Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135342e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e3135342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          /UoZNXxEQfJRDytX/3ffnTaOCL5Ru45hWvQVPaIsSVs=
Subject key identifier:   90:FB:BE:2E:D8:65:2C:C3:85:EF:FE:6D:6C:8D:3E:AE:C2:85:99:05
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       4EDF06D3B093192F27F6CF99F2778C4ADE61D3A1
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135342e302f32342d3234203d3e203138363738.roa
Signing time:             Thu 14 Aug 2025 21:45:00 +0000
ROA not before:           Thu 14 Aug 2025 21:40:00 +0000
ROA not after:            Thu 13 Aug 2026 21:45:00 +0000
asID:                     18678
IP address blocks:        179.1.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:df:06:d3:b0:93:19:2f:27:f6:cf:99:f2:77:8c:4a:de:61:d3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Aug 14 21:40:00 2025 GMT
            Not After : Aug 13 21:45:00 2026 GMT
        Subject: CN=90FBBE2ED8652CC385EFFE6D6C8D3EAEC2859905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:6b:7c:18:ec:ba:c8:50:42:e3:c9:7c:e2:
                    e7:b5:1c:40:61:63:8d:1f:9e:42:66:4b:b9:4f:08:
                    b3:60:a1:bc:c1:6b:a3:24:b9:90:29:5d:0c:47:6e:
                    ef:3a:ec:6d:a5:a2:ce:2a:fe:ba:23:a0:d2:05:ac:
                    51:dd:e2:29:bb:3d:95:68:80:5c:e1:8e:b0:32:76:
                    6e:ed:9f:1f:89:a5:c1:4b:37:b8:b1:59:5a:c0:e4:
                    a4:1f:82:95:97:48:d2:6f:8a:3b:0a:4e:e2:18:7e:
                    1d:d3:15:6c:53:db:20:03:04:ae:7a:af:3a:e8:e9:
                    16:c3:60:6b:00:e0:52:20:91:1d:2f:f3:86:a4:7e:
                    7f:9c:d5:26:1b:51:e1:25:00:a8:72:a2:27:84:96:
                    ea:73:76:b9:0a:d7:cf:cd:56:33:8f:7c:71:68:2c:
                    5c:00:c8:bd:4f:e7:1e:ea:da:96:4d:d9:54:9a:fc:
                    dc:cf:7b:e1:b8:b4:09:69:32:68:90:15:0b:b1:52:
                    0a:95:55:e3:02:e3:2d:8d:ff:33:68:7e:32:50:b3:
                    ec:41:a9:6c:18:34:8f:6f:63:1e:95:9f:e9:1d:43:
                    32:6d:3b:83:74:ec:4b:f1:f6:0c:34:45:58:1f:eb:
                    e7:6f:e0:a9:16:e7:f5:ad:3a:4f:5c:57:fd:72:05:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FB:BE:2E:D8:65:2C:C3:85:EF:FE:6D:6C:8D:3E:AE:C2:85:99:05
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3137392e312e3135342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:8f:e7:8f:a5:ef:5a:c2:12:28:88:c7:d5:eb:d8:91:52:
         43:bb:44:bb:c4:1b:14:a4:3f:1f:55:74:37:7e:6d:ae:73:d5:
         dd:09:f0:71:e2:a0:14:6e:22:e7:b8:5b:1a:7c:d7:f6:67:3c:
         97:94:2c:f8:cc:4c:f7:07:39:9b:55:fa:76:08:64:ee:11:f8:
         f8:a5:b8:7f:25:49:20:1e:ad:5f:5e:62:0c:14:e5:d5:35:dd:
         01:4a:64:b8:1e:92:db:60:d5:69:93:17:41:e5:0e:de:58:61:
         0b:15:9d:53:64:92:cd:8d:e7:67:93:b7:c0:a2:a1:7d:ea:0f:
         48:86:03:af:67:85:08:f9:2b:bd:c1:e0:d7:b8:eb:9b:99:20:
         01:c3:9c:93:28:f9:84:14:ba:31:32:3e:d7:69:2a:b5:b4:7e:
         f4:dc:12:01:3a:76:a7:ad:6d:3c:b8:ad:7a:24:77:07:9c:5e:
         ff:6f:80:d9:3e:10:13:d9:71:a9:36:f9:05:e7:dc:7f:c2:4e:
         ef:4f:41:ee:1a:ff:d2:02:d9:05:b7:73:79:33:0c:c6:ac:bb:
         c0:06:6f:24:23:67:17:e8:64:aa:06:74:37:6d:82:8e:f2:41:
         cd:a2:43:94:e6:b6:b8:bc:a9:fd:24:fa:4c:d1:65:ea:94:63:
         ea:14:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:33:51 2025 by rpki-client