Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135392e302f32342d3234203d3e203236363137.roa
File:                     3138312e3138392e3135392e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          0PBYHarlBsgEn9AmtDxLDHqpAuwzSSEewyi4iIW6rYU=
Subject key identifier:   59:BA:C4:85:A2:CA:09:EB:E8:FD:68:7C:9E:7D:65:CA:A4:58:26:48
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       13157247F5436F1C5BEB9302C35FD1626BD41FFF
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135392e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:36 +0000
ROA not before:           Tue 04 Feb 2025 18:10:36 +0000
ROA not after:            Tue 03 Feb 2026 18:15:36 +0000
asID:                     26617
IP address blocks:        181.189.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:15:72:47:f5:43:6f:1c:5b:eb:93:02:c3:5f:d1:62:6b:d4:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:36 2025 GMT
            Not After : Feb  3 18:15:36 2026 GMT
        Subject: CN=59BAC485A2CA09EBE8FD687C9E7D65CAA4582648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:c6:a5:dd:97:4b:5b:70:37:d8:5d:2c:b2:
                    4d:fa:8e:f9:cc:1b:96:56:77:87:24:60:3a:c6:12:
                    fa:53:f2:08:42:3a:15:c1:a8:49:2a:26:20:9e:ec:
                    4e:90:db:00:a4:e4:65:e3:61:7a:7c:e5:5b:86:71:
                    d2:87:4a:b8:30:55:2a:17:5d:f5:8e:ce:18:dd:d8:
                    3c:8b:e4:f9:a8:d9:a2:63:0b:09:b7:04:c8:11:27:
                    bb:eb:a3:a0:fc:f9:5b:ef:85:71:8d:3b:02:e7:7d:
                    62:3a:50:76:2f:39:2c:42:06:50:45:c5:c5:cb:5a:
                    ce:ba:2a:db:dc:6d:e4:eb:20:e9:40:77:c5:80:14:
                    25:83:94:af:f7:b4:f4:d0:44:d0:15:88:74:b1:04:
                    e2:9e:b4:b8:41:50:53:6f:f3:c9:52:0b:69:48:54:
                    70:82:66:4c:88:a6:ae:62:f5:d5:9b:2e:d3:f0:79:
                    ff:5e:81:73:ef:8f:3b:7a:0d:32:51:40:e5:d8:d1:
                    f1:35:68:e5:b4:28:3d:92:56:6d:0c:b5:0a:a7:77:
                    05:ea:3d:8e:5f:db:97:44:6e:44:41:4a:3b:da:87:
                    17:d3:dd:75:a9:d7:17:80:cf:87:31:c1:be:2e:db:
                    b0:42:7f:46:24:f5:01:c1:01:8a:2e:91:0a:e1:30:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:C4:85:A2:CA:09:EB:E8:FD:68:7C:9E:7D:65:CA:A4:58:26:48
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135392e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:be:d2:03:b4:6f:5d:44:16:24:7c:8d:d6:75:d8:5a:54:dd:
         fb:7d:0d:d3:50:16:33:13:10:f1:79:18:d6:5f:37:ec:0e:94:
         68:56:23:7b:08:3c:48:ba:3b:fc:40:12:a9:35:6a:36:cf:89:
         38:37:bf:23:12:62:8f:94:d8:f2:62:ce:17:c3:01:97:79:45:
         00:f7:7d:dd:1b:83:a7:37:af:54:c2:bc:bc:1e:4b:e9:12:bf:
         f4:9a:dd:ad:71:5c:10:e5:92:b9:17:d3:2a:24:f9:32:7e:34:
         88:69:de:37:f3:a0:89:bd:58:38:20:59:8d:55:2b:a6:29:0d:
         30:2c:ff:60:ef:c1:4f:37:31:92:8e:a0:5d:c2:09:92:ba:99:
         c8:22:31:92:d5:78:d1:a3:e4:22:dc:13:7e:00:8e:f2:62:3c:
         01:31:2b:d2:20:59:3c:e9:bf:71:28:ce:7c:67:a7:13:ad:36:
         a8:e8:8b:c1:a7:0e:d8:b6:14:7f:44:29:ad:4a:7c:39:c7:d2:
         a0:3e:9d:d7:32:61:fb:71:fd:53:55:9f:21:a6:e6:cc:78:4a:
         47:29:9d:d7:ff:e5:89:0b:f6:9e:40:8f:fb:1c:2c:41:9e:e4:
         22:e2:16:d9:23:dc:5c:f0:a8:25:2b:7b:82:44:62:6e:e8:53:
         1b:81:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:05 2025 by rpki-client