Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135322e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          apNEHvoVcK1gGYyM1Kds0jaFKDkA1UuchR7/RPndq3U=
Subject key identifier:   66:AE:2C:80:AC:7E:9D:2D:90:D6:11:84:2D:BB:7F:54:08:0F:E6:85
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       4AA0F18735413C581B59A781F042CCB9191F36D0
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135322e302f32342d3234203d3e203138363738.roa
Signing time:             Thu 14 Aug 2025 21:45:00 +0000
ROA not before:           Thu 14 Aug 2025 21:40:00 +0000
ROA not after:            Thu 13 Aug 2026 21:45:00 +0000
asID:                     18678
IP address blocks:        179.1.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:f1:87:35:41:3c:58:1b:59:a7:81:f0:42:cc:b9:19:1f:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug 14 21:40:00 2025 GMT
            Not After : Aug 13 21:45:00 2026 GMT
        Subject: CN=66AE2C80AC7E9D2D90D611842DBB7F54080FE685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:a4:78:a2:64:06:ad:8d:d2:8c:30:ac:5d:
                    5e:1d:b1:aa:a5:3a:f9:44:cf:22:01:9b:1f:07:66:
                    89:2f:01:bd:96:0d:99:dd:8b:8e:6b:82:bf:a1:34:
                    43:78:0a:b2:cc:3f:cc:04:41:b9:cf:e7:09:8f:e4:
                    8f:3e:8a:98:e8:db:ce:2c:5e:5e:01:df:f7:b7:6d:
                    59:ef:5d:c8:e1:2f:e5:0b:f0:13:b5:34:26:6f:ef:
                    52:78:2a:14:e6:5e:78:d1:b0:0a:58:5d:5d:16:e2:
                    31:db:c4:a8:04:3f:bb:d7:c0:95:f5:26:df:32:5e:
                    e9:ff:f3:37:84:29:9e:5c:23:46:c5:a5:63:5e:ef:
                    2f:eb:3a:80:8c:97:2e:68:b8:0d:03:01:99:94:aa:
                    90:3b:a5:88:f2:65:c1:f2:4f:78:0e:ce:d2:eb:27:
                    99:68:a7:0b:c8:8c:a5:f9:06:82:2b:17:29:2c:c9:
                    10:52:00:a2:ad:20:44:78:1b:bb:0b:fd:a8:96:d9:
                    43:ff:d0:b5:5a:95:06:3a:b1:4d:71:1b:de:16:9a:
                    b8:0d:7a:61:ef:b1:8e:67:58:70:dd:cc:1d:6b:cc:
                    92:04:71:70:d7:95:af:bd:55:98:3a:cf:47:f5:5d:
                    6e:41:e4:4d:c4:e0:b6:f4:08:75:99:2e:1a:d8:56:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AE:2C:80:AC:7E:9D:2D:90:D6:11:84:2D:BB:7F:54:08:0F:E6:85
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:69:01:46:94:c3:ee:42:d1:93:be:14:f9:dc:f3:53:be:d4:
         e7:3b:93:d8:1f:1c:e7:2a:c5:28:67:9b:73:58:5b:e1:2b:08:
         f4:06:d2:7b:ad:fe:4e:fa:68:13:65:4c:c0:6e:ae:2d:eb:57:
         3b:1b:64:a5:e1:90:6e:54:1b:63:1b:fc:0b:8d:6e:c2:89:8a:
         07:eb:ed:bf:6c:5c:ba:65:e8:bf:d7:d9:43:f8:ce:31:31:b8:
         37:c1:7f:19:7f:d8:f1:93:f6:9c:24:13:21:b7:26:c9:9c:bf:
         55:dd:c3:5c:c8:c8:a4:1c:c2:18:f9:aa:d7:33:8f:49:28:c6:
         e1:cd:52:c1:23:b6:8d:a0:32:39:18:3f:61:90:29:2d:d3:f7:
         0c:84:b0:70:a4:2f:54:b5:72:f8:80:2a:40:9b:96:28:d7:f9:
         df:a2:71:15:ed:f1:c4:a7:91:df:ac:79:b9:ab:d8:da:10:25:
         c4:99:64:63:91:92:e9:b2:39:9e:c6:0b:71:ae:ba:b3:5b:85:
         65:7d:0b:85:9b:af:37:b8:35:ff:0f:c4:34:7b:a7:87:b5:7e:
         2a:70:c9:b9:7b:c1:96:89:67:44:79:d1:7a:4e:6a:90:1a:bb:
         c2:10:3b:0f:7d:99:54:64:13:16:82:22:3c:4d:a0:ab:d5:a5:
         bc:8d:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:33:52 2025 by rpki-client