Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3134372e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3134372e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          kvrz22QOOlWYkQnMuT3WFrjIex+Vuu3SjeN9sR8m/ow=
Subject key identifier:   C1:AD:22:91:44:8F:0E:67:60:A1:9D:41:7B:EA:1F:6D:3C:D0:81:C3
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       3FC70F3A05C32507C8177374FD6F52C2AC2DDC09
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3134372e302f32342d3234203d3e203138363738.roa
Signing time:             Fri 15 Aug 2025 14:30:00 +0000
ROA not before:           Fri 15 Aug 2025 14:25:00 +0000
ROA not after:            Fri 14 Aug 2026 14:30:00 +0000
asID:                     18678
IP address blocks:        179.1.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c7:0f:3a:05:c3:25:07:c8:17:73:74:fd:6f:52:c2:ac:2d:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug 15 14:25:00 2025 GMT
            Not After : Aug 14 14:30:00 2026 GMT
        Subject: CN=C1AD2291448F0E6760A19D417BEA1F6D3CD081C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:2e:11:18:66:ac:ab:f0:28:e4:ab:bc:5e:
                    ba:a0:ea:8a:05:44:b5:77:8e:d3:fd:79:3b:a1:d7:
                    24:0a:13:00:4c:95:11:63:98:64:f1:1e:bc:c7:f7:
                    19:32:b0:88:b9:c2:2f:6f:a8:be:83:1a:3a:61:f8:
                    9b:06:4d:d7:66:fe:e5:58:b8:07:82:80:ab:bd:61:
                    cd:b4:29:6d:87:10:c8:93:19:dc:c9:da:df:39:d4:
                    67:ab:ad:4a:69:cf:38:da:25:fb:ea:b5:f6:4c:59:
                    33:32:68:5b:ad:50:6b:9f:be:54:f1:71:c2:1a:f5:
                    a9:31:8b:b2:97:d5:07:c2:01:87:be:af:4c:e6:45:
                    81:e2:1f:a2:cd:e9:d7:b9:b7:d1:2c:f8:94:c7:30:
                    d3:a6:f7:9e:c1:fc:17:66:1a:7f:bb:07:1c:e8:2b:
                    fc:6c:5a:e6:44:f1:19:e3:c3:82:67:81:5a:4d:4f:
                    18:4d:65:c8:b4:eb:75:be:1d:bb:20:23:8f:84:f1:
                    94:16:cd:9a:c3:92:42:b6:22:5c:06:f7:b7:26:e9:
                    84:d9:df:f7:d3:92:91:60:af:03:5f:30:4d:54:ea:
                    c2:8f:52:d5:8b:66:42:b2:e0:4e:a9:c4:63:58:bc:
                    c9:08:50:10:ce:a7:3c:95:7c:26:8b:86:60:b7:87:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:22:91:44:8F:0E:67:60:A1:9D:41:7B:EA:1F:6D:3C:D0:81:C3
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3134372e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:a1:d7:1b:f8:8f:74:b6:08:f4:12:1e:a6:cf:86:f6:b6:
         f7:21:28:d7:f1:b3:42:23:8a:c1:c7:31:c2:20:11:6f:4f:b2:
         63:75:10:02:03:4f:57:59:1f:da:57:12:ca:a3:4e:4d:b6:c6:
         f3:f5:97:f9:0f:79:c8:8f:fa:d9:dc:6d:64:2a:d8:b2:da:83:
         c7:c3:5b:04:34:f2:5c:2b:62:4c:c3:6b:fc:c6:dd:27:27:7f:
         54:20:50:8f:da:66:0c:67:67:cf:ec:67:f5:53:67:96:7f:0d:
         14:70:97:78:ca:4f:b8:fb:ae:7d:5a:ec:ce:bf:43:35:8a:5c:
         98:73:b2:63:c7:dd:89:f8:8a:f9:9e:2a:54:35:3d:48:7c:0c:
         fd:1e:ee:12:5c:fb:fb:91:5a:b8:d4:6b:98:24:c7:f6:e2:d3:
         0f:65:8a:76:8b:35:71:f5:b2:06:6e:1e:58:b9:a1:58:d6:a1:
         0e:60:22:94:e4:2d:26:eb:25:ea:cc:49:19:99:b8:f6:d0:5a:
         be:dc:f0:d2:80:79:ab:c7:88:78:f8:e0:4c:76:c2:45:62:6d:
         46:4d:17:e1:8c:f4:a7:78:33:21:bc:b9:4c:e8:77:15:1e:e3:
         64:86:81:73:a3:d4:99:df:46:2b:8a:3c:67:a3:87:0a:ee:82:
         7c:2f:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:39 2025 by rpki-client