Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134302e302f32342d3234203d3e20323633373932.roa
File:                     3137392e35312e3134302e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          +89hiWfERgyZbhBe09lsReCsfZN/hG80/u6Qq21VCVw=
Subject key identifier:   C2:ED:79:3E:F3:14:7B:A2:5B:03:2F:30:46:BD:D0:FC:04:FE:B4:9C
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       04FA7F4C7B63150F19DEC8FAFB2B34B9ADCEC400
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134302e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 18 Mar 2025 12:50:00 +0000
ROA not before:           Tue 18 Mar 2025 12:45:00 +0000
ROA not after:            Tue 17 Mar 2026 12:50:00 +0000
asID:                     263792
IP address blocks:        179.51.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fa:7f:4c:7b:63:15:0f:19:de:c8:fa:fb:2b:34:b9:ad:ce:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Mar 18 12:45:00 2025 GMT
            Not After : Mar 17 12:50:00 2026 GMT
        Subject: CN=C2ED793EF3147BA25B032F3046BDD0FC04FEB49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:d1:07:c4:da:5a:9c:0e:56:22:a6:93:05:
                    c1:6a:4a:77:19:3d:bd:cb:76:36:bd:f7:1b:ac:28:
                    82:6c:92:f1:81:a0:27:e0:b3:53:6f:19:c7:3f:cd:
                    7f:6e:fe:e9:13:0b:41:d0:8d:fd:01:72:44:46:4a:
                    f2:98:c1:91:d2:fd:b1:57:1c:30:72:b7:e3:86:39:
                    2e:2a:21:b8:a0:db:c7:98:91:f7:93:31:7e:dc:4e:
                    47:2c:d6:7f:f3:0a:4d:4f:33:83:a3:f1:70:e5:46:
                    5a:dc:b3:6b:7d:1e:60:80:6f:ef:e1:ed:9c:e3:03:
                    90:8a:c5:8e:83:5b:67:87:37:32:17:56:e3:79:59:
                    8a:9d:2a:fb:28:65:9a:d5:54:dd:0c:8d:a6:37:dd:
                    9d:d5:12:a9:4d:1c:90:30:c9:a8:c1:21:85:38:5d:
                    cf:41:1e:a3:3a:8f:e0:84:59:67:6f:70:c1:9e:3c:
                    16:11:9a:e3:7c:bb:9f:ca:5f:7b:f6:bc:d0:7e:25:
                    ff:79:8e:6f:5e:d7:39:ee:62:6f:e9:10:45:94:2b:
                    38:20:8c:76:1e:cf:7b:e0:b3:96:f0:70:01:e9:57:
                    41:1f:7d:15:69:79:e2:c0:48:24:c7:16:ad:1d:04:
                    da:fa:ca:db:28:96:74:0c:f6:d8:03:16:3b:9d:e4:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:79:3E:F3:14:7B:A2:5B:03:2F:30:46:BD:D0:FC:04:FE:B4:9C
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134302e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:76:b0:14:47:90:c1:f4:52:73:a5:59:81:ec:fb:35:9c:
         8e:14:28:7a:9a:ce:6a:a7:a9:2e:cd:bf:b9:d1:bf:88:53:ac:
         3d:65:8c:99:d2:b3:e7:29:ac:18:43:51:02:ce:e3:0b:ca:9d:
         d2:d1:96:2a:e8:58:52:07:8d:24:7f:3e:7f:f1:3f:ba:fe:70:
         7b:80:29:4e:27:5a:b2:55:16:6f:9a:ee:db:81:ac:cf:e0:4c:
         cd:dd:28:de:6a:57:61:1c:29:8e:a4:50:09:59:1e:21:b8:3e:
         bd:49:11:ba:92:e8:c9:da:2b:8e:ef:08:23:e9:29:a2:53:8d:
         72:b9:42:e0:aa:24:0e:db:21:1e:d9:e0:67:65:94:7a:c7:03:
         18:fd:29:c6:a1:39:fe:ee:24:02:27:94:3b:b6:1f:46:51:e1:
         03:07:d2:d6:b8:43:0d:cc:4e:d9:67:b2:18:90:bb:b1:fb:1e:
         bc:5d:fc:8a:e1:ce:f9:44:ee:5d:f0:14:12:52:f0:85:7d:77:
         72:1a:0e:45:a9:8e:56:a2:a9:32:61:d3:75:57:d4:a2:34:0d:
         fc:e6:de:08:3d:56:9e:7b:6e:32:2f:5d:47:ec:48:3f:6c:8d:
         77:98:5b:bb:1c:a7:0f:b2:fb:16:2b:47:d5:2b:36:95:34:b7:
         44:d7:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:16:01 2025 by rpki-client