Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31342e302f32342d3234203d3e203235373939.roa
File:                     3138312e3131342e31342e302f32342d3234203d3e203235373939.roa (raw, json)
Hash identifier:          NDcL3twJZrl55aAdEwRkI6oGl9yR3uClXSBI833k5EY=
Subject key identifier:   95:12:04:11:E9:EE:64:70:9B:3D:D1:1D:19:7B:0C:2C:41:9F:7F:4C
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       2DAC7CC35D7FD47C0216B0FB538E67E0ABCC9FB5
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31342e302f32342d3234203d3e203235373939.roa
Signing time:             Wed 12 Feb 2025 18:00:00 +0000
ROA not before:           Wed 12 Feb 2025 17:55:00 +0000
ROA not after:            Wed 11 Feb 2026 18:00:00 +0000
asID:                     25799
IP address blocks:        181.114.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ac:7c:c3:5d:7f:d4:7c:02:16:b0:fb:53:8e:67:e0:ab:cc:9f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Feb 12 17:55:00 2025 GMT
            Not After : Feb 11 18:00:00 2026 GMT
        Subject: CN=95120411E9EE64709B3DD11D197B0C2C419F7F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:54:f6:28:79:9d:23:09:10:63:f0:75:27:
                    df:95:a5:8a:ad:b7:97:1b:02:ae:14:5b:02:f7:12:
                    8d:f5:fd:74:96:65:7c:0a:01:b4:37:2b:f2:66:de:
                    32:10:9e:cd:6b:4a:98:4e:c8:c6:9f:22:02:93:42:
                    b3:9b:a2:cb:b2:3e:09:52:0f:e9:68:7f:0c:ab:c4:
                    a1:2f:b9:52:15:6b:b1:93