Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e342e302f32342d3234203d3e203237393836.roa
File:                     3138312e34322e342e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          AmyETKPB2BeadmwlXvj2hoalnsFbc6/DX9Y2aBWNTww=
Subject key identifier:   53:3B:3B:3D:9F:11:5C:4E:1E:84:8C:CA:4B:14:0F:30:54:AC:3A:AF
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       7237580EE0AF1A8E46ABAA2A6DEC57CB8FD7E614
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e342e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 04 Feb 2025 18:44:23 +0000
ROA not before:           Tue 04 Feb 2025 18:39:23 +0000
ROA not after:            Tue 03 Feb 2026 18:44:23 +0000
asID:                     27986
IP address blocks:        181.42.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:37:58:0e:e0:af:1a:8e:46:ab:aa:2a:6d:ec:57:cb:8f:d7:e6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:23 2025 GMT
            Not After : Feb  3 18:44:23 2026 GMT
        Subject: CN=533B3B3D9F115C4E1E848CCA4B140F3054AC3AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:36:d4:3c:21:7e:51:2a:79:3b:a4:b1:68:
                    7c:7c:6c:db:30:76:b6:64:05:a4:1c:3d:91:c4:c7:
                    f4:f9:cc:ea:e1:53:22:c8:a5:de:e7:07:81:a3:a8:
                    be:85:5e:d6:2a:b3:86:c8:b4:4a:64:e9:82:16:80:
                    b0:19:3c:07:ff:7b:35:e4:55:70:a6:70:ac:83:f2:
                    c4:e7:b5:bd:4b:a6:99:77:28:61:b6:6d:f2:fd:bd:
                    fe:56:85:54:50:40:93:45:d3:72:50:d6:00:9a:52:
                    c3:27:0b:5e:7d:e0:dc:57:99:b0:4d:98:be:2d:a0:
                    35:32:82:0f:cb:3c:54:f0:dd:07:16:88:ef:0c:70:
                    77:6f:20:0d:6f:5d:36:12:40:06:ba:fe:0f:4e:99:
                    a4:b2:b3:b2:33:00:32:73:a2:0d:fd:f6:e9:75:50:
                    e2:b5:62:85:d9:44:fc:1f:ed:ee:89:27:04:48:61:
                    02:f7:3c:e3:7a:4b:44:21:0f:2f:22:55:1f:ae:8c:
                    d9:95:43:fb:d0:97:0f:12:f7:a1:42:09:48:9e:20:
                    44:e4:99:47:35:60:58:e7:1a:11:32:d0:d6:db:6a:
                    c3:d3:6d:cb:a1:8c:d2:10:00:37:64:ad:de:4f:a1:
                    23:69:54:46:ab:7a:35:11:e0:3a:69:e3:f3:74:f0:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3B:3B:3D:9F:11:5C:4E:1E:84:8C:CA:4B:14:0F:30:54:AC:3A:AF
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e342e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:a6:78:2c:31:49:b0:47:fb:79:1c:af:82:98:82:88:18:
         38:36:88:f9:48:18:72:59:92:3b:b0:f2:b8:07:ae:71:b5:db:
         c8:de:5a:cb:45:2a:c8:c8:61:b3:f1:2b:a4:d1:86:f6:91:62:
         77:99:4b:8f:3d:1a:7f:14:c0:33:41:6a:0f:61:98:96:1a:d1:
         1a:c4:9b:b0:a1:24:52:e9:2c:12:f1:e4:a9:2e:f9:e3:e8:1b:
         45:01:ed:99:6d:c0:fe:08:8b:9e:b0:da:b1:8b:72:3f:5d:97:
         d1:19:42:b3:49:17:af:ef:87:87:38:1b:c8:54:72:df:63:ae:
         7b:09:b7:ba:10:e4:65:f7:92:3e:56:7f:5f:bd:4f:cc:bc:72:
         f2:f4:5d:25:ea:4d:e8:00:e0:bf:b7:72:31:78:97:5a:80:33:
         40:56:5f:24:9f:06:d2:43:97:f2:d8:c2:d7:ed:44:fc:54:3d:
         17:43:93:11:eb:0c:42:0b:90:60:7d:d8:74:bf:d5:f5:82:df:
         20:c2:11:85:06:3a:32:6c:a5:10:bb:21:31:65:54:5b:66:f9:
         9f:1f:79:ab:97:66:e5:8a:41:e7:f0:71:91:ea:0e:61:c8:c1:
         03:16:ee:d5:b5:6e:bb:ee:cb:73:c0:50:55:6f:f7:2e:81:c1:
         92:bd:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:20:17 2025 by rpki-client