Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3234203d3e20323731373733.roa
File:                     3137392e31382e302e302f31362d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          XzG6KJufQ8puoDyUJkDVGMDh6pnFt7+mYe87GBd+mwA=
Subject key identifier:   62:37:B8:F8:B7:2F:CC:31:27:9A:76:F6:A4:AF:A9:08:B9:81:EA:31
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       5353940EF1BF36132650A0F3EDB2953C1FD3BC52
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3234203d3e20323731373733.roa
Signing time:             Fri 13 Jun 2025 16:22:06 +0000
ROA not before:           Fri 13 Jun 2025 16:17:06 +0000
ROA not after:            Fri 12 Jun 2026 16:22:06 +0000
asID:                     271773
IP address blocks:        179.18.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:53:94:0e:f1:bf:36:13:26:50:a0:f3:ed:b2:95:3c:1f:d3:bc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Jun 13 16:17:06 2025 GMT
            Not After : Jun 12 16:22:06 2026 GMT
        Subject: CN=6237B8F8B72FCC31279A76F6A4AFA908B981EA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:75:ee:df:68:7a:cc:e1:94:b5:6e:66:ac:
                    b0:69:d4:04:6c:bf:84:a7:2c:dc:41:2e:80:79:27:
                    80:e6:87:06:a1:47:ea:9c:07:f8:e5:6a:e8:a0:2a:
                    09:27:ae:33:4f:05:78:2e:ce:7b:94:d1:82:74:07:
                    c8:e1:7a:df:7e:14:6c:c0:6c:e1:2c:4c:b5:b3:74:
                    01:03:dc:1f:3d:87:60:0b:f8:72:7e:8e:0b:37:33:
                    60:5e:0e:eb:3e:0c:98:b3:da:18:ee:f7:48:0d:be:
                    42:14:ce:d5:73:43:95:d2:ab:91:d5:0e:e6:f8:4c:
                    f2:eb:2f:90:15:62:7f:49:2e:0b:db:35:e1:6c:bf:
                    cb:84:eb:3a:9a:cd:54:1d:11:bd:31:d9:1c:79:47:
                    90:13:7e:9b:e0:6a:e2:4f:64:c0:54:ce:02:6a:6b:
                    7a:1d:60:e7:c3:7b:cf:66:1a:75:01:4e:3d:e4:d2:
                    9d:8a:5c:13:3c:75:44:f0:fb:7c:4f:9b:fb:1b:a9:
                    e8:33:9f:ea:c7:ea:b3:32:75:cd:8b:17:41:e6:65:
                    ed:fa:c6:60:a5:e5:c9:9e:af:7a:7e:18:6b:16:83:
                    16:64:25:5c:3a:d8:b9:b7:44:98:2f:79:ee:49:90:
                    16:5f:cf:d1:03:5c:a8:d8:29:ab:ed:74:1c:cc:51:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:B8:F8:B7:2F:CC:31:27:9A:76:F6:A4:AF:A9:08:B9:81:EA:31
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:85:fd:cb:a1:cf:8c:18:ab:0e:e4:84:79:c9:b7:59:ca:a6:
         af:bb:72:a9:e5:b5:ec:bb:63:e1:c6:cf:0c:d6:e2:ec:7d:fa:
         5c:0b:b1:c5:8c:23:02:b6:30:bc:4f:dc:c9:5d:48:77:4b:5f:
         c8:a7:62:b3:f7:4d:b6:e3:f0:09:db:cd:3f:51:6a:13:b9:41:
         d8:ab:b2:91:41:6c:ed:3c:6c:c9:77:95:16:b8:94:b3:4b:e7:
         45:c2:f2:e8:4e:07:ba:d1:7f:57:f7:51:08:a0:9b:e8:6a:df:
         63:4f:1b:a6:b8:1d:36:c4:d6:40:ad:04:d6:ed:27:be:de:80:
         64:38:10:04:6f:a6:af:82:b6:0f:e9:e0:27:59:91:65:bf:56:
         08:72:58:a6:b8:0b:a7:fc:3b:b5:83:3a:02:f0:c9:3b:29:62:
         93:1b:11:65:91:f0:2a:16:fb:b4:bf:c4:20:55:59:b8:8b:00:
         3d:b7:e5:e0:e4:a8:38:72:95:de:3a:d2:77:52:5e:aa:56:ac:
         d7:02:3c:52:d7:f7:28:53:66:e2:74:8d:e8:99:a4:a8:cb:d5:
         5a:50:ce:31:71:01:a2:ed:5d:2f:51:c3:b6:8e:ff:cf:32:cf:
         fd:8a:86:47:60:e8:45:d8:23:fd:e5:a1:d5:5c:cd:d0:9e:58:
         e2:ad:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:34:11 2025 by rpki-client