Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3234203d3e203236363131.roa
File:                     3138312e3134342e302e302f31322d3234203d3e203236363131.roa (raw, json)
Hash identifier:          I6Pp0jlV7R7Xz2rmZ8ou2izDZpqKkJRVXyXQFKmSk/4=
Subject key identifier:   79:58:E8:19:C3:74:BC:BE:0B:D4:12:B6:4D:FE:1C:45:DF:61:DF:6B
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       1334CCD31A980DDC7B1AABCBCA65436BB0BE05F4
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:17 +0000
ROA not before:           Tue 04 Feb 2025 18:00:17 +0000
ROA not after:            Tue 03 Feb 2026 18:05:17 +0000
asID:                     26611
IP address blocks:        181.144.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:cc:d3:1a:98:0d:dc:7b:1a:ab:cb:ca:65:43:6b:b0:be:05:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:17 2025 GMT
            Not After : Feb  3 18:05:17 2026 GMT
        Subject: CN=7958E819C374BCBE0BD412B64DFE1C45DF61DF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:1f:18:09:08:a9:56:f0:e8:1b:75:80:70:
                    27:4c:ba:53:d3:0f:7d:f8:db:ed:04:bf:51:3e:7d:
                    11:f5:6d:c8:61:a7:1a:4a:f7:eb:73:de:75:3b:9c:
                    58:9b:d5:9d:b3:e4:a3:e9:d9:3f:aa:7d:57:3b:77:
                    a2:e6:f9:dc:c9:da:cb:55:0b:3d:10:a3:7c:6e:71:
                    6e:94:0c:a5:5b:72:67:7b:71:7e:62:ea:6e:3f:12:
                    76:62:96:d6:47:4d:00:93:86:6f:d4:f8:69:d4:d4:
                    4d:74:88:29:4e:65:ba:43:b3:8b:20:42:32:5e:d3:
                    29:ea:e1:74:ec:fd:02:86:cf:63:87:02:6c:8a:72:
                    b5:0e:a8:44:4f:c6:9b:78:58:70:cd:53:05:a3:e6:
                    5f:96:be:88:18:8f:79:e7:e4:7f:5f:a5:3b:b3:ee:
                    dd:29:af:01:6f:54:94:08:cf:3c:b6:a3:72:56:14:
                    1b:40:ae:81:ed:de:3c:5a:bb:f5:51:99:8d:93:cf:
                    2f:7b:9c:13:ff:fb:b0:bc:33:a2:55:67:80:e0:fe:
                    ff:0c:6a:65:4c:76:f1:18:37:86:ed:c4:11:13:90:
                    32:83:f9:1e:9a:85:4c:65:05:32:76:d0:7d:d8:6a:
                    c8:95:e7:8f:4f:82:03:87:6c:8f:ba:eb:83:18:52:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:E8:19:C3:74:BC:BE:0B:D4:12:B6:4D:FE:1C:45:DF:61:DF:6B
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:25:59:d0:09:dc:e5:ac:27:94:7d:b6:47:8f:3c:28:8a:
         cd:3c:91:3a:8e:d0:f8:5c:c5:b9:cc:d2:ed:25:8a:81:b1:bf:
         3d:06:f9:0c:fb:72:8c:c6:0f:0f:b4:8d:28:67:1d:f9:e0:d5:
         ed:84:a5:2e:7d:83:dc:1f:b2:3d:28:37:4d:22:6e:c1:1c:71:
         db:31:12:86:e5:1a:24:c1:1b:aa:66:47:0b:e6:1c:f5:00:41:
         3e:11:65:42:a4:5c:65:53:95:a9:28:f8:1d:84:31:e8:ea:f2:
         1b:af:a3:90:b5:34:72:20:4b:b3:78:9c:87:ce:be:08:cf:74:
         56:f0:24:22:d1:1c:fb:28:c0:92:89:6f:31:c2:8f:0c:74:a6:
         68:cf:e1:0d:c0:1f:e4:92:b3:01:07:38:5c:ef:26:16:c4:cd:
         98:74:5e:2b:29:aa:76:94:9b:20:af:e0:c5:85:7d:fd:64:aa:
         f3:ee:c9:65:a5:b1:2c:da:41:ec:0e:64:1e:d5:b2:f5:25:da:
         e4:12:92:22:5b:8e:51:98:3b:79:c5:28:c3:8a:b2:b0:9a:64:
         37:10:b5:6e:c8:e9:10:d3:bc:6c:2f:64:4f:34:f4:bf:be:f5:
         04:91:3d:da:93:e8:24:90:6c:24:b5:87:1c:ce:37:e3:29:df:
         b4:e0:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:35:36 2025 by rpki-client