Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS271936.roa
File:                     AS271936.roa (raw, json)
Hash identifier:          QRAgN9HY9Oy87CNZ2nN2q6LzNxo9uyk+Hkducfsx3Mw=
Subject key identifier:   4A:EE:7F:A2:0E:D1:D9:84:28:1D:8D:F4:58:98:0A:2B:33:15:E7:CD
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       6D83A57EB903952C070ACCAF4E0D50B98B77EC58
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS271936.roa
Signing time:             Tue 04 Feb 2025 18:07:28 +0000
ROA not before:           Tue 04 Feb 2025 18:02:28 +0000
ROA not after:            Tue 03 Feb 2026 18:07:28 +0000
asID:                     271936
IP address blocks:        181.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:83:a5:7e:b9:03:95:2c:07:0a:cc:af:4e:0d:50:b9:8b:77:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:28 2025 GMT
            Not After : Feb  3 18:07:28 2026 GMT
        Subject: CN=4AEE7FA20ED1D984281D8DF458980A2B3315E7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:ed:fc:63:61:29:9f:90:17:32:b9:7f:58:
                    33:80:a9:9a:e8:b7:0f:87:c3:d9:d8:5f:b5:06:a9:
                    6e:e2:04:c2:ef:68:19:5b:74:c9:56:e2:33:0f:a2:
                    ee:27:8f:bf:9e:12:ad:49:74:30:92:0b:72:89:17:
                    e4:97:cb:b6:23:ba:0e:6f:38:9b:50:e0:f1:92:94:
                    ba:c7:92:85:e5:2f:02:c8:29:59:cb:e6:0f:86:95:
                    ec:ed:78:7c:6b:29:d9:8e:fe:68:7e:2a:1a:f3:81:
                    b2:c8:c5:d5:d0:38:27:08:b1:e0:0c:c9:2a:92:e0:
                    d1:3e:7a:5d:4f:84:98:c5:1f:cc:2d:55:52:d5:21:
                    72:25:1a:63:6b:dc:f9:2d:c3:06:00:e7:ca:27:e9:
                    99:e0:b9:49:70:3b:59:d8:ba:c2:05:30:01:cc:de:
                    3a:34:eb:d5:48:3d:8d:99:40:59:a2:95:fb:b4:ad:
                    d3:3e:0f:15:d7:e9:1d:50:4e:a6:8e:63:5f:ab:21:
                    57:68:52:f8:d4:41:12:c3:5e:da:80:78:55:54:aa:
                    3b:45:81:52:82:84:d6:d4:a8:05:ab:4d:81:4c:eb:
                    7b:b0:f6:ad:94:5e:6a:94:84:31:d7:2c:3c:c0:c8:
                    8b:b3:b4:15:fa:99:e3:32:93:7f:fa:11:d4:df:0e:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EE:7F:A2:0E:D1:D9:84:28:1D:8D:F4:58:98:0A:2B:33:15:E7:CD
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS271936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:13:9f:41:e9:90:2a:c4:8a:68:68:1f:44:c8:d2:70:12:
         6c:38:6a:36:34:d7:dd:ba:09:29:0d:36:2a:d3:e2:8e:cc:eb:
         9e:84:ff:bf:8e:14:31:78:de:b5:19:77:1f:b4:11:e2:48:3f:
         b8:83:f4:0c:a9:fe:fe:8c:36:64:48:04:c9:38:9e:7f:0a:73:
         9c:e7:87:78:c5:b8:8c:a9:58:1e:c7:4f:8c:d9:bf:de:40:cc:
         74:25:2d:3f:f3:f7:75:1d:fd:80:9a:dd:2e:54:ad:b9:e3:ba:
         cb:ee:76:fe:a7:de:77:b0:77:05:45:34:94:53:26:5b:3c:71:
         95:87:7a:bd:eb:f3:1e:fc:78:80:8f:a7:48:13:6b:ee:bd:9f:
         19:ee:c1:26:32:bb:e9:1d:80:86:ba:c8:82:39:a8:4e:0d:e9:
         81:79:92:80:b2:7f:78:ad:2a:f8:ee:60:00:ff:77:24:2b:12:
         ae:c9:38:1e:7c:cd:23:15:51:89:eb:7d:d3:6e:5a:b7:91:4d:
         cd:41:43:a5:b0:22:71:18:5c:5c:07:47:16:cc:b3:59:c0:3a:
         59:50:06:13:b0:ca:1d:f8:60:54:21:1c:54:84:ab:20:42:aa:
         b5:c7:7a:a5:47:50:71:38:46:c2:6e:4b:3c:d4:47:3b:eb:eb:
         8d:2b:c2:d7
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUbYOlfrkDlSwHCsyvTg1QuYt37FgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1RTI5OENDQTBCODQwREI3MjZGNjBFRUQxNDBDMzdG
REIyM0JENjAeFw0yNTAyMDQxODAyMjhaFw0yNjAyMDMxODA3MjhaMDMxMTAvBgNV
BAMTKDRBRUU3RkEyMEVEMUQ5ODQyODFEOERGNDU4OTgwQTJCMzMxNUU3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oe38Y2Epn5AXMrl/WDOAqZro
tw+Hw9nYX7UGqW7iBMLvaBlbdMlW4jMPou4nj7+eEq1JdDCSC3KJF+SXy7Yjug5v
OJtQ4PGSlLrHkoXlLwLIKVnL5g+GlezteHxrKdmO/mh+KhrzgbLIxdXQOCcIseAM
ySqS4NE+el1PhJjFH8wtVVLVIXIlGmNr3PktwwYA58on6ZnguUlwO1nYusIFMAHM
3jo069VIPY2ZQFmilfu0rdM+DxXX6R1QTqaOY1+rIVdoUvjUQRLDXtqAeFVUqjtF
gVKChNbUqAWrTYFM63uw9q2UXmqUhDHXLDzAyIuztBX6meMyk3/6EdTfDvR3AgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUSu5/og7R2YQoHY30WJgKKzMV580wHwYDVR0j
BBgwFoAUcl4pjMoLhA23JvYO7RQMN/2yO9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4
Mjc2MDA5MDc0RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQw
REI3MjZGNjBFRUQxNDBDMzdGREIyM0JENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjVFMjk4Q0NBMEI4NDBEQjcy
NkY2MEVFRDE0MEMzN0ZEQjIzQkQ2LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0
RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvQVMyNzE5MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1vO0w
DQYJKoZIhvcNAQELBQADggEBAAqbE59B6ZAqxIpoaB9EyNJwEmw4ajY01926CSkN
NirT4o7M656E/7+OFDF43rUZdx+0EeJIP7iD9Ayp/v6MNmRIBMk4nn8Kc5znh3jF
uIypWB7HT4zZv95AzHQlLT/z93Ud/YCa3S5Urbnjusvudv6n3newdwVFNJRTJls8
cZWHer3r8x78eICPp0gTa+69nxnuwSYyu+kdgIa6yII5qE4N6YF5koCyf3itKvju
YAD/dyQrEq7JOB58zSMVUYnrfdNuWreRTc1BQ6WwInEYXFwHRxbMs1nAOllQBhOw
yh34YFQhHFSEqyBCqrXHeqVHUHE4RsJuSzzURzvr640rwtc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:45 2025 by rpki-client