Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131332e302f32342d3234203d3e20323632323230.roa
File:                     3137392e35312e3131332e302f32342d3234203d3e20323632323230.roa (raw, json)
Hash identifier:          JGaILtb/fAhHDwA6nrGMwZvT8NFWxuWAxBzld2JEqGc=
Subject key identifier:   9C:94:B7:C8:0A:A5:6D:E4:E0:9A:02:89:6B:E1:FC:01:D4:71:13:58
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       6E85B2647490B191F6F34938C3847C8D1333C905
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131332e302f32342d3234203d3e20323632323230.roa
Signing time:             Tue 04 Feb 2025 18:10:58 +0000
ROA not before:           Tue 04 Feb 2025 18:05:58 +0000
ROA not after:            Tue 03 Feb 2026 18:10:58 +0000
asID:                     262220
IP address blocks:        179.51.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:85:b2:64:74:90:b1:91:f6:f3:49:38:c3:84:7c:8d:13:33:c9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:05:58 2025 GMT
            Not After : Feb  3 18:10:58 2026 GMT
        Subject: CN=9C94B7C80AA56DE4E09A02896BE1FC01D4711358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:b0:c4:99:c7:d1:46:22:91:6e:4f:dd:e6:
                    f0:9f:70:39:bc:a0:6e:9c:a6:fe:ef:f3:7a:84:52:
                    9a:67:38:a4:63:0a:a3:2f:84:fa:58:e5:f8:48:80:
                    d3:ef:52:fd:dc:66:69:95:dd:7a:45:8b:88:f5:79:
                    ee:c3:83:5f:d3:df:43:7e:bf:f6:ec:58:73:6a:73:
                    1c:5e:0d:e6:7a:db:05:84:c8:3c:82:fa:fe:2b:0f:
                    29:f8:32:1c:81:e3:11:1b:8b:3f:42:e6:f3:e4:dc:
                    c7:72:84:21:62:2b:00:be:09:db:a1:0e:1c:80:5b:
                    bb:1c:b4:ba:17:4f:0e:84:43:88:63:bb:dd:01:db:
                    20:c8:e7:8e:3f:fe:9f:ad:66:08:f4:71:f0:4f:bb:
                    36:27:ca:31:cb:e2:bb:a3:bd:e7:d9:ab:47:15:ca:
                    16:9a:e1:94:91:90:0c:0f:bb:95:76:6c:cb:75:81:
                    ac:15:9d:7c:47:e9:0a:12:f2:01:ad:41:6c:3c:33:
                    3e:cb:30:6c:92:77:28:2c:75:c0:df:e3:41:95:b4:
                    bf:6e:7b:fa:de:8b:f3:53:ba:9c:6e:46:cf:21:6c:
                    8f:bf:ad:d0:e6:d9:98:2a:3c:0c:b8:fc:a3:58:7b:
                    9e:8b:97:f0:51:f5:cd:63:66:b3:aa:40:43:6a:31:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:B7:C8:0A:A5:6D:E4:E0:9A:02:89:6B:E1:FC:01:D4:71:13:58
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131332e302f32342d3234203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:13:33:4b:7e:ee:b1:45:af:30:8f:a6:f4:f1:2b:48:72:
         f6:ce:e4:3b:35:d8:b6:b9:78:59:f0:c8:73:90:31:6c:0f:2c:
         24:11:4e:3d:ca:ef:58:e9:1d:5b:2a:1a:d9:c4:0f:7b:a7:73:
         cf:56:83:42:e1:5b:29:d6:74:de:bd:9e:1d:9d:db:a3:5f:a2:
         86:6c:0e:0e:12:40:c7:75:e7:fe:51:51:ec:6e:2a:c8:23:12:
         52:59:1e:10:f6:f1:8a:ce:26:fd:fd:bf:72:d1:c8:63:ff:64:
         6a:78:21:6a:e2:83:bb:5b:a6:b5:d0:77:56:26:09:7a:f5:fa:
         b5:f7:f3:cb:fd:45:77:c9:48:e8:71:46:98:e5:be:8b:9f:80:
         5e:db:85:01:ea:41:09:02:d3:d1:5c:38:c5:39:02:a7:c5:f8:
         47:07:3d:a2:56:f4:00:c2:2a:0c:87:e8:f2:25:c8:f6:7d:e4:
         fb:b2:3b:c6:4b:08:d7:50:04:68:db:3b:5b:49:78:34:93:99:
         47:75:66:46:d9:41:7a:74:79:0f:2a:51:9c:d7:4e:e7:ee:9a:
         ba:d6:52:92:12:be:e4:ee:a9:e8:da:9f:4e:e8:0b:7b:ba:77:
         b7:67:4b:f8:28:02:6f:b1:fd:d2:fc:d7:6a:90:a6:7b:51:3a:
         93:62:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:53:43 2025 by rpki-client