Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34392e302f32342d3234203d3e20323732303934.roa
File:                     3138312e3233332e34392e302f32342d3234203d3e20323732303934.roa (raw, json)
Hash identifier:          0lrNCNc1Y2C1bJ81SUNU9GPDdLr4RBlBHiLB6ousD00=
Subject key identifier:   9D:8F:0E:85:A7:EF:FA:0E:FE:ED:5A:E4:3B:50:86:5D:B8:1F:5A:20
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       2BDC4037CBDB49E79003F1F80BD9132ED3B214F7
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34392e302f32342d3234203d3e20323732303934.roa
Signing time:             Tue 04 Feb 2025 18:02:21 +0000
ROA not before:           Tue 04 Feb 2025 17:57:21 +0000
ROA not after:            Tue 03 Feb 2026 18:02:21 +0000
asID:                     272094
IP address blocks:        181.233.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dc:40:37:cb:db:49:e7:90:03:f1:f8:0b:d9:13:2e:d3:b2:14:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Feb  4 17:57:21 2025 GMT
            Not After : Feb  3 18:02:21 2026 GMT
        Subject: CN=9D8F0E85A7EFFA0EFEED5AE43B50865DB81F5A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:e2:c8:94:b2:c4:c1:af:9e:aa:1f:24:fd:
                    ce:f5:13:b5:c2:a4:6f:c7:f6:75:75:5d:47:41:76:
                    26:8c:f0:01:5b:af:3c:10:3b:68:81:a1:1e:23:54:
                    22:50:51:42:53:f9:1c:5c:ab:78:15:7d:0e:13:3f:
                    08:9f:df:0a:c9:ce:03:a5:e3:21:a7:35:cf:5e:62:
                    33:45:72:e6:c8:a8:59:cd:08:53:ba:25:1f:16:3b:
                    28:6d:1b:1b:98:ad:78:8c:52:3c:c0:e2:d9:0d:95:
                    39:7e:05:4a:8a:af:41:8d:19:42:5c:0e:06:35:c3:
                    c2:7a:1c:65:53:d9:62:a5:8d:ce:ff:ed:08:f5:93:
                    36:57:56:30:c0:05:3f:90:a5:9f:ee:9b:08:1d:1c:
                    28:0c:d3:ce:69:a8:ff:9c:26:a3:f1:b9:0c:5b:d3:
                    86:a2:e2:2c:49:7b:3e:c8:95:08:ff:18:be:f9:e7:
                    79:e6:39:b4:7d:72:c1:85:33:7f:68:aa:33:62:8b:
                    88:79:16:c8:4c:2d:8d:d9:e5:44:81:59:92:da:dc:
                    d3:b8:e7:69:58:f2:64:88:17:1d:0e:88:27:f7:65:
                    1c:ab:ba:ad:cb:49:27:1b:0d:71:00:c8:0f:5a:17:
                    7a:ed:d7:fd:ec:e2:43:eb:00:19:a0:08:b8:64:b3:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:0E:85:A7:EF:FA:0E:FE:ED:5A:E4:3B:50:86:5D:B8:1F:5A:20
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34392e302f32342d3234203d3e20323732303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:25:1c:eb:ad:1a:8a:5e:94:15:ca:6a:30:d9:31:d4:6d:d8:
         82:c7:dd:7c:18:f1:82:db:ce:8a:b4:10:7a:f5:90:a2:5a:ca:
         dd:c1:58:64:88:bb:de:b1:a7:e9:62:6c:61:78:8d:d5:75:0c:
         8b:bf:ed:75:74:df:00:ae:cd:c4:9d:d8:a0:15:bc:26:1f:ff:
         f2:eb:2e:79:52:6e:a3:3d:0b:30:b5:fa:d2:06:70:ef:aa:90:
         5a:ca:a0:3d:1f:bd:ac:15:4a:bc:83:90:c0:ae:ee:5c:c6:e5:
         9d:14:eb:97:1e:d4:50:f4:84:d6:00:e8:f3:66:ce:c3:d8:dc:
         cf:8c:63:54:a8:a9:21:0a:40:24:41:8d:f1:10:b9:5f:dd:5f:
         85:0d:07:e1:26:30:5a:6e:a9:da:c5:f8:59:2b:54:6d:8d:06:
         87:dc:cf:8b:97:00:9c:4d:ea:fe:a1:9d:69:c0:fd:9a:d1:29:
         da:6a:5f:cc:c9:cb:a7:57:a5:e0:40:cf:c0:7f:76:2b:60:00:
         fe:78:a6:e0:24:00:3c:ad:db:18:07:3d:8b:aa:5a:ed:1e:2a:
         29:61:56:82:fd:cf:d2:ee:3d:55:f7:fc:cb:7d:68:48:1d:00:
         0b:52:8a:a8:5c:bd:df:4f:7c:17:8c:d4:f5:3a:59:35:36:a4:
         52:0e:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:19 2025 by rpki-client