Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135392e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          d9YASWLcx4pHP0b1e1wVcb/HMfgl0pc76uFWMXRXFwY=
Subject key identifier:   66:2E:A9:59:63:33:7B:6B:7B:0D:6F:6A:90:3C:AB:72:1D:07:A1:32
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       0C98CC5B4727D7401B5F31C5BD6528901196D922
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135392e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 09 Apr 2025 14:20:00 +0000
ROA not before:           Wed 09 Apr 2025 14:15:00 +0000
ROA not after:            Wed 08 Apr 2026 14:20:00 +0000
asID:                     18678
IP address blocks:        179.1.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:98:cc:5b:47:27:d7:40:1b:5f:31:c5:bd:65:28:90:11:96:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Apr  9 14:15:00 2025 GMT
            Not After : Apr  8 14:20:00 2026 GMT
        Subject: CN=662EA95963337B6B7B0D6F6A903CAB721D07A132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:f1:b1:4a:38:e8:8c:c2:ae:97:7e:09:c0:
                    48:da:bd:e8:6b:b6:7b:f8:aa:77:12:a8:12:29:c6:
                    af:7a:ef:a0:75:af:61:f2:e7:61:69:bf:2d:d3:4a:
                    02:ae:2d:b5:d4:8f:98:24:78:7d:ba:80:41:54:21:
                    5e:e2:96:3a:6d:44:20:e1:f2:c6:1b:4e:5e:73:84:
                    c8:92:3f:1f:d2:14:dd:a5:fa:da:68:b4:57:0f:fc:
                    1f:65:93:ef:5e:bc:1a:89:f2:58:5f:fa:0e:95:44:
                    e5:73:06:49:4f:03:22:d8:a8:eb:91:c9:25:f5:41:
                    58:61:c4:b1:8f:ca:f6:00:39:a7:94:ef:f4:67:cf:
                    a2:6e:cc:94:47:1c:9b:aa:fa:ce:d7:3d:d7:4b:80:
                    7b:58:e5:3f:38:e8:7f:ad:7f:b9:9b:ad:2b:3a:d3:
                    ce:5e:61:df:fd:43:81:ff:66:b6:96:a2:0b:fc:30:
                    27:79:19:41:3a:8a:4d:15:e6:9b:34:66:0a:8b:0b:
                    e2:17:82:4c:a6:2f:bf:b4:74:7d:05:33:1c:2d:5d:
                    ef:f2:f2:d8:54:80:ee:2c:bc:39:44:8a:fe:5d:5f:
                    77:4f:ee:a9:8e:48:ff:fe:e9:0f:8c:8a:89:df:0d:
                    6c:cf:53:9a:09:cb:de:81:16:b6:3d:92:c9:eb:7f:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2E:A9:59:63:33:7B:6B:7B:0D:6F:6A:90:3C:AB:72:1D:07:A1:32
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:72:29:7f:d1:ea:b7:ba:63:61:89:c3:f4:dd:4c:c2:0b:
         a9:80:23:b7:f8:97:a4:24:62:d0:94:97:f5:6d:f3:ce:fd:1b:
         ed:28:f3:6e:84:01:13:69:13:95:ba:c8:44:62:0a:5e:2d:70:
         14:84:c4:5d:7c:ae:1e:8b:0f:7a:db:f1:a0:a4:59:a1:a2:53:
         5f:09:20:54:17:63:98:fe:28:99:c1:6c:4b:d0:5b:51:20:ff:
         51:87:89:70:c4:f7:5c:c4:4b:b8:96:09:56:cb:c1:12:dd:25:
         9a:b8:34:92:46:0e:88:bf:a8:ad:ff:cc:93:70:71:23:91:fb:
         b9:8c:43:a2:f1:8e:20:5c:43:47:03:b3:20:89:b7:cf:86:39:
         28:3d:dd:a0:d3:e1:b2:a6:9c:89:4a:61:41:1d:08:48:d2:8e:
         fa:81:e4:3c:58:04:bd:fc:67:20:9b:dd:08:22:89:20:ce:ae:
         a7:bd:af:52:4d:2c:9a:34:26:30:40:b9:bd:2f:8f:e4:7f:00:
         39:a4:09:ff:44:fe:e8:dc:34:d5:e0:61:00:88:fb:e6:4f:91:
         15:19:af:20:d7:5b:67:4d:0e:2d:0a:b8:33:34:28:bb:b3:67:
         65:e0:46:99:ec:d2:d0:5a:e7:b2:f9:c0:0a:36:37:9e:71:43:
         6d:18:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:03 2025 by rpki-client on console.sobornost.net