Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa
File:                     3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa (raw, json)
Hash identifier:          lzBw6IYFp4BwMrcAhn0pR9UD+rjtFKYZyb04SIAJH2A=
Subject key identifier:   73:B5:29:D4:99:CC:0F:77:69:59:D7:BF:70:28:F9:BE:78:50:E8:35
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       7F808D4B2B1FFD7DF3808A2995F2447094AFE17A
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa
Signing time:             Tue 04 Feb 2025 19:59:26 +0000
ROA not before:           Tue 04 Feb 2025 19:54:26 +0000
ROA not after:            Tue 03 Feb 2026 19:59:26 +0000
asID:                     272099
IP address blocks:        181.233.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:80:8d:4b:2b:1f:fd:7d:f3:80:8a:29:95:f2:44:70:94:af:e1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Feb  4 19:54:26 2025 GMT
            Not After : Feb  3 19:59:26 2026 GMT
        Subject: CN=73B529D499CC0F776959D7BF7028F9BE7850E835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:d1:43:33:c9:47:9d:e3:7d:f6:76:8e:95:
                    b9:3a:39:d6:9c:c1:b5:88:c9:b5:9a:5c:eb:87:63:
                    f5:7c:45:80:3c:f0:e6:da:ce:f0:57:66:13:29:c7:
                    08:c2:ed:eb:29:23:d5:df:9d:6c:17:16:52:92:b3:
                    7e:8a:52:74:e7:af:76:b3:74:ac:d0:40:3f:03:86:
                    dc:16:e1:87:3c:2a:11:a3:d7:d0:36:e5:cf:f9:10:
                    6e:2a:0c:3b:88:54:c2:1c:4d:56:fe:9a:fd:dd:01:
                    5b:98:6f:3e:ab:25:85:92:03:de:3e:6c:5d:79:26:
                    de:fa:30:ad:09:2d:6a:ff:69:9a:56:78:c8:cc:b6:
                    df:d0:a9:68:30:74:1e:2a:99:12:85:b4:54:59:3b:
                    c4:04:0c:cf:40:6c:63:25:03:e7:31:9c:fa:32:dc:
                    98:48:87:dc:44:cd:0d:d2:b8:2c:b1:01:fc:0f:71:
                    21:08:4b:16:a4:86:03:7d:ea:d1:ab:60:24:ff:50:
                    65:58:5a:20:54:53:f4:1f:f4:2d:e1:20:e9:22:aa:
                    81:bc:8d:5e:2a:e0:c2:67:9a:b5:11:c9:93:57:88:
                    13:72:d1:b9:c2:35:f3:51:61:a8:f9:da:b5:f7:d0:
                    35:3b:66:4a:a5:bf:fe:69:98:1b:6c:ec:73:4b:ba:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:29:D4:99:CC:0F:77:69:59:D7:BF:70:28:F9:BE:78:50:E8:35
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:c4:2c:04:48:6a:42:1e:a3:81:4d:80:52:f1:6f:68:87:
         b3:76:c6:32:35:3f:00:54:62:a5:46:a0:c5:93:b4:42:9c:28:
         48:93:53:9f:94:84:a3:f2:5d:2c:f0:a9:08:81:8b:41:b5:be:
         87:43:7f:ea:cb:df:1a:f9:41:f9:81:a2:26:58:4f:26:8f:fd:
         d5:20:45:10:71:15:f8:12:ae:81:90:c5:c3:6c:36:a6:3f:77:
         f6:8c:72:cc:ca:b7:84:ee:5b:e7:eb:ed:5e:af:b9:34:9d:e4:
         16:f5:a2:35:e3:47:e0:0d:16:c2:63:2d:9c:b9:07:b8:17:d0:
         76:78:0e:d0:bb:50:39:e7:4f:54:e5:1e:4d:ff:b1:b7:f9:2a:
         8f:1c:aa:af:a7:31:3d:ab:29:d6:7d:42:a1:99:6f:4e:6b:8b:
         a7:5f:5f:5e:f3:0c:2a:37:fe:73:de:89:1a:25:0c:76:98:4b:
         0a:d7:6c:0d:ec:36:de:92:99:28:1d:5d:f1:55:eb:dd:ac:64:
         f7:7a:d2:39:97:5e:f1:62:51:b0:d1:8e:aa:1d:3e:43:15:2e:
         89:b4:c3:63:69:c1:76:7c:6a:9a:09:44:a6:4f:1e:43:bd:d0:
         b7:62:61:a4:53:7f:64:d6:1d:d5:9f:27:56:13:c5:6e:81:13:
         38:7d:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:22 2025 by rpki-client