Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e352e302f32342d3234203d3e203237393836.roa
File:                     3138312e34322e352e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          VAjyip+NaiSamMSkb4VVFpDwdZexYeBzDWazQUTyOLE=
Subject key identifier:   40:79:6E:4F:14:FF:A2:58:62:44:D2:8E:F6:EF:75:AC:C9:71:C7:5C
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       60ADA7F46B2CD8B9BE13FB7507E401F5B253F353
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e352e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 04 Feb 2025 18:44:26 +0000
ROA not before:           Tue 04 Feb 2025 18:39:26 +0000
ROA not after:            Tue 03 Feb 2026 18:44:26 +0000
asID:                     27986
IP address blocks:        181.42.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ad:a7:f4:6b:2c:d8:b9:be:13:fb:75:07:e4:01:f5:b2:53:f3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:26 2025 GMT
            Not After : Feb  3 18:44:26 2026 GMT
        Subject: CN=40796E4F14FFA2586244D28EF6EF75ACC971C75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:9e:28:61:b6:5f:4e:8a:38:82:7d:b1:71:
                    68:cc:93:b0:e4:74:b6:72:1a:4b:78:7d:f4:59:07:
                    74:8a:9a:5f:2a:49:f0:64:e7:db:9a:12:16:77:eb:
                    be:ac:16:ca:ac:e7:87:53:01:ea:32:d5:1f:29:44:
                    29:65:04:bf:2b:00:34:93:e7:11:40:78:2e:21:96:
                    0a:7b:b0:89:19:42:d6:30:7b:62:e1:c1:99:c9:59:
                    9e:71:e4:84:6b:ac:75:eb:1d:99:8e:ee:06:f5:fc:
                    85:d6:47:ec:b9:11:c7:62:11:1f:9e:45:27:ce:db:
                    52:f1:d5:f6:5b:94:70:04:03:56:d3:2d:90:cc:87:
                    4d:58:c7:48:25:31:72:c3:b5:cd:13:15:22:fd:c8:
                    1e:08:a4:ce:16:83:3e:de:ad:b8:9b:87:73:b9:1b:
                    ff:01:3c:84:d4:b3:c5:75:e2:31:e9:e0:dc:06:b3:
                    44:43:10:6e:ed:67:9f:a0:db:e2:85:1c:a6:2e:fc:
                    07:1a:da:00:7d:4c:c2:f5:1b:92:8e:8a:bb:e5:0a:
                    0b:05:8d:5d:d3:5d:19:5b:46:ed:e1:37:f5:4a:7d:
                    ee:bc:c4:d0:ed:b7:2c:2c:16:5f:d6:08:dc:bd:db:
                    d1:3f:8e:95:a7:42:25:c6:bc:bc:6b:2e:6d:f5:56:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:79:6E:4F:14:FF:A2:58:62:44:D2:8E:F6:EF:75:AC:C9:71:C7:5C
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e352e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:15:45:f9:57:da:f4:cf:14:50:fb:64:08:97:ec:cc:37:65:
         81:c7:f7:4f:99:09:7e:76:cc:88:70:10:d8:8f:09:15:eb:0d:
         f6:6c:b0:2c:df:be:07:7f:97:3c:d4:8a:e9:00:cb:24:e8:16:
         38:65:ea:c8:b6:48:9c:14:06:bd:a0:03:df:d0:9e:c5:1f:68:
         6c:f6:e3:53:f8:ab:71:e6:15:b4:ca:93:7c:82:2f:0e:d0:6b:
         dc:ba:36:7a:3b:46:e7:6d:7b:ab:48:ef:60:e7:b0:25:fd:d0:
         d8:82:57:c1:b8:e4:24:b9:f8:2d:62:26:06:64:83:94:eb:85:
         37:f4:ab:f8:a4:b9:d0:04:aa:98:6f:e3:da:ff:80:36:2c:51:
         e4:ee:40:e5:cf:0b:9a:84:9b:01:25:45:75:c0:a9:43:87:bd:
         80:65:a7:ec:85:20:93:2c:4f:70:48:e1:c3:fa:02:d6:d8:3e:
         74:11:3c:4b:66:c3:d0:0a:f0:be:db:ff:a5:e1:39:5f:e8:56:
         09:37:18:56:27:d4:d9:29:3b:f4:28:59:a7:42:c7:8b:32:0a:
         e4:4f:40:a2:9e:cc:27:53:ed:65:75:d1:d9:57:0c:b2:31:db:
         ed:90:42:4a:d3:de:e7:eb:26:c8:78:86:02:ba:70:ec:dd:e2:
         a9:bd:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:11 2025 by rpki-client