Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e39362e302f31392d3234203d3e20323633323130.roa
File:                     3137392e35312e39362e302f31392d3234203d3e20323633323130.roa (raw, json)
Hash identifier:          63jSviQ7p7IsDlntZcKyy9sE2S3Dbjk6YuB8flTtGMY=
Subject key identifier:   69:CD:7F:B7:0E:7C:DD:08:46:68:54:10:86:CB:83:A0:DB:67:85:D9
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       27BCB99CA30D0D004D587F50B57AB55DB8DA67B2
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e39362e302f31392d3234203d3e20323633323130.roa
Signing time:             Tue 04 Feb 2025 18:10:58 +0000
ROA not before:           Tue 04 Feb 2025 18:05:58 +0000
ROA not after:            Tue 03 Feb 2026 18:10:58 +0000
asID:                     263210
IP address blocks:        179.51.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bc:b9:9c:a3:0d:0d:00:4d:58:7f:50:b5:7a:b5:5d:b8:da:67:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:05:58 2025 GMT
            Not After : Feb  3 18:10:58 2026 GMT
        Subject: CN=69CD7FB70E7CDD084668541086CB83A0DB6785D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:b9:86:fb:41:58:e5:13:c1:bb:5a:3b:d0:
                    88:41:98:00:af:8e:27:a1:0c:2c:ec:c1:de:ff:f0:
                    5f:db:85:0a:be:94:e6:0a:c9:57:67:bb:df:b5:29:
                    5a:fd:9e:e3:90:1f:de:f9:f5:e8:0e:b9:e0:61:dd:
                    3a:96:7c:bc:89:96:44:44:90:94:f5:5d:5f:2b:65:
                    95:01:92:1f:c6:0b:ea:a1:4a:ce:79:28:13:b2:73:
                    ca:6c:cb:51:33:17:1b:a1:ec:d8:40:df:e1:cb:32:
                    fa:2f:b6:0a:56:76:a9:50:54:04:c5:85:e2:73:4d:
                    0d:96:b1:ee:50:08:cb:05:58:e7:72:e1:41:77:ef:
                    f3:25:14:ce:bd:69:5d:b8:4b:8a:3c:76:7f:87:86:
                    11:4f:5b:98:a5:64:76:41:bd:a8:bf:c3:48:e4:be:
                    3b:51:58:e5:6e:26:41:d2:a4:ee:c4:85:03:79:37:
                    d0:31:cf:c4:34:0f:66:62:23:f4:54:3c:08:7e:74:
                    39:e5:d5:55:38:fd:11:13:8a:39:fc:bd:ad:c2:2a:
                    81:8b:96:36:d7:d1:f3:e8:7e:15:9a:4e:69:12:31:
                    b6:aa:65:e4:6e:41:2d:49:96:c2:5c:2c:82:0b:14:
                    11:c3:9b:bc:8a:89:95:24:06:d0:b5:b4:9c:51:f2:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:7F:B7:0E:7C:DD:08:46:68:54:10:86:CB:83:A0:DB:67:85:D9
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e39362e302f31392d3234203d3e20323633323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:6d:37:3a:50:80:a6:74:02:b7:3e:b4:26:85:a4:bc:02:
         e4:0f:12:72:8d:d7:e3:e6:88:48:34:18:89:3f:50:b3:8a:fe:
         c7:7a:a0:3f:ea:cd:40:46:73:43:0a:f0:7a:e4:59:69:16:c7:
         ab:4b:27:e4:08:f2:8d:11:4e:ed:45:7a:fa:23:1d:c7:ca:5c:
         29:64:6c:b7:8b:27:50:c3:ad:d7:b0:60:aa:6d:79:02:83:01:
         ee:ce:3c:10:e5:8d:ea:79:f1:df:c5:20:4e:d8:73:c8:f6:2f:
         73:bd:e6:6a:e5:33:ce:87:c3:43:6f:dd:71:29:72:49:60:0c:
         0f:2d:f4:84:2a:6d:e3:58:52:21:33:de:14:86:13:bd:30:52:
         e6:0b:c9:ff:5d:b7:85:b3:ea:e8:47:18:e0:52:63:93:66:bd:
         2a:48:9c:fb:55:e7:d2:69:15:d5:7b:cb:93:75:c4:d4:41:9f:
         40:22:05:6a:8d:26:4b:f7:2c:5a:8a:eb:21:84:2a:ac:47:05:
         89:4f:c6:b8:c4:7d:3d:5e:41:4c:43:a3:be:23:67:96:8b:96:
         c5:50:a6:5d:ee:f4:6e:77:fa:69:70:27:12:68:d1:0d:94:24:
         7a:f2:ee:69:32:6b:3c:d2:2d:92:9c:73:b8:85:3f:2e:76:cb:
         95:88:c4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:44 2025 by rpki-client