Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa
File:                     3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          nZJUmAL6Own9jsTy3IXaXnRkkOBaxIfY5iJYEIsADr0=
Subject key identifier:   BE:BC:CA:EE:32:1E:B9:55:17:87:CF:9C:97:B6:6B:4A:8C:F2:82:98
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       1A2172F374F5BC70A52B711FE810125AD9A1D8DD
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 18 Mar 2025 12:50:00 +0000
ROA not before:           Tue 18 Mar 2025 12:45:00 +0000
ROA not after:            Tue 17 Mar 2026 12:50:00 +0000
asID:                     263792
IP address blocks:        179.51.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 05:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:72:f3:74:f5:bc:70:a5:2b:71:1f:e8:10:12:5a:d9:a1:d8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Mar 18 12:45:00 2025 GMT
            Not After : Mar 17 12:50:00 2026 GMT
        Subject: CN=BEBCCAEE321EB9551787CF9C97B66B4A8CF28298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:21:29:55:5e:9b:3c:2a:0c:e7:43:58:13:
                    ee:80:52:d8:6a:96:44:dc:ad:2c:ba:c6:85:36:b7:
                    ab:0b:c0:9e:f6:5c:a9:08:1d:6d:cc:06:3f:5b:b7:
                    53:c5:e0:07:11:2a:c5:1a:46:b4:34:d7:b1:65:8b:
                    a5:37:32:4f:9b:19:20:21:76:56:08:a0:4b:3b:bc:
                    45:3b:28:4e:7e:90:72:28:68:58:cb:65:60:ec:98:
                    90:20:d3:42:9d:e5:69:ac:d4:22:a0:4a:20:2f:d9:
                    2c:97:42:d4:43:0c:24:8d:85:59:db:2e:85:c9:6f:
                    c8:ab:f7:5f:92:2c:3f:44:eb:97:10:41:10:df:56:
                    10:8a:54:a3:ca:f3:55:fd:ac:6d:72:82:ea:82:f9:
                    c1:65:7a:30:09:c9:89:3a:11:75:d3:70:6e:43:4c:
                    d8:e0:40:4f:a6:60:41:a3:de:f3:a5:16:7e:4a:d9:
                    64:76:57:ac:4a:d8:aa:2f:b4:f8:0d:22:d1:c4:8b:
                    63:2b:96:87:0d:4c:b8:12:ad:a8:4f:9b:5e:4e:ac:
                    64:6c:d8:65:fd:f3:88:09:dd:c8:78:4a:bf:96:39:
                    17:32:dc:86:66:c0:5f:3f:5b:5b:20:f4:d5:4e:0e:
                    05:c1:37:4a:2c:ba:f6:3c:de:29:b0:fb:20:de:0c:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:CA:EE:32:1E:B9:55:17:87:CF:9C:97:B6:6B:4A:8C:F2:82:98
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7b:cb:1a:75:b1:c0:0f:60:2a:d5:80:79:b3:e0:92:65:6f:
         9e:bc:b9:54:a4:84:33:d0:47:ae:0d:37:1b:4e:87:5b:ec:3e:
         96:8d:1a:e8:6a:2d:81:28:ee:8a:bc:91:01:9c:01:69:73:35:
         2b:4b:61:06:36:46:86:75:77:92:95:3f:64:73:8e:ef:0d:b1:
         61:ad:6a:7b:a2:3b:c1:21:84:b9:b5:fb:79:f4:88:3c:fb:c5:
         2c:11:ac:85:9f:d1:a7:4d:4d:ee:b2:b4:ae:90:a5:89:e1:23:
         ec:a5:fa:d0:90:ae:11:c9:6d:13:70:d3:a5:4d:c2:78:9b:82:
         14:e3:a8:60:60:32:21:d6:04:0f:e7:8d:dd:e0:aa:20:92:bf:
         8b:9d:51:cb:2f:9f:1b:4b:89:71:d6:6e:aa:0e:44:c5:79:b4:
         01:46:e1:ac:13:80:54:67:02:da:b1:64:07:e4:d0:03:74:4d:
         2c:c7:1f:ba:d3:b5:dc:df:e8:7a:ff:b1:58:83:aa:6a:d2:f3:
         0e:a9:fe:26:a4:e1:45:cc:16:5e:e1:85:e7:8b:de:9b:39:f2:
         c8:fa:96:b4:6c:3d:8c:fc:30:dc:20:50:54:71:f4:ba:74:4e:
         4c:c9:8e:b6:72:b9:c2:32:a5:b0:83:bc:96:c0:b0:67:e7:c9:
         53:dc:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:11 2025 by rpki-client