Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e203131383330.roa
File:                     3138312e3139342e302e302f31352d3234203d3e203131383330.roa (raw, json)
Hash identifier:          1xKPgjWqp0vHQrE/dwkdNKzRWybecw/Nv3e2EGNh628=
Subject key identifier:   56:EF:93:37:C4:A5:0D:7B:CB:E6:63:D7:FE:01:A7:C5:A8:5F:BC:54
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       3D5E0B884380216EBDF655D0F53F511037A18EA5
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:36:40 +0000
ROA not before:           Tue 04 Feb 2025 18:31:40 +0000
ROA not after:            Tue 03 Feb 2026 18:36:40 +0000
asID:                     11830
IP address blocks:        181.194.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:0b:88:43:80:21:6e:bd:f6:55:d0:f5:3f:51:10:37:a1:8e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:40 2025 GMT
            Not After : Feb  3 18:36:40 2026 GMT
        Subject: CN=56EF9337C4A50D7BCBE663D7FE01A7C5A85FBC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:15:ba:8f:c9:0a:a2:a6:85:51:6d:9d:4b:
                    da:cf:ca:62:3b:c0:2c:db:42:04:a5:ea:b2:21:7e:
                    43:6f:93:a0:40:be:83:f8:fc:69:de:e9:cf:c0:04:
                    5e:f3:73:60:5f:eb:05:3e:70:05:e4:2c:72:6d:9d:
                    6a:ff:c9:aa:d7:2b:26:66:79:07:1b:35:d7:f9:55:
                    3d:fe:0f:31:ca:32:0a:56:17:61:c4:a7:b7:a7:2d:
                    32:d1:3c:3e:18:73:84:f8:8f:11:f4:4c:ff:a9:23:
                    f3:f2:d3:3f:8b:b1:7f:99:0d:24:af:65:97:95:f1:
                    27:77:76:d0:f0:0a:77:dc:a6:2b:03:1c:82:06:1b:
                    79:13:6a:6d:60:6f:32:d7:7c:e7:83:fd:92:f2:7f:
                    7a:85:cd:6a:d2:60:3d:7b:5b:29:ae:2a:84:b6:47:
                    11:3f:e6:65:af:51:ae:78:63:69:76:0b:d4:ca:2c:
                    dc:df:c0:f2:9b:62:76:ba:c6:93:f0:fc:47:23:9a:
                    61:2d:cf:0b:02:43:0f:30:03:41:f3:e8:03:7f:b5:
                    62:31:2f:3f:a0:01:5d:4a:cf:87:52:38:36:f1:24:
                    e9:f2:b7:c9:8e:b2:64:a9:29:c4:5e:f1:70:9f:99:
                    4c:33:e7:0f:f2:51:ff:c4:23:07:8e:24:d9:7e:e7:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EF:93:37:C4:A5:0D:7B:CB:E6:63:D7:FE:01:A7:C5:A8:5F:BC:54
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.194.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:9e:96:29:33:b4:80:37:43:86:24:51:cf:42:6d:94:76:
         e8:f0:87:47:63:44:36:a7:d6:84:05:60:3b:bc:42:e8:fb:7c:
         bc:12:a7:d4:b6:e8:34:f2:06:c1:43:0c:ba:57:70:fc:ee:82:
         9c:60:04:c6:27:c4:9a:55:3e:00:c1:25:38:e8:22:bc:f2:f2:
         ce:56:26:13:d3:74:b1:3d:63:5c:72:cc:ac:1e:43:ab:90:43:
         e6:d9:50:b6:fc:de:00:e2:7e:90:1e:5b:78:9e:16:f0:8b:67:
         c5:b8:82:39:46:a3:9a:13:63:6e:ec:e1:a1:de:cb:a1:b2:83:
         27:11:a9:fd:b6:31:27:80:6b:d5:4f:e6:05:27:02:2c:05:6a:
         2c:26:90:66:44:fa:f5:d0:f1:a2:88:07:2d:7d:a6:00:f8:48:
         e9:33:1a:db:b0:c5:80:0b:f9:15:2b:16:f9:43:86:66:ed:7f:
         c1:ba:13:c1:b2:9e:43:c4:3e:9a:fb:47:8f:38:28:8a:0a:c7:
         0b:d2:f7:70:41:d1:a2:62:74:0a:90:80:72:2c:5e:95:13:09:
         52:4e:78:37:97:c2:d7:f4:1b:47:94:48:30:ea:ce:fa:0e:06:
         3b:69:a9:f8:32:ee:53:17:f4:f9:43:41:2e:1c:5f:02:9e:f5:
         69:f2:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:52 2025 by rpki-client