Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/3137392e302e3232342e302f31392d3234203d3e20323633323330.roa
File:                     3137392e302e3232342e302f31392d3234203d3e20323633323330.roa (raw, json)
Hash identifier:          oS4rn+I7EkUH6xKUXGWT/0oyLtrdl/mxfsVZHLHxQjI=
Subject key identifier:   9C:81:B5:88:49:50:54:48:5F:7B:58:73:8B:6A:E3:07:25:27:B4:5B
Certificate issuer:       /CN=4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D
Certificate serial:       233E8A65CB448F31F49E1B48580669D8EE7EDB4C
Authority key identifier: 4E:62:43:32:9A:D8:C8:7B:DF:0F:CB:10:92:F7:B8:AA:F0:B1:A8:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/3137392e302e3232342e302f31392d3234203d3e20323633323330.roa
Signing time:             Tue 04 Feb 2025 18:23:36 +0000
ROA not before:           Tue 04 Feb 2025 18:18:36 +0000
ROA not after:            Tue 03 Feb 2026 18:23:36 +0000
asID:                     263230
IP address blocks:        179.0.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3e:8a:65:cb:44:8f:31:f4:9e:1b:48:58:06:69:d8:ee:7e:db:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D
        Validity
            Not Before: Feb  4 18:18:36 2025 GMT
            Not After : Feb  3 18:23:36 2026 GMT
        Subject: CN=9C81B588495054485F7B58738B6AE3072527B45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:76:95:3d:ee:bc:05:6b:25:5a:0e:03:33:
                    bb:f2:c5:5f:66:69:66:fc:ce:d3:fe:13:ce:15:7b:
                    a3:89:d7:a9:f9:b1:5d:96:ab:f1:21:56:7c:97:4d:
                    92:7f:eb:5f:59:9d:78:b3:d9:7a:e8:d6:e7:e1:70:
                    1a:2a:c8:72:6d:9f:a1:b0:02:9d:7c:fc:7f:ec:60:
                    48:72:15:31:7a:3a:b7:f5:21:7c:34:af:88:2d:34:
                    8a:08:46:f0:8f:e7:6d:33:09:8c:ef:9a:a9:43:f2:
                    4a:5b:36:0a:ac:39:20:45:83:05:aa:cf:62:dc:5c:
                    e4:25:a0:ef:a4:f9:ac:8f:bc:7c:ed:a0:e5:17:d3:
                    cc:25:75:bb:0b:d3:2b:65:0d:48:ec:94:2b:33:f4:
                    e1:e2:fc:2d:51:e0:68:97:88:88:3a:f1:66:2b:df:
                    4a:fc:a4:bf:1c:16:08:22:7c:2f:34:da:d7:1d:b5:
                    74:06:07:5a:b0:bc:ab:73:0f:14:e5:86:71:48:b0:
                    77:8a:6d:b8:f0:75:78:b8:27:1e:6c:b6:86:9a:62:
                    5b:5b:83:81:28:97:34:67:35:29:55:05:19:b6:eb:
                    c6:b0:85:68:03:9b:0d:39:1b:12:ce:ff:c6:7b:9b:
                    34:8e:5c:9f:1f:82:57:c6:60:5a:3d:cc:3d:0b:db:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:B5:88:49:50:54:48:5F:7B:58:73:8B:6A:E3:07:25:27:B4:5B
            X509v3 Authority Key Identifier:
                keyid:4E:62:43:32:9A:D8:C8:7B:DF:0F:CB:10:92:F7:B8:AA:F0:B1:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/3137392e302e3232342e302f31392d3234203d3e20323633323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:63:76:06:7d:60:04:b3:42:9a:78:69:f8:82:52:e1:f8:f5:
