Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3132382e302f32342d3234203d3e203233323433.roa
File:                     3138312e3138392e3132382e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          TgySJaqpBAeKjerz1kQncQMHJ013srgE2d/LfGL2+rQ=
Subject key identifier:   FD:72:A6:83:E0:7C:B4:D9:3A:48:C3:4F:91:3A:91:A8:AB:29:BE:49
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       2A05CA5D8FA994BB0DE073AA8B6DF8E818243B1B
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3132382e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:15:38 +0000
ROA not before:           Tue 04 Feb 2025 18:10:38 +0000
ROA not after:            Tue 03 Feb 2026 18:15:38 +0000
asID:                     23243
IP address blocks:        181.189.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:ca:5d:8f:a9:94:bb:0d:e0:73:aa:8b:6d:f8:e8:18:24:3b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:38 2025 GMT
            Not After : Feb  3 18:15:38 2026 GMT
        Subject: CN=FD72A683E07CB4D93A48C34F913A91A8AB29BE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:d7:e1:21:dc:6d:01:79:63:e8:4f:98:a6:
                    7d:91:67:d1:90:43:e8:8a:09:7c:ef:3b:77:59:3b:
                    f3:6f:03:27:f3:0d:65:d3:b1:f1:11:f7:c1:86:cd:
                    6a:1c:68:d4:57:c0:cf:21:bd:1b:58:d6:c0:30:e1:
                    8e:ac:6a:59:46:fb:38:21:89:70:47:2c:62:8b:fd:
                    d8:1e:b8:51:f4:59:83:bf:21:81:41:29:2f:0e:bb:
                    f6:51:5b:33:aa:90:ad:df:90:9e:9d:58:dd:9a:dc:
                    9a:f7:65:e1:c4:6f:41:3e:72:7a:95:89:f7:88:a9:
                    16:07:dc:2c:3c:c2:5c:ca:85:30:af:cd:f9:7f:be:
                    66:84:23:40:87:4d:2c:e1:26:a7:c2:1c:29:5a:85:
                    33:21:11:9c:a7:ed:e3:e3:70:28:bd:b8:27:5a:ac:
                    9c:95:c6:ac:5c:e8:7a:aa:8a:dc:80:54:df:8f:9e:
                    98:d2:8e:23:14:a5:d6:a8:4c:8e:ed:dd:af:f7:d8:
                    ea:34:58:06:cf:53:56:98:c5:3c:83:4d:80:1a:e1:
                    04:2e:91:b5:a8:9b:87:11:f1:c1:5e:58:2c:4f:13:
                    ef:12:63:cb:a4:67:17:13:43:8a:82:44:be:d9:1a:
                    68:4d:2f:12:68:96:1d:ba:88:87:9f:94:73:90:65:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:A6:83:E0:7C:B4:D9:3A:48:C3:4F:91:3A:91:A8:AB:29:BE:49
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3132382e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:22:aa:87:75:e3:5f:16:c4:ee:f5:52:a8:14:cc:ab:47:
         8e:17:cc:5b:48:76:b6:d8:1b:10:97:2d:ed:af:84:79:07:55:
         2b:cd:0d:ae:a0:97:8b:19:0d:f7:f4:81:88:a0:40:2a:15:2b:
         d3:87:ab:e3:a7:ec:2b:e2:aa:7a:bc:ab:00:f6:85:af:1b:c9:
         29:77:c1:9f:83:bc:a6:76:73:9c:4a:b8:19:ce:4b:04:9f:63:
         2e:15:78:77:ab:29:55:ca:8f:10:1d:de:1c:31:52:1a:c9:60:
         71:0e:75:05:ac:7b:81:bc:7f:32:ff:b1:86:99:7b:28:a1:fb:
         ca:d4:01:80:38:9f:1d:3e:19:7c:fd:55:a4:7e:a4:96:74:06:
         f9:27:41:16:38:5b:c0:5c:6d:f1:31:ab:70:98:b5:da:6d:79:
         e6:af:b7:8d:10:88:42:1c:28:82:87:94:eb:2c:d4:28:62:10:
         1e:4c:a0:ab:34:20:a2:c7:d7:cf:9f:ce:b3:be:f8:f8:9f:9c:
         2f:be:67:56:5f:ef:15:dc:a7:d8:27:51:ac:0b:8d:8d:bb:91:
         9a:65:a5:21:7b:d2:5c:be:a1:37:80:9a:b9:84:e4:41:a6:ac:
         bb:a1:6b:8d:04:2a:1e:93:45:8f:5b:d0:db:c1:01:86:25:74:
         aa:a6:f0:77
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKgXKXY+plLsN4HOqi2346BgkOxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNTAyMDQxODEwMzhaFw0yNjAyMDMxODE1MzhaMDMxMTAvBgNV
BAMTKEZENzJBNjgzRTA3Q0I0RDkzQTQ4QzM0RjkxM0E5MUE4QUIyOUJFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDktfhIdxtAXlj6E+Ypn2RZ9GQ
Q+iKCXzvO3dZO/NvAyfzDWXTsfER98GGzWocaNRXwM8hvRtY1sAw4Y6sallG+zgh
iXBHLGKL/dgeuFH0WYO/IYFBKS8Ou/ZRWzOqkK3fkJ6dWN2a3Jr3ZeHEb0E+cnqV
ifeIqRYH3Cw8wlzKhTCvzfl/vmaEI0CHTSzhJqfCHClahTMhEZyn7ePjcCi9uCda
rJyVxqxc6HqqityAVN+PnpjSjiMUpdaoTI7t3a/32Oo0WAbPU1aYxTyDTYAa4QQu
kbWom4cR8cFeWCxPE+8SY8ukZxcTQ4qCRL7ZGmhNLxJolh26iIeflHOQZXwVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/XKmg+B8tNk6SMNPkTqRqKspvkkwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMxMzgzMTJlMzEzODM5MmUzMTMyMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb2A
MA0GCSqGSIb3DQEBCwUAA4IBAQAOBSKqh3XjXxbE7vVSqBTMq0eOF8xbSHa22BsQ
ly3tr4R5B1UrzQ2uoJeLGQ339IGIoEAqFSvTh6vjp+wr4qp6vKsA9oWvG8kpd8Gf
g7ymdnOcSrgZzksEn2MuFXh3qylVyo8QHd4cMVIayWBxDnUFrHuBvH8y/7GGmXso
ofvK1AGAOJ8dPhl8/VWkfqSWdAb5J0EWOFvAXG3xMatwmLXabXnmr7eNEIhCHCiC
h5TrLNQoYhAeTKCrNCCix9fPn86zvvj4n5wvvmdWX+8V3KfYJ1GsC42Nu5GaZaUh
e9JcvqE3gJq5hORBpqy7oWuNBCoek0WPW9DbwQGGJXSqpvB3
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:10 2025 by rpki-client