Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32322d3232203d3e20323732303939.roa
File:                     3138312e3233332e3130302e302f32322d3232203d3e20323732303939.roa (raw, json)
Hash identifier:          vTFn07JcpuOMdCAkHS/3CTS2daq5R1lUjcRnz0gZzOk=
Subject key identifier:   0D:DC:E1:91:07:26:A9:9B:17:13:15:BC:B9:27:8C:A4:40:8A:A2:63
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       64B6AB1DF267314D10D55C8370CA6DEF0C77CD41
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32322d3232203d3e20323732303939.roa
Signing time:             Tue 04 Feb 2025 19:59:26 +0000
ROA not before:           Tue 04 Feb 2025 19:54:26 +0000
ROA not after:            Tue 03 Feb 2026 19:59:26 +0000
asID:                     272099
IP address blocks:        181.233.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:ab:1d:f2:67:31:4d:10:d5:5c:83:70:ca:6d:ef:0c:77:cd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Feb  4 19:54:26 2025 GMT
            Not After : Feb  3 19:59:26 2026 GMT
        Subject: CN=0DDCE1910726A99B171315BCB9278CA4408AA263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:57:ec:45:f3:9b:fd:5a:e8:02:3b:41:f2:
                    6b:46:e0:5a:ea:7e:4b:e0:d8:c8:6a:74:56:19:92:
                    f7:bc:ec:63:a9:67:37:6e:56:7c:e2:31:43:32:c5:
                    df:5c:a2:e9:6a:b7:23:51:0a:98:41:53:b5:b3:18:
                    09:46:5a:72:d8:fc:51:ea:0f:bc:7b:52:53:73:11:
                    d9:15:d7:e3:01:eb:46:0c:0f:54:bd:9a:d7:5f:22:
                    bf:d3:6e:38:46:45:30:5f:09:81:ec:a4:86:b4:0c:
                    6c:e8:23:1d:95:4a:93:a2:ef:45:0b:b5:ca:08:02:
                    76:26:77:44:c5:48:6d:d2:2d:d8:2b:cc:34:28:06:
                    fd:84:56:10:63:cb:a0:9c:ca:90:3a:a7:ef:f5:f5:
                    b4:87:fa:3f:0c:f9:32:b6:b3:a7:ce:cb:bf:8e:75:
                    fc:39:7b:19:a1:a9:5d:67:57:fc:bf:1f:76:e7:af:
                    80:e2:49:4d:f8:a2:ea:50:f9:90:de:64:27:ff:95:
                    0c:b5:30:7e:75:88:4f:ca:37:66:2e:46:4b:40:76:
                    ee:34:83:9d:71:b4:33:2e:9a:c8:fa:4f:a5:b3:95:
                    ee:12:b5:75:31:2f:67:31:25:5c:7a:fc:79:2a:ea:
                    94:6a:d9:84:36:ff:c6:4f:5c:ee:82:1c:fc:7e:a5:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DC:E1:91:07:26:A9:9B:17:13:15:BC:B9:27:8C:A4:40:8A:A2:63
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32322d3232203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:57:e2:a0:76:f9:2f:39:c8:81:c6:7d:9e:5b:12:8e:87:
         ac:37:1a:1b:47:35:09:a3:71:18:43:05:72:19:f4:c6:2e:3b:
         99:40:ed:66:fb:03:84:2e:06:5e:23:8c:65:92:bd:ce:29:27:
         64:c2:3f:6d:f4:d9:c0:23:af:0a:f1:54:98:d3:b6:43:b4:7d:
         49:48:8e:b5:c1:2c:85:e0:89:a9:6f:1e:db:2d:40:8d:d1:aa:
         e7:ed:86:6c:fc:a5:cd:a2:e1:a4:69:d4:9f:1b:7e:ea:4b:0a:
         94:5e:9c:d3:73:80:9c:67:a9:24:7b:ff:56:24:21:3f:86:cb:
         63:11:87:3a:4c:28:75:02:0e:88:ca:03:72:c2:1a:8c:57:79:
         13:bd:16:d0:50:7b:9f:03:30:d9:56:d8:b2:ef:bd:ca:a5:10:
         d3:7d:5c:ec:7d:17:94:d5:ed:f5:d2:87:0a:1a:dc:43:b3:65:
         ef:09:a0:b4:d1:10:86:6b:bf:65:60:a7:8b:14:5c:4f:50:ab:
         4d:f3:31:6a:1e:8e:bb:e0:27:09:dd:d2:11:c3:ab:6b:a7:14:
         14:50:1e:d4:dd:88:2a:0c:c1:e5:7e:69:91:39:39:00:0c:2d:
         48:86:d5:37:1b:e7:b6:53:74:6c:1c:2b:14:4f:67:93:84:72:
         b2:6a:d2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:30 2025 by rpki-client