Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa
File:                     3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          CrdMZSHy+mqXDg/iWOyyO87RM5RJ3uW9M3/Q0tfneqM=
Subject key identifier:   34:98:F0:49:C8:B9:45:3E:E1:B7:C0:F7:D6:58:56:6E:2B:87:72:0A
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       130101043DF599707935AC4AD920E9D281693198
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 18:01:04 +0000
ROA not before:           Tue 04 Feb 2025 17:56:04 +0000
ROA not after:            Tue 03 Feb 2026 18:01:04 +0000
asID:                     264830
IP address blocks:        181.189.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:01:01:04:3d:f5:99:70:79:35:ac:4a:d9:20:e9:d2:81:69:31:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Feb  4 17:56:04 2025 GMT
            Not After : Feb  3 18:01:04 2026 GMT
        Subject: CN=3498F049C8B9453EE1B7C0F7D658566E2B87720A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:00:6f:c3:3a:09:d9:8b:de:01:2d:37:b6:
                    54:6f:10:52:59:36:3e:02:d7:df:22:c5:28:e3:57:
                    97:92:54:f4:13:a1:17:14:76:14:75:5f:13:ba:65:
                    60:c9:c1:e8:90:3c:dc:30:a3:7d:97:f6:48:82:1a:
                    2c:ea:44:59:a9:7e:03:75:c5:24:52:f3:ee:1b:9b:
                    4c:db:aa:93:f0:80:11:3c:b8:cf:9b:94:d6:2b:84:
                    e1:14:32:9a:4b:7b:67:89:f1:01:ca:d9:c5:9a:35:
                    b0:3b:da:e6:49:c5:3c:3b:af:9d:e2:42:86:e8:eb:
                    db:33:be:72:4c:7c:24:26:90:66:de:ee:a9:2f:57:
                    3b:cb:54:d1:7e:40:3e:dd:bd:d8:94:41:b9:45:34:
                    1d:98:92:60:f8:5c:49:18:06:20:a7:60:84:cf:ae:
                    a6:43:89:5c:7c:42:a4:b4:dd:52:06:d8:99:db:ce:
                    da:89:74:08:0a:68:e8:a2:26:86:01:cf:1b:d1:b3:
                    62:4a:0b:36:8d:7c:6c:db:2e:d2:1f:f6:e0:7f:e3:
                    14:9d:cb:97:50:72:e5:5b:bb:89:88:4a:95:f6:f7:
                    ed:07:c3:73:5b:f4:d5:4c:8b:49:69:22:0a:d0:ad:
                    69:c2:07:54:f1:44:99:68:04:a8:c8:45:30:8e:85:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:F0:49:C8:B9:45:3E:E1:B7:C0:F7:D6:58:56:6E:2B:87:72:0A
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:7d:c5:fe:74:8c:8e:f5:5a:ee:5f:f7:f3:e8:57:ab:ea:
         96:2c:03:d3:80:b5:52:cf:23:9f:fd:00:84:f3:94:9d:36:d8:
         c8:47:a3:80:07:f3:9a:aa:a9:16:fe:1a:31:b1:a7:b7:6f:8b:
         b6:e9:3c:c4:bb:75:d8:32:38:b0:50:15:31:5b:82:52:4e:af:
         d3:90:b6:b9:43:3a:5d:a9:4c:1b:a7:41:38:4f:44:9c:76:a9:
         52:df:8d:0c:ec:1c:66:80:d3:41:35:de:7d:a6:7c:2e:35:b5:
         44:0e:96:03:cd:9a:38:81:f8:8d:68:bd:db:8c:22:28:3c:98:
         c8:6d:d7:ba:44:37:ff:b7:03:d3:a7:3c:b6:60:2a:a4:77:06:
         59:b2:69:26:94:03:35:94:bb:87:bc:2b:34:a7:eb:ef:3e:87:
         d0:8d:d1:3b:ea:08:f8:53:0b:30:a6:1e:39:01:ab:79:53:5e:
         58:b1:59:6e:f1:17:fb:79:34:5b:78:a6:11:b9:dc:88:8a:2c:
         7d:f2:10:4e:da:a3:ca:24:67:f8:75:a3:88:57:c0:6f:9c:7b:
         6d:85:70:1f:fa:27:05:9b:42:83:32:32:2c:c9:ab:72:70:31:
         c3:57:54:85:2b:7f:7f:d7:61:9a:93:b0:e4:eb:3e:26:9a:35:
         f8:60:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:30 2025 by rpki-client