Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa
File:                     3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa (raw, json)
Hash identifier:          zuyXHlXys5aaHC3wYebfZ0qAdCil5PzW4N4JMMi9zv0=
Subject key identifier:   84:41:84:D0:9A:65:70:2A:26:07:A2:97:D9:3F:FA:8D:79:A5:3E:35
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       14BCCE259CB9C70499A8769AFAB64CD2ABF258AE
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa
Signing time:             Tue 04 Feb 2025 18:56:27 +0000
ROA not before:           Tue 04 Feb 2025 18:51:27 +0000
ROA not after:            Tue 03 Feb 2026 18:56:27 +0000
asID:                     27953
IP address blocks:        181.118.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:ce:25:9c:b9:c7:04:99:a8:76:9a:fa:b6:4c:d2:ab:f2:58:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Feb  4 18:51:27 2025 GMT
            Not After : Feb  3 18:56:27 2026 GMT
        Subject: CN=844184D09A65702A2607A297D93FFA8D79A53E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:90:87:e3:e2:f8:8c:06:9c:d7:97:73:6b:
                    85:94:27:07:b0:fa:bd:ce:40:64:a7:9c:eb:61:8b:
                    c6:5f:11:06:60:29:df:1c:70:35:35:9c:79:d4:ad:
                    ac:23:c1:87:a9:b9:59:06:97:46:50:83:4a:85:8e:
                    c4:c6:0a:67:26:6d:f2:99:f0:f8:0a:31:a8:f4:4b:
                    ef:b7:7d:a5:60:b5:72:53:01:63:6b:3e:8f:a7:10:
                    b9:0d:ee:a4:8a:80:c7:bc:c9:28:30:63:dd:8e:22:
                    f9:63:e5:bd:92:38:ce:e7:df:ae:a5:36:7a:fa:e6:
                    83:b1:d5:15:f9:02:41:b8:2d:d3:5e:0d:46:5f:da:
                    53:0c:45:4a:0a:42:af:a5:60:94:68:a9:23:ee:ea:
                    42:71:94:28:d9:d8:74:60:8c:23:bb:a7:3b:f3:3e:
                    78:ab:9c:e3:5f:9b:17:9b:6f:e1:1c:6a:55:5a:7c:
                    71:7a:0c:ab:de:f9:61:45:59:65:47:6f:96:df:f8:
                    cb:04:0d:54:0d:e8:0c:c5:f1:f2:b3:08:ff:db:76:
                    cd:fc:a8:ad:7f:ed:06:34:38:9a:fc:84:91:98:42:
                    c6:09:95:02:05:9b:98:53:8a:90:5e:fa:f2:4c:b4:
                    13:25:d5:7f:f3:6d:43:ef:45:b4:24:59:77:0a:1c:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:41:84:D0:9A:65:70:2A:26:07:A2:97:D9:3F:FA:8D:79:A5:3E:35
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:23:73:4e:02:61:d7:ee:bd:70:f9:55:02:88:41:48:70:81:
         b3:59:4e:9c:20:ec:e1:24:ee:6d:d0:4f:d5:4a:30:b5:9a:ff:
         be:e4:eb:43:70:54:6a:73:39:a6:08:71:ea:cb:75:b8:c2:3f:
         5a:92:56:1f:3d:6e:da:2e:b6:b7:0a:3d:a4:5d:f9:57:72:ed:
         c5:55:b2:eb:bf:c0:90:8b:6a:e2:35:ef:28:41:59:54:74:00:
         4d:44:8c:94:b6:07:c0:25:c5:54:c6:7e:2e:d5:b0:fe:00:45:
         60:8f:12:96:a7:d0:db:98:54:e2:ed:f9:39:db:38:53:30:11:
         59:6c:94:b0:70:00:d0:78:cb:58:9b:53:71:e1:25:c9:81:61:
         ee:98:77:e0:b5:07:a1:87:c6:d2:81:a3:1c:fc:16:cb:ce:6d:
         0e:81:77:9b:b4:19:3f:35:9d:75:2d:25:f2:35:3e:33:0f:e8:
         6a:cb:23:d0:b5:1a:54:db:5c:cb:54:07:5f:b5:1c:87:06:09:
         c1:1b:e4:9d:83:4d:33:8c:17:73:52:6c:cd:af:8e:ba:71:eb:
         47:47:e7:e5:eb:be:9b:97:cd:27:5e:29:81:36:51:bc:d0:38:
         40:ee:2e:3d:8b:ae:cd:f9:6f:0c:0c:b0:1d:e5:6d:aa:58:cd:
         03:8a:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:04 2025 by rpki-client