Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa
File:                     3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa (raw, json)
Hash identifier:          Cnl5INMClBgWCqWuQgLzpE8xYbNw1Bbn7iJ4DmA5UM4=
Subject key identifier:   DD:04:BD:91:5A:0E:F1:61:1C:2E:E8:D5:C2:FD:59:6D:46:CB:C3:7C
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       57228C9FE9E6286899F7CCBCF285AFF214145403
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa
Signing time:             Tue 04 Feb 2025 18:11:01 +0000
ROA not before:           Tue 04 Feb 2025 18:06:01 +0000
ROA not after:            Tue 03 Feb 2026 18:11:01 +0000
asID:                     262220
IP address blocks:        179.51.117.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:22:8c:9f:e9:e6:28:68:99:f7:cc:bc:f2:85:af:f2:14:14:54:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:06:01 2025 GMT
            Not After : Feb  3 18:11:01 2026 GMT
        Subject: CN=DD04BD915A0EF1611C2EE8D5C2FD596D46CBC37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:ee:d0:84:4f:65:07:f4:49:5b:65:ed:5f:
                    81:c7:7d:9e:55:42:a0:00:7c:ea:ea:af:58:f3:83:
                    37:9c:31:a4:31:37:ec:0b:6b:ee:ff:85:e6:1a:44:
                    de:8c:8a:38:7c:4e:b4:db:df:12:1f:92:4a:43:1e:
                    73:91:f9:2b:1b:b4:dc:41:8c:f4:47:1b:72:94:88:
                    50:0e:3d:d7:1d:2b:15:bf:57:40:5e:67:2f:3d:42:
                    83:cc:82:9e:03:96:d4:2a:f3:1b:bc:ff:ae:05:20:
                    77:40:1a:c2:4f:6f:c6:60:70:86:03:96:e4:1c:b0:
                    6a:30:9a:5d:18:49:ae:4b:b4:5d:cd:96:3d:39:94:
                    df:72:2d:67:85:af:60:d9:60:c8:90:11:96:05:ba:
                    6c:0b:47:fb:d0:79:ba:1c:5d:ea:f5:b3:36:2e:c9:
                    5b:96:25:21:15:bb:7c:13:93:f2:9a:7a:fb:2f:7d:
                    df:c8:d0:f6:95:f1:cb:49:13:b1:d5:db:f1:e5:7f:
                    67:a6:c9:bf:41:76:48:ef:bb:11:16:db:04:6a:2b:
                    c4:bb:c6:72:86:31:d2:73:b2:43:6c:12:18:31:e8:
                    ea:3d:9f:5d:bb:41:f5:9e:e2:5a:25:3c:bf:fc:ba:
                    9c:93:2c:90:8c:6a:51:a6:3f:2a:54:73:74:f7:ff:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:BD:91:5A:0E:F1:61:1C:2E:E8:D5:C2:FD:59:6D:46:CB:C3:7C
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:5b:c7:ce:8f:f7:c1:0a:e4:1a:a7:3f:64:41:ec:ae:5e:
         e4:6e:6b:b0:f9:53:b9:cf:3f:57:2d:1d:da:1b:19:32:3c:f1:
         6a:86:f6:08:f2:5d:66:8f:72:c0:bf:96:e6:fa:9a:02:d8:a9:
         e4:bc:a2:69:4a:5f:59:b1:b4:11:ec:c8:4d:78:73:cd:8d:12:
         74:c7:8c:57:4c:29:7f:f3:cb:a1:6f:99:5b:14:d1:4b:8a:23:
         bc:70:fc:fb:b3:36:6e:2e:79:7e:6e:0c:56:8b:c2:ef:69:82:
         00:29:56:2d:5d:57:9d:a5:93:0e:e8:3b:d5:d2:60:05:38:a8:
         a1:74:1b:82:77:e1:85:05:db:6f:95:d1:0a:e6:31:e4:30:64:
         62:71:f7:7f:a1:6d:40:96:e3:cf:c1:af:f1:c3:d9:36:cd:90:
         01:af:fb:e5:85:99:9b:c0:a4:d8:4f:e1:93:51:07:d8:01:df:
         b5:78:66:f6:f2:79:87:9d:42:3f:bb:69:4f:71:0c:dc:dd:33:
         56:cc:4f:32:9e:1f:d5:3f:25:a0:fb:4a:f8:22:7c:45:45:b1:
         c3:3b:58:f3:87:4a:ff:44:73:34:49:f0:23:78:d9:3b:7b:14:
         77:b6:30:b4:5d:ce:78:f8:d0:9b:34:e0:84:5d:00:c9:89:51:
         30:78:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:54 2025 by rpki-client