Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135352e302f32342d3234203d3e203532343934.roa
File:                     3137392e302e3135352e302f32342d3234203d3e203532343934.roa (raw, json)
Hash identifier:          5uOnljeeZHIWJ0qCn5H5kTd8akyMMWLyVHNzYRAgDHU=
Subject key identifier:   D6:A3:12:A7:25:C4:4A:8C:EA:40:FB:E2:86:36:EF:FD:A0:9C:3D:CC
Certificate issuer:       /CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
Certificate serial:       3A0A0A9C635D245E9D8FDAB5686C883C8684EF49
Authority key identifier: 8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135352e302f32342d3234203d3e203532343934.roa
Signing time:             Tue 04 Feb 2025 18:11:32 +0000
ROA not before:           Tue 04 Feb 2025 18:06:32 +0000
ROA not after:            Tue 03 Feb 2026 18:11:32 +0000
asID:                     52494
IP address blocks:        179.0.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0a:0a:9c:63:5d:24:5e:9d:8f:da:b5:68:6c:88:3c:86:84:ef:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
        Validity
            Not Before: Feb  4 18:06:32 2025 GMT
            Not After : Feb  3 18:11:32 2026 GMT
        Subject: CN=D6A312A725C44A8CEA40FBE28636EFFDA09C3DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:db:63:44:bf:fe:45:0c:5e:2d:64:e0:37:
                    b5:3a:36:bd:07:71:85:26:f1:77:39:e3:06:31:95:
                    56:0c:2e:a8:65:2c:74:18:4e:ad:84:49:8f:49:a8:
                    79:13:3c:38:ab:f7:77:c4:2b:c5:33:ab:ac:b5:0f:
                    71:5d:cc:e6:95:5a:60:99:ee:12:64:88:4a:64:ed:
                    13:5e:ed:d5:e1:af:7c:3d:93:b8:88:5c:f6:85:c0:
                    c1:18:65:be:e7:a1:61:a6:4b:6f:cb:1f:30:9d:38:
                    e3:0a:69:44:9c:11:8e:9a:29:fe:d7:e8:c7:18:42:
                    e3:14:60:c4:33:a9:31:17:8f:be:42:ec:23:5b:87:
                    0c:ae:2b:51:9e:a1:e9:27:32:a7:f9:d0:12:5f:59:
                    ad:e9:d6:09:49:b2:fe:79:49:e8:50:62:f9:b8:45:
                    13:22:f6:58:f3:8c:7b:be:e6:43:2f:dc:50:f1:80:
                    2e:0f:7a:91:d3:03:36:14:dc:6b:ea:05:c6:c8:93:
                    ba:90:06:06:e0:8c:15:f3:5a:2a:b0:f0:c9:76:ec:
                    34:29:6a:7e:f2:e2:bd:69:68:ad:af:58:8a:11:ea:
                    b9:b3:09:10:1e:8b:2f:e7:22:55:df:68:e4:77:8a:
                    4d:07:df:04:79:c1:5d:2b:1b:91:ce:b2:89:cf:0e:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:12:A7:25:C4:4A:8C:EA:40:FB:E2:86:36:EF:FD:A0:9C:3D:CC
            X509v3 Authority Key Identifier:
                keyid:8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135352e302f32342d3234203d3e203532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:8d:c9:df:f6:1a:ac:6f:4c:e3:65:5b:b6:9d:f9:51:52:
         83:a9:af:aa:89:27:d6:c8:4b:cc:83:8f:6c:61:a4:16:dd:1c:
         33:bc:37:2a:0a:2b:cf:e2:ad:7b:6a:cc:d1:9d:81:27:87:80:
         f2:4a:fd:5d:89:ab:6d:7f:fb:36:fb:4d:9e:96:c4:41:de:17:
         93:f5:8e:a4:1f:3f:2a:8c:72:e1:ee:9c:b7:09:34:81:ef:2f:
         07:09:9a:68:fe:6d:a1:2c:cf:2f:a4:9c:c0:d9:a9:a2:d0:bf:
         b1:4c:c0:fc:39:80:3c:f1:c7:4c:49:45:1e:f2:a1:fe:12:cd:
         71:b3:9d:f3:8c:54:dd:44:62:87:48:cd:39:76:5d:78:0c:4a:
         77:06:f5:64:fc:98:0e:50:bd:44:08:87:ac:92:e2:3e:1a:4b:
         f4:00:65:03:bf:e6:ed:7b:e2:ce:43:63:bd:30:0b:56:73:e9:
         b5:ff:13:88:b2:c8:6e:e9:7a:c9:b3:bc:10:ef:ca:11:93:3b:
         40:cc:f5:5b:0e:f9:b2:0e:6d:d6:11:82:47:0b:74:f5:e1:8d:
         f3:b5:24:ba:f6:7f:ca:9a:f4:56:fc:8b:2a:a9:f9:3e:29:5c:
         33:d2:a5:1f:79:ea:bc:bf:83:e0:0c:36:4e:1f:19:0e:21:ed:
         be:59:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:52:37 2025 by rpki-client