Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e2037343138.roa
File:                     3137392e382e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Z6fjBl+PYAGZkHPr1y2XwLMWQ90Jr3NS60dRMDu5gak=
Subject key identifier:   88:EA:30:73:CE:5D:D1:78:68:63:3A:71:B5:89:AD:80:C3:15:FF:D0
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       74683B5D6607FE59DE5501F9E9022BF9939E8AF7
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:08 +0000
ROA not before:           Tue 05 Mar 2024 17:47:08 +0000
ROA not after:            Tue 04 Mar 2025 17:52:08 +0000
asID:                     7418
IP address blocks:        179.8.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:68:3b:5d:66:07:fe:59:de:55:01:f9:e9:02:2b:f9:93:9e:8a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:08 2024 GMT
            Not After : Mar  4 17:52:08 2025 GMT
        Subject: CN=88EA3073CE5DD17868633A71B589AD80C315FFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:d7:83:36:82:c5:59:4d:fb:4f:44:bf:13:
                    88:b1:7e:17:35:a8:30:a4:86:7d:3e:db:39:d5:ab:
                    6a:3e:ce:2a:40:60:33:1c:f9:35:96:5c:a8:e3:77:
                    92:d3:08:91:54:2d:59:a3:24:13:1c:da:60:75:a5:
                    a3:45:2a:e4:76:c6:9e:ab:b5:88:46:1c:de:55:b2:
                    47:33:4c:10:00:4d:14:ce:ba:7e:c6:94:6e:38:e8:
                    c9:87:7a:77:76:37:f3:96:c1:81:c5:ff:e4:bb:ff:
                    31:a1:f7:1e:05:ea:ba:cd:2e:a0:76:6e:b9:e6:7b:
                    2a:79:95:f4:2c:59:c4:8b:d2:6d:05:cc:ad:3b:29:
                    49:cd:0d:8f:6f:ba:e6:a9:a6:1e:7b:97:71:0d:2d:
                    64:62:4d:41:09:2e:e7:bd:62:df:c7:aa:63:19:bd:
                    e4:ff:f6:83:fd:80:b2:f1:bd:39:9f:84:00:ca:7e:
                    ca:da:4d:97:1e:42:31:51:91:bd:e5:a3:2c:53:5c:
                    23:a9:00:03:79:24:9c:06:0c:fe:97:04:b8:82:e4:
                    a5:be:b2:80:fd:e8:50:82:16:a9:18:cf:57:9c:b5:
                    31:ce:81:92:6d:bc:9d:d0:e2:c1:e3:22:3c:e5:19:
                    b0:61:79:50:14:87:aa:1b:fd:22:9a:52:75:60:61:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:30:73:CE:5D:D1:78:68:63:3A:71:B5:89:AD:80:C3:15:FF:D0
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         be:be:51:3d:a1:75:c6:d5:31:08:b8:f7:9a:c7:38:2d:e0:b5:
         55:6c:1c:0a:e5:2c:dc:bb:f2:36:ac:91:27:66:cd:ad:d2:9a:
         e6:ce:10:89:e2:e8:64:05:dd:f0:3a:a8:9b:eb:b7:ce:72:a6:
         5a:c9:a4:c8:19:91:c1:c1:98:b7:73:af:47:ec:7d:ea:7e:91:
         83:10:94:85:9b:64:15:28:38:8a:c2:25:8d:c8:3a:c0:c8:93:
         e3:10:41:c2:28:1b:de:12:b2:be:14:28:f2:a5:9f:8b:2e:31:
         17:79:1a:a9:79:5b:10:2a:df:1a:ea:42:2c:16:37:a5:c4:c0:
         7a:71:1b:10:f2:91:ce:0d:9f:b6:b5:8b:0f:95:09:cb:42:79:
         1c:ee:d3:de:0c:df:88:9a:75:10:f3:5a:4f:51:51:98:d8:57:
         48:fe:35:36:90:f6:64:0f:de:e3:f8:2b:61:86:df:4e:01:5e:
         80:e3:83:ea:dd:7b:01:90:d2:5e:f5:d1:9d:e4:67:9f:e7:23:
         2e:e9:00:50:cc:3c:4f:69:bb:67:f3:ba:79:31:83:00:2a:fb:
         2b:39:11:14:53:d3:f3:4d:2b:68:42:b6:cf:be:fc:c4:aa:4b:
         c5:47:9a:85:20:0f:ec:4a:6b:25:11:af:36:37:57:0c:fc:b0:
         76:82:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:11 2024 by rpki-client on console-fra.rpki-client.org