Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/3138312e3139312e3233322e302f32322d3234203d3e20323636383339.roa
File:                     3138312e3139312e3233322e302f32322d3234203d3e20323636383339.roa (raw, json)
Hash identifier:          sPZrlyHJ1fwV5Qo8sPG9FHMaj4sreauti6EJn1Fr+Fo=
Subject key identifier:   2F:E6:54:C2:07:80:02:7A:68:B6:1C:9F:CD:71:28:3F:4B:01:C8:9F
Certificate issuer:       /CN=EAABADF60F7D8392AF593C14898736FBCA05391A
Certificate serial:       1A552138EBF7DA98306E156426DFE23D03F8337A
Authority key identifier: EA:AB:AD:F6:0F:7D:83:92:AF:59:3C:14:89:87:36:FB:CA:05:39:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAABADF60F7D8392AF593C14898736FBCA05391A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/3138312e3139312e3233322e302f32322d3234203d3e20323636383339.roa
Signing time:             Tue 04 Feb 2025 18:34:00 +0000
ROA not before:           Tue 04 Feb 2025 18:29:00 +0000
ROA not after:            Tue 03 Feb 2026 18:34:00 +0000
asID:                     266839
IP address blocks:        181.191.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/EAABADF60F7D8392AF593C14898736FBCA05391A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/EAABADF60F7D8392AF593C14898736FBCA05391A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAABADF60F7D8392AF593C14898736FBCA05391A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:55:21:38:eb:f7:da:98:30:6e:15:64:26:df:e2:3d:03:f8:33:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAABADF60F7D8392AF593C14898736FBCA05391A
        Validity
            Not Before: Feb  4 18:29:00 2025 GMT
            Not After : Feb  3 18:34:00 2026 GMT
        Subject: CN=2FE654C20780027A68B61C9FCD71283F4B01C89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:47:2a:5f:30:5e:a7:e3:37:6d:be:ea:eb:
                    c2:47:59:c4:f4:b8:42:ae:61:13:ed:e6:03:ff:c1:
                    5f:c9:59:48:6a:dc:a0:74:38:56:c5:25:69:db:2b:
                    d6:c9:a8:cf:cb:44:cc:05:78:ea:7d:6e:34:de:e7:
                    6c:7d:f3:2a:b1:7a:0f:b7:5f:ba:7c:e3:28:5d:4a:
                    00:21:40:61:3e:f7:38:cc:99:58:bf:60:27:1b:27:
                    39:7e:65:1b:1b:0b:b3:82:14:23:8b:10:0d:c6:7f:
                    39:32:fd:25:4f:5e:6f:4f:fb:07:e0:3b:6b:b1:35:
                    19:22:0e:cf:6a:fe:49:40:ee:87:5b:02:f8:74:4f:
                    28:0b:45:11:cb:73:7b:ca:58:31:8c:fe:a6:c0:c0:
                    2e:6e:e7:8b:fd:ba:9e:76:d8:ae:cf:f4:11:65:7e:
                    bf:ba:5f:b5:7a:67:b3:ed:b7:0e:1e:cb:94:18:17:
                    f9:47:e8:d9:c3:11:b1:06:44:5f:48:80:3f:08:00:
                    66:7a:da:c3:c9:35:13:dc:71:e6:f8:4c:f7:03:c5:
                    32:e3:aa:b9:a1:53:5e:55:57:61:e8:7f:86:dd:0d:
                    61:71:4d:a5:ff:2c:b2:c1:43:9c:6d:ca:6c:1a:53:
                    b8:9e:a4:a1:8e:21:88:0c:e5:a1:4b:19:de:12:1b:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:54:C2:07:80:02:7A:68:B6:1C:9F:CD:71:28:3F:4B:01:C8:9F
            X509v3 Authority Key Identifier:
                keyid:EA:AB:AD:F6:0F:7D:83:92:AF:59:3C:14:89:87:36:FB:CA:05:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/EAABADF60F7D8392AF593C14898736FBCA05391A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAABADF60F7D8392AF593C14898736FBCA05391A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/3138312e3139312e3233322e302f32322d3234203d3e20323636383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:f6:3a:db:fc:d0:d4:f8:bc:50:86:c8:ae:25:af:6b:51:
         af:32:df:f4:7f:f5:65:3d:df:b6:d3:63:5a:f8:ff:c0:93:9c:
         0a:ba:1a:31:09:2a:a9:63:ef:27:01:8c:8f:e6:96:8c:5b:31:
         0a:ed:a2:c2:a5:a2:b8:a6:04:9b:d6:91:d4:ca:78:b8:e9:e9:
         91:2a:e2:67:fe:96:f8:ce:f8:2d:a7:a9:2b:8b:b0:28:59:30:
         01:55:60:28:20:76:09:a9:ef:59:8f:2f:53:a3:d0:f1:db:e0:
         8d:ae:86:b9:f0:c8:fa:2d:a7:39:57:04:5b:a3:c1:9e:cf:59:
         94:45:3e:b1:0e:83:d0:be:2f:fe:e3:6f:7c:a0:96:d8:18:47:
         30:b4:89:60:2e:4a:95:ed:09:37:3c:02:7e:ab:cc:9e:23:81:
         cc:01:16:f6:c0:35:a5:0f:12:57:6c:28:a8:ac:70:92:91:05:
         1b:01:5b:c7:93:54:dd:a6:0d:e5:0c:03:eb:23:74:14:56:e5:
         a3:ad:f4:2c:bc:a6:5d:ec:2d:ae:1c:09:21:49:a3:f0:1e:0e:
         6a:fc:f7:a9:59:1a:78:b8:e3:8a:b6:2e:6e:15:79:af:e9:19:
         f3:43:4f:3d:57:5f:9d:78:0e:77:72:90:43:55:cf:47:ea:56:
         55:6f:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:07 2025 by rpki-client