:cf:32:65:d8:a3:e9:01:5a:ea:4c:8a:f1:33:
                    b5:b2:4c:58:cb:5f:dd:97:9c:47:2e:15:38:2c:fa:
                    1d:f0:0d:34:81:90:07:3e:74:9b:f4:4a:a4:4f:fc:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:51:4A:15:BE:22:5F:C9:04:DC:74:05:EF:EC:67:50:DA:E3:6C
            X509v3 Authority Key Identifier:
                keyid:8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135342e302f32342d3234203d3e203532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:5f:7e:d7:93:3a:63:7a:81:91:6b:6b:2b:eb:f7:b2:17:
         1a:df:31:43:03:42:70:2b:15:91:b8:42:ff:47:0b:6d:18:27:
         02:db:6e:73:da:85:1e:3d:71:53:ae:1d:83:f1:34:84:c4:dd:
         89:07:b1:0d:2d:ab:2f:53:fe:cf:c8:36:2a:ec:a3:bd:44:63:
         3e:5c:13:aa:5c:9b:36:a6:aa:d7:f9:1e:a5:8c:5d:5d:81:0d:
         dc:15:33:3d:db:1f:c8:b1:21:5e:71:26:a8:88:8b:76:1b:7f:
         b7:5b:1f:c6:76:94:e6:27:d0:a5:cc:30:d3:62:9e:09:cd:88:
         72:04:e8:53:12:3a:06:1a:40:69:5e:aa:4f:18:c2:e5:ab:df:
         d4:5a:41:69:10:50:ab:86:8e:cc:c5:78:5a:97:91:98:ed:4e:
         94:99:00:10:d9:94:8b:40:64:03:a6:d2:7a:63:66:03:d8:eb:
         11:55:55:0d:fc:04:79:a2:c7:6f:de:54:a8:55:65:d8:fe:16:
         96:91:b8:3e:67:fe:e4:3e:2d:e5:2f:52:98:8a:1b:bb:d7:5b:
         e0:86:fb:49:12:28:f7:94:ba:55:66:be:56:9f:26:39:f4:f4:
         79:35:1a:95:c5:78:c8:c6:7f:bc:ad:dc:84:57:8e:18:1d:72:
         fa:b0:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:52:38 2025 by rpki-client