Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
File:                     3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa (raw, json)
Hash identifier:          WQEScQsxKyS+PGEiDxMvYWu6KtkQo1/ZB+aseG3pOGU=
Subject key identifier:   B1:EC:F7:62:90:98:A5:E2:84:B8:30:C9:F0:B3:CD:BA:56:A9:B0:22
Certificate issuer:       /CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
Certificate serial:       326B2C8D8BDF2A8260ACFDA15C2F3237E5B0A895
Authority key identifier: 1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
Signing time:             Tue 04 Feb 2025 18:01:19 +0000
ROA not before:           Tue 04 Feb 2025 17:56:19 +0000
ROA not after:            Tue 03 Feb 2026 18:01:19 +0000
asID:                     272031
IP address blocks:        181.189.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6b:2c:8d:8b:df:2a:82:60:ac:fd:a1:5c:2f:32:37:e5:b0:a8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
        Validity
            Not Before: Feb  4 17:56:19 2025 GMT
            Not After : Feb  3 18:01:19 2026 GMT
        Subject: CN=B1ECF7629098A5E284B830C9F0B3CDBA56A9B022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:50:2e:f0:28:63:b8:dd:e0:77:4f:e5:9d:
                    4b:1c:b7:09:e2:0b:9f:cb:04:e1:16:5d:d6:9c:e7:
                    c6:7b:ea:c4:0f:f3:70:ab:98:31:40:22:28:db:c5:
                    7a:f5:12:f4:9a:a0:44:26:24:7f:c3:df:0b:06:f1:
                    82:0a:4a:3c:13:f9:0b:60:a0:a5:20:99:d8:5c:4d:
                    0c:d7:c7:74:38:d4:9c:47:87:72:b7:f4:54:ee:3b:
                    a6:e2:9b:b7:13:91:ee:32:90:37:12:7d:e8:11:7f:
                    96:27:12:d2:a2:79:32:f5:3a:27:e2:3b:11:5f:71:
                    3e:bc:21:df:f2:d8:ed:56:4b:84:00:26:04:bc:d6:
                    1a:dc:92:3a:b4:ba:6b:56:ee:bb:e2:fa:af:ba:b6:
                    47:82:f6:35:b6:a9:fc:43:0f:9f:c7:52:87:e4:f6:
                    b0:04:4c:a4:0e:aa:9d:f2:ef:31:a4:d3:2e:92:86:
                    09:7e:f7:2e:13:96:15:d7:ff:43:f8:76:13:ae:c1:
                    8f:ff:28:4c:17:c8:4e:4a:a1:8e:10:5c:53:5a:76:
                    cb:4d:0c:fa:0e:79:ff:24:b3:cf:57:10:de:1a:9f:
                    0b:f0:9d:68:03:78:50:34:ba:62:e4:3d:ee:58:e9:
                    99:ac:0e:04:cb:9c:c6:bf:51:93:39:6c:5c:5e:f4:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:F7:62:90:98:A5:E2:84:B8:30:C9:F0:B3:CD:BA:56:A9:B0:22
            X509v3 Authority Key Identifier:
                keyid:1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:01:5b:c6:f2:d1:ed:19:17:2c:a9:22:12:0c:70:ef:ad:
         5d:19:63:f8:33:91:f5:c2:82:5e:c8:ea:f8:4d:85:39:f8:c1:
         06:8a:58:0b:cb:32:39:c4:09:0a:4e:61:26:83:1f:d6:d8:c6:
         f6:d3:06:0f:28:c1:de:30:d0:e7:c3:b8:90:a9:39:3e:ea:66:
         44:16:91:72:fb:f5:18:22:26:d5:98:be:d9:36:d2:7d:50:40:
         c0:57:34:16:96:59:09:fa:47:7c:66:71:b6:f3:8d:29:8f:f0:
         2d:53:4a:bb:8d:35:bb:dc:9f:96:4e:95:e8:34:d7:3b:f0:1d:
         b5:a0:90:83:fb:fa:19:c1:82:cf:a3:e1:37:11:1f:95:6e:0e:
         9c:b0:b9:0e:d9:78:a5:21:26:a9:11:78:e2:1f:b0:e3:3b:0f:
         87:d2:2d:79:b6:5c:bd:d8:b0:3e:0e:58:4a:37:a4:e1:ee:06:
         2f:3c:27:19:cf:51:33:53:a2:0f:d5:a4:00:81:5a:59:fd:b9:
         68:54:68:a8:1c:44:63:37:ac:9d:1a:ff:60:48:f2:5e:3e:fd:
         d0:15:50:1d:39:1c:ea:48:1a:ff:57:fe:3e:5c:c3:a2:5e:77:
         7d:49:5e:39:c1:01:7b:25:36:8e:bd:a5:fb:85:44:9c:8b:6d:
         d0:2b:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:01:48 2025 by rpki-client