Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135332e302f32342d3234203d3e20323632323036.roa
File:                     3138312e3138392e3135332e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          HIf2t64/w4jWp75jnuN78UwRc+qoYecZc0YtfYZySRI=
Subject key identifier:   50:C6:18:FF:FD:AE:C9:DE:FD:41:78:DD:73:5C:EF:24:C5:BC:ED:D6
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       017963C78B9775386F91F91EDA61A3AA30037CA5
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135332e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:15:33 +0000
ROA not before:           Tue 04 Feb 2025 18:10:33 +0000
ROA not after:            Tue 03 Feb 2026 18:15:33 +0000
asID:                     262206
IP address blocks:        181.189.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:63:c7:8b:97:75:38:6f:91:f9:1e:da:61:a3:aa:30:03:7c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:33 2025 GMT
            Not After : Feb  3 18:15:33 2026 GMT
        Subject: CN=50C618FFFDAEC9DEFD4178DD735CEF24C5BCEDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:8f:85:50:b1:d9:a1:5d:22:a2:24:d0:df:
                    15:89:45:76:84:a6:c0:b9:9d:11:67:7f:18:e8:a6:
                    8d:de:5a:13:cc:45:ae:78:d0:32:8f:0a:dd:8d:a8:
                    be:e9:bf:c4:27:d3:d8:d1:a6:cb:e4:53:57:df:67:
                    b2:23:56:52:6d:1d:67:b2:d3:9a:82:a4:5b:28:0b:
                    f1:b1:0a:73:43:4e:f4:db:5b:ca:e4:6f:97:cd:84:
                    fb:a1:c7:f0:84:c7:3d:8e:1b:cb:2a:6f:fd:9e:ea:
                    84:b6:7b:58:50:b0:48:12:12:15:1b:93:07:bf:75:
                    05:ba:3f:ce:0a:59:e4:da:ed:18:a9:ad:81:2b:e4:
                    5e:2c:31:3f:4e:a9:ae:19:ae:60:d4:18:b1:69:42:
                    d4:20:bf:91:3d:04:fb:ff:55:7c:09:37:ba:fc:c6:
                    4d:09:67:a4:21:d8:ff:03:cf:6b:41:af:7f:00:d0:
                    0a:b0:55:8d:9a:a5:8f:bd:21:e1:2c:ca:0e:29:3b:
                    54:7c:c4:05:ae:3f:a6:b2:42:5e:60:fc:fc:7f:35:
                    05:b0:dd:09:73:c7:c8:2b:0a:57:ed:89:50:14:44:
                    32:92:da:7e:ed:47:dd:56:3d:3d:22:d6:d2:16:1d:
                    5b:3d:54:c8:5d:0c:32:05:61:4d:1b:33:65:07:8d:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C6:18:FF:FD:AE:C9:DE:FD:41:78:DD:73:5C:EF:24:C5:BC:ED:D6
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135332e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:48:33:d4:e7:37:df:f8:49:b1:d9:a6:de:76:af:7d:f8:64:
         5b:eb:9a:db:28:43:7b:ee:48:24:4b:5f:35:01:cb:54:88:83:
         a0:9b:ad:eb:37:62:9b:5e:b6:87:b7:8a:b1:ac:79:a4:f9:be:
         f2:97:b3:ab:4f:ef:a4:2c:ef:11:73:56:52:b2:72:df:56:b2:
         b3:8e:7e:4d:4c:f4:c2:2e:0f:fb:bf:43:8a:ac:31:75:dc:64:
         85:df:09:4b:8a:fb:cc:ed:43:d7:5d:fe:a7:61:88:3e:d1:e8:
         7f:54:1e:3d:7c:05:df:f0:be:c0:62:b7:06:4f:e5:a6:76:06:
         e0:39:19:c5:7f:b0:97:1e:a2:0d:d6:4c:8e:2e:02:6b:31:42:
         ab:af:60:cd:90:37:4f:92:a4:29:dc:98:cf:8c:04:51:31:ab:
         c0:6d:ab:52:44:67:21:ad:e4:c5:30:31:dd:ca:22:d5:ae:14:
         b9:d3:a2:24:a5:58:f5:5c:26:72:78:6f:ab:22:28:71:f8:ac:
         bd:f6:37:da:86:48:22:c5:78:69:46:0a:0e:0f:20:26:df:05:
         e3:a9:a7:c4:51:42:51:77:e5:9a:a2:ec:04:d9:32:c8:ed:6e:
         7f:7b:47:47:0f:b6:bb:4c:ab:a7:ab:9c:22:5a:45:79:1a:de:
         24:44:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:07 2025 by rpki-client