Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132372e302f32342d3234203d3e203538333439.roa
File:                     3138312e3233332e3132372e302f32342d3234203d3e203538333439.roa (raw, json)
Hash identifier:          gTTuhTUOplQPwQZUlAnflZOK0JMfrofK8Ej7lN0aNAs=
Subject key identifier:   8D:FD:29:55:95:1D:86:50:5A:2B:CF:4B:79:C9:85:2E:28:CF:5F:F8
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       4A9414913D5C89782F4A04E50F67E806D3C765B1
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132372e302f32342d3234203d3e203538333439.roa
Signing time:             Tue 04 Feb 2025 20:02:00 +0000
ROA not before:           Tue 04 Feb 2025 19:57:00 +0000
ROA not after:            Tue 03 Feb 2026 20:02:00 +0000
asID:                     58349
IP address blocks:        181.233.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:94:14:91:3d:5c:89:78:2f:4a:04:e5:0f:67:e8:06:d3:c7:65:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Feb  4 19:57:00 2025 GMT
            Not After : Feb  3 20:02:00 2026 GMT
        Subject: CN=8DFD2955951D86505A2BCF4B79C9852E28CF5FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:5a:36:b9:04:08:b9:3c:e4:27:3b:7d:0f:
                    ea:8c:dd:4e:99:95:33:27:f9:5d:83:e6:45:df:40:
                    d8:f6:66:a7:81:03:0f:a9:4d:70:21:45:4e:64:76:
                    e1:e7:07:d0:7d:1a:c5:90:b6:48:14:b1:63:b8:c2:
                    bf:0f:44:57:cc:82:41:b5:50:8f:7d:43:c6:7e:f9:
                    d5:d3:38:9f:6d:d9:27:03:2a:c7:50:95:dc:ff:cf:
                    e2:d9:4f:bb:6e:a9:f2:fa:2d:c0:8f:76:8a:2c:8c:
                    aa:c5:e2:55:e7:e2:86:d4:b5:91:90:ad:04:2b:d9:
                    45:08:89:bb:a4:2b:ee:f7:ec:8f:14:99:10:46:a4:
                    ad:e0:b6:a4:38:bd:ed:07:bb:f2:05:09:69:dd:02:
                    fd:d5:a6:1c:a9:08:a7:ec:ae:b8:e7:82:6a:4e:36:
                    e2:d3:fe:5a:26:f9:79:62:04:57:82:8d:7c:55:43:
                    22:d5:dc:a3:5d:2f:87:aa:a4:b5:2d:76:d2:67:ca:
                    13:07:95:2f:50:d3:d2:59:a3:80:fe:fa:01:b4:38:
                    a0:4a:20:01:20:22:7a:5a:d9:69:19:11:88:29:72:
                    69:dc:9f:d4:b3:64:0c:9a:d1:52:41:df:be:6b:37:
                    88:2b:16:ae:c1:28:3e:7b:03:28:9e:a1:41:94:a4:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:29:55:95:1D:86:50:5A:2B:CF:4B:79:C9:85:2E:28:CF:5F:F8
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132372e302f32342d3234203d3e203538333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:02:61:e8:93:0f:a7:2c:2c:35:c5:22:fb:60:c2:ac:49:10:
         87:c2:f9:a5:78:68:e4:10:62:6f:0b:8d:9d:ad:32:a9:c6:e0:
         5e:db:9e:45:03:e7:4d:23:98:ad:f6:9f:c9:25:10:24:5a:cb:
         54:85:48:6c:f1:96:34:fb:0e:9c:47:0a:dc:99:63:e2:13:26:
         5b:a9:f2:f2:a9:d6:db:72:d7:1e:35:83:08:6e:9d:92:6b:fa:
         d2:80:51:3d:28:a6:5b:38:bb:ac:18:f1:29:83:35:99:1a:de:
         46:81:f8:c0:f8:8d:fc:45:8e:d0:ca:b2:5d:ae:9d:71:7e:4f:
         cd:bd:c0:6e:13:7f:fb:8c:f1:d3:31:d6:ec:9b:77:77:69:3c:
         aa:ad:00:6c:da:e3:48:13:1e:7d:d4:3b:d9:c2:ec:fd:2f:c8:
         4e:9e:38:0d:1f:ed:cc:73:b2:fa:a6:91:4f:95:ee:98:ae:04:
         10:3c:a5:79:b5:52:a4:a0:a3:cb:e8:78:bd:3b:88:6a:eb:f9:
         79:bc:a5:47:d8:bb:63:c8:f2:a2:af:e5:9a:f6:54:77:8f:f1:
         06:f2:30:fe:7c:a4:12:f1:b9:25:99:73:bb:21:cb:d0:ed:82:
         3c:51:50:0c:ac:e9:f4:5c:df:c8:28:47:1c:2d:b3:27:87:db:
         72:8a:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:21:25 2025 by rpki-client