Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134312e302f32342d3234203d3e203532333332.roa
File:                     3230312e3138322e3134312e302f32342d3234203d3e203532333332.roa (raw, json)
Hash identifier:          +9lUMy+5HD7P+LWXJNMnVax5K32Or1/dkalcsL53rVI=
Subject key identifier:   BF:9B:8C:68:56:9E:1B:FF:8C:73:E8:9E:6D:81:D4:59:E6:E8:2C:BA
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       185F690E76685375B88069CA974E22B333986742
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134312e302f32342d3234203d3e203532333332.roa
Signing time:             Tue 04 Feb 2025 18:35:11 +0000
ROA not before:           Tue 04 Feb 2025 18:30:11 +0000
ROA not after:            Tue 03 Feb 2026 18:35:11 +0000
asID:                     52332
IP address blocks:        201.182.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5f:69:0e:76:68:53:75:b8:80:69:ca:97:4e:22:b3:33:98:67:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:11 2025 GMT
            Not After : Feb  3 18:35:11 2026 GMT
        Subject: CN=BF9B8C68569E1BFF8C73E89E6D81D459E6E82CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:1f:19:0e:5f:de:6f:5b:f5:06:93:08:90:
                    5a:dd:d0:52:27:3e:f0:87:58:45:c3:c1:72:e2:81:
                    c0:2e:21:b1:d4:c3:52:ab:6f:2b:8d:ba:f3:a7:19:
                    ab:1f:9f:23:a5:73:79:20:a7:7f:5b:1f:8f:17:eb:
                    d9:14:57:23:f6:86:b7:9f:0b:85:46:28:a7:3e:1d:
                    92:41:3a:2a:ae:b1:c9:bc:c2:06:7d:59:68:64:33:
                    31:c7:4e:eb:c9:b8:7b:4b:13:9c:3c:78:e4:b3:18:
                    50:71:0b:7a:60:05:89:3a:74:78:2e:da:78:fa:d5:
                    65:0e:34:99:dc:34:be:d5:be:e2:53:f3:6e:bf:cd:
                    3a:75:62:99:54:f8:49:9e:4a:0c:b8:ca:b9:5d:1c:
                    03:22:e7:25:34:5b:9c:c4:4f:49:ca:d6:9e:ad:50:
                    f6:f1:6a:89:05:1e:45:2d:88:68:8a:cf:f7:ca:55:
                    6b:d8:6d:4c:f2:c0:70:c5:99:ba:bf:c8:31:d7:27:
                    28:b1:dc:52:eb:85:39:a6:bd:d5:7c:61:00:c1:72:
                    5e:e0:3a:99:5c:2e:55:fe:b7:f0:98:4d:5f:1c:0f:
                    cb:c3:3c:e4:c7:d1:bb:b5:0e:ea:e1:5a:8f:a6:d1:
                    83:01:a8:16:04:8d:7b:28:a1:52:8e:d8:5b:ed:a7:
                    cd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:8C:68:56:9E:1B:FF:8C:73:E8:9E:6D:81:D4:59:E6:E8:2C:BA
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134312e302f32342d3234203d3e203532333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:48:12:e9:f0:cd:66:68:16:20:d8:07:7a:f4:a5:99:dc:8f:
         32:40:05:89:c7:6d:38:f0:68:9b:b4:d5:40:1a:e9:f7:95:63:
         45:3e:38:be:8d:fe:de:d3:4e:73:af:d8:cc:ed:bf:7c:cd:2c:
         a4:1e:23:5f:2e:71:02:56:58:36:15:d0:f3:03:55:b5:a0:d3:
         cc:46:67:76:a7:60:47:f5:a5:d1:5e:40:73:87:c9:e7:3b:2a:
         24:b0:a0:7d:62:9a:6f:52:94:32:e6:10:59:a6:48:7e:07:90:
         2e:30:40:99:9e:09:a7:22:3c:7a:c2:b0:19:47:5b:30:32:a1:
         4c:f3:0a:cc:22:96:23:c5:f9:ac:77:d2:25:11:15:ba:94:d8:
         70:90:af:6c:93:e7:4e:6f:b9:f3:2d:e6:a8:92:64:4e:75:a7:
         e9:54:57:9f:94:ab:bd:4a:13:b2:a6:f2:cd:95:19:a5:01:68:
         7b:4b:4d:f9:99:d6:c1:c4:23:9b:b9:8c:2c:aa:65:e0:64:d6:
         b7:a8:18:48:fa:3a:7b:79:2c:4d:3a:4f:c7:97:f0:45:9c:d3:
         34:32:c0:f6:20:5c:82:c3:d4:34:13:00:31:23:ea:38:0e:4e:
         67:f9:5d:40:c8:d8:98:5b:f9:b7:a6:23:fa:07:33:be:a3:46:
         f6:ba:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:04 2025 by rpki-client