         94:70:a5:15:4e:d8:99:9b:2a:98:86:69:2a:6b:ca:72:f9:b0:
         86:b6:26:cd:25:78:99:86:c3:a5:33:84:a9:4b:15:48:5e:56:
         91:de:23:db:54:64:78:0d:65:36:3d:61:dd:2c:1f:cf:d9:78:
         75:85:67:fa:ed:9a:e9:0c:2a:27:53:76:8a:b2:58:36:5e:93:
         b9:d6:e5:32:6a:64:ba:b9:65:f6:df:46:d5:4d:eb:3d:1a:55:
         04:76:87:d0:e1:28:63:2a:b7:f0:8d:e7:e1:4a:f5:38:33:d7:
         2e:30:34:ef:d4:61:24:1c:71:32:5a:b3:f3:64:2f:e2:f9:13:
         d7:b9:07:a6:29:92:44:d2:aa:10:ca:45:da:c8:0e:90:a7:0b:
         81:59:59:7c:99:b3:22:5b:e5:63:0b:61:32:e2:d8:5d:5f:10:
         21:1c:b8:92:fd:c6:bf:df:8e:b2:2a:9e:a4:84:d7:a1:13:35:
         2c:51:f3:95:5e:a2:40:f8:7f:c8:a6:9e:d4:29:34:f0:2e:46:
         9d:20:bf:20:ce:70:3d:72:2f:a1:4f:9d:85:36:be:ee:a9:03:
         62:d3:1b:1d:1d:85:d4:be:07:d2:9c:86:fd:dc:32:f0:8e:7e:
         f4:ad:1d:99
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIz6KZctEjzH0nhtIWAZp2O5+20wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU2MjQzMzI5QUQ4Qzg3QkRGMEZDQjEwOTJGN0I4QUFG
MEIxQTg3RDAeFw0yNTAyMDQxODE4MzZaFw0yNjAyMDMxODIzMzZaMDMxMTAvBgNV
BAMTKDlDODFCNTg4NDk1MDU0NDg1RjdCNTg3MzhCNkFFMzA3MjUyN0I0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmenaVPe68BWslWg4DM7vyxV9m
aWb8ztP+E84Ve6OJ16n5sV2Wq/EhVnyXTZJ/619ZnXiz2Xro1ufhcBoqyHJtn6Gw
Ap18/H/sYEhyFTF6Orf1IXw0r4gtNIoIRvCP520zCYzvmqlD8kpbNgqsOSBFgwWq
z2LcXOQloO+k+ayPvHztoOUX08wldbsL0ytlDUjslCsz9OHi/C1R4GiXiIg68WYr
30r8pL8cFggifC802tcdtXQGB1qwvKtzDxTlhnFIsHeKbbjwdXi4Jx5stoaaYltb
g4EolzRnNSlVBRm268awhWgDmw05GxLO/8Z7mzSOXJ8fglfGYFo9zD0L21qzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnIG1iElQVEhfe1hzi2rjByUntFswHwYDVR0j
BBgwFoAUTmJDMprYyHvfD8sQkve4qvCxqH0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQUE5Nzk2MzE2RTQ1MjE3RjYxMjgzMDUwRUYxODU1NTg4
MkJBMTkzMEVGMjgwMDk3MjU3NzIwNTZCODRGNzRDLzAvNEU2MjQzMzI5QUQ4Qzg3
QkRGMEZDQjEwOTJGN0I4QUFGMEIxQTg3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RTYyNDMzMjlBRDhDODdCREYw
RkNCMTA5MkY3QjhBQUYwQjFBODdELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkFBOTc5NjMxNkU0NTIxN0Y2MTI4MzA1MEVGMTg1NTU4ODJCQTE5MzBF
RjI4MDA5NzI1NzcyMDU2Qjg0Rjc0Qy8wLzMxMzczOTJlMzAyZTMyMzIzNDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbMA4DAN
BgkqhkiG9w0BAQsFAAOCAQEAFmN2Bn1gBLNCmnhp+IJS4fj1lHClFU7YmZsqmIZp
KmvKcvmwhrYmzSV4mYbDpTOEqUsVSF5Wkd4j21RkeA1lNj1h3Swfz9l4dYVn+u2a
6QwqJ1N2irJYNl6TudblMmpkurll9t9G1U3rPRpVBHaH0OEoYyq38I3n4Ur1ODPX
LjA079RhJBxxMlqz82Qv4vkT17kHpimSRNKqEMpF2sgOkKcLgVlZfJmzIlvlYwth
MuLYXV8QIRy4kv3Gv9+OsiqepITXoRM1LFHzlV6iQPh/yKae1Ck08C5GnSC/IM5w
PXIvoU+dhTa+7qkDYtMbHR2F1L4H0pyG/dwy8I5+9K0dmQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:02 2025 by rpki-client