Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31342d3136203d3e203237383331.roa
File:                     3138312e3230342e302e302f31342d3136203d3e203237383331.roa (raw, json)
Hash identifier:          cNpU3nirsqqVy3veqFqrAHBXFD7xprkioF7dWp4i6OQ=
Subject key identifier:   76:E0:35:20:E4:D4:67:5D:0D:52:52:DD:2D:1B:5B:9F:1B:57:3B:05
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       490DCDC45419584E7C35450D69E4DF8CB526B208
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31342d3136203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:34 +0000
ROA not before:           Tue 04 Feb 2025 18:17:34 +0000
ROA not after:            Tue 03 Feb 2026 18:22:34 +0000
asID:                     27831
IP address blocks:        181.204.0.0/14 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0d:cd:c4:54:19:58:4e:7c:35:45:0d:69:e4:df:8c:b5:26:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:34 2025 GMT
            Not After : Feb  3 18:22:34 2026 GMT
        Subject: CN=76E03520E4D4675D0D5252DD2D1B5B9F1B573B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:60:d1:5c:68:3b:d1:33:fd:90:88:1a:bf:
                    82:a0:ee:fe:a3:c0:6c:d3:8d:02:00:67:fa:50:a8:
                    5a:95:25:1f:ff:91:46:13:e8:27:f7:35:2c:1d:71:
                    e2:ce:3b:f8:22:5a:ce:fb:f5:80:6b:7e:4f:b7:d5:
                    41:ab:a9:3a:49:e6:82:fc:01:2c:72:90:c3:83:20:
                    65:fa:23:d9:1c:59:4f:5a:09:17:d8:f3:4a:20:86:
                    26:20:73:c2:fa:5d:86:c4:c3:9e:8f:82:b2:5f:52:
                    24:19:0e:af:4f:3c:ba:b0:ea:70:92:7a:09:30:e1:
                    21:1f:da:a4:bc:26:26:e7:6b:83:49:5b:34:d8:be:
                    cf:17:af:a2:20:9f:fa:9e:0a:67:69:73:7d:5b:f4:
                    78:96:ff:2f:4e:30:ea:a3:5e:ae:e1:b7:c2:77:1a:
                    2f:63:4a:dc:1d:dd:80:87:be:ec:0a:b4:f5:85:f8:
                    ec:a4:b9:28:6d:59:bd:bf:23:1a:34:6d:36:4e:90:
                    ad:b4:01:44:01:bc:8c:d8:c2:81:58:3e:84:4e:1c:
                    42:1b:55:a7:c8:09:f4:49:02:ef:ac:cf:88:0a:5b:
                    b6:57:d6:f9:5a:36:51:96:a6:c8:f7:36:40:2e:b5:
                    e8:0d:22:f7:80:0e:90:84:12:25:11:d0:ba:a7:d1:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E0:35:20:E4:D4:67:5D:0D:52:52:DD:2D:1B:5B:9F:1B:57:3B:05
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31342d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         22:54:6b:c3:85:96:f0:10:c2:75:e9:91:71:7b:91:65:a1:b9:
         38:be:fc:25:82:bb:ad:61:3b:cf:e6:cf:aa:f6:26:5e:4c:7e:
         d9:c2:a2:53:f8:3e:62:5b:36:af:8e:e0:31:9b:89:6d:5c:f0:
         ca:26:08:1e:58:32:40:4b:e7:e3:b7:09:6c:fe:83:91:2a:57:
         c6:d1:27:80:49:59:eb:f5:9f:a1:e5:3f:47:97:be:01:b4:ea:
         29:89:23:fc:45:25:2a:43:83:eb:4f:2a:a2:16:63:64:d4:35:
         4e:dc:eb:4b:93:04:e7:7d:d9:28:9b:44:b9:9b:e2:75:fd:d1:
         9e:17:94:1f:de:fb:6d:0d:43:29:56:38:b4:9f:26:49:8d:37:
         ae:4e:bc:3e:b6:2c:1b:29:6a:c6:b8:b1:4f:c3:80:4b:f6:27:
         f9:d0:23:14:63:85:d0:c1:d1:81:0d:63:d3:d0:8e:10:a8:50:
         61:84:58:87:34:29:67:65:4b:84:6d:50:bb:04:76:d1:1d:87:
         bd:19:83:72:50:1b:4e:bf:27:e7:3c:03:44:00:e4:bf:18:97:
         aa:70:51:a7:6e:f8:b8:23:b5:77:eb:fd:ff:a5:ef:4f:03:f9:
         8c:e0:4e:83:e9:84:f8:09:1a:8f:ab:65:61:46:9a:78:74:9c:
         59:aa:7b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:02 2025 by rpki-client