Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e36382e302e302f31342d3136203d3e203237383331.roa
File:                     3138312e36382e302e302f31342d3136203d3e203237383331.roa (raw, json)
Hash identifier:          TYLee4G3wMQemPxCVCYc1k72YjJP4Fo2OlLM4lIrGEc=
Subject key identifier:   DC:E3:D1:0E:E0:0D:D1:BB:3F:A7:07:2E:9E:CF:5E:52:EA:94:97:4B
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       029BA36CD8C0644B3262C9F87DB9C1F9C32F251F
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e36382e302e302f31342d3136203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:35 +0000
ROA not before:           Tue 04 Feb 2025 18:17:35 +0000
ROA not after:            Tue 03 Feb 2026 18:22:35 +0000
asID:                     27831
IP address blocks:        181.68.0.0/14 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:a3:6c:d8:c0:64:4b:32:62:c9:f8:7d:b9:c1:f9:c3:2f:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:35 2025 GMT
            Not After : Feb  3 18:22:35 2026 GMT
        Subject: CN=DCE3D10EE00DD1BB3FA7072E9ECF5E52EA94974B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:65:d5:5e:7d:4f:0d:0c:8e:97:72:56:00:
                    61:5f:2a:65:4d:1a:3b:a5:ed:26:33:75:83:d0:c7:
                    c7:91:3d:52:dd:0b:87:0b:88:27:03:a7:9c:d0:60:
                    37:c4:9b:1c:45:a3:c5:f5:df:20:f9:59:5f:e8:7b:
                    11:3b:59:a4:00:41:6a:0c:ce:e4:ad:15:1c:0c:0d:
                    d4:0e:0c:f5:40:d9:26:87:e2:02:e1:f4:fd:11:d3:
                    1a:a5:0a:52:fd:5e:ba:6f:e3:6e:7d:a9:9d:c1:3e:
                    19:d8:59:cc:39:68:6a:e0:00:41:ef:a5:ab:e7:c5:
                    b1:45:a3:d5:05:8c:4a:3c:4b:1e:e4:1d:15:85:8e:
                    af:58:0f:d9:ab:f3:34:ed:fd:8a:95:2e:4c:a1:bd:
                    f3:0d:3a:15:26:d4:dd:03:0a:87:76:7a:0b:c3:4b:
                    04:6c:44:09:9f:ff:75:89:49:82:45:d7:96:99:bf:
                    37:7e:89:7c:e9:e9:ca:b3:67:2b:2a:eb:bd:00:ca:
                    ad:05:85:1e:0b:ce:a1:e7:02:47:0a:ec:cf:02:f1:
                    50:12:ed:ba:53:b3:a3:c2:da:d0:1d:5e:40:42:a3:
                    dd:bc:30:20:11:30:cc:a9:d6:73:46:8c:2d:dd:d0:
                    ff:41:18:8d:9a:3d:a2:c2:f5:69:e0:da:91:5c:d6:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:D1:0E:E0:0D:D1:BB:3F:A7:07:2E:9E:CF:5E:52:EA:94:97:4B
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e36382e302e302f31342d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c5:db:ef:51:3d:ae:b4:ae:83:05:de:20:5c:8c:d8:bd:d6:36:
         d7:d0:a2:e0:ad:b4:17:df:85:22:fb:cc:80:30:26:03:37:8d:
         32:c4:d9:06:54:05:b7:34:dd:7f:b0:bd:62:cf:10:95:84:8b:
         70:cc:d7:a0:34:4b:3c:a4:5a:be:fe:18:17:1c:ce:1f:4e:4d:
         a7:fe:40:e2:19:cb:a7:15:01:e6:9a:bf:9f:74:10:87:05:71:
         35:27:b7:60:af:c7:c2:64:a3:37:1a:b2:af:9e:5e:80:5a:64:
         01:71:c4:4b:13:cc:b0:96:76:af:4f:90:93:10:ef:0d:f3:fd:
         96:ed:f8:09:47:1c:2c:58:26:04:e9:6f:ff:71:cf:59:62:ee:
         05:10:31:e5:b7:8c:33:fe:c2:3e:66:1f:a7:a0:2a:28:dc:a0:
         5d:c8:0e:fc:25:6a:33:cc:d4:96:a6:e3:d8:2a:ac:cb:6e:9b:
         5d:b8:66:aa:fb:e2:fe:fc:6b:5f:47:cc:25:24:99:b5:3e:59:
         7b:9e:9f:fe:7a:76:40:2c:be:ee:af:7d:57:47:32:7c:9a:2b:
         f9:a0:f6:1f:e7:4b:d1:55:9b:a5:c0:b2:27:de:02:14:38:11:
         47:ba:31:8e:62:4e:12:77:67:0a:33:54:eb:30:6f:07:37:fb:
         77:2a:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:38:45 2025 by rpki-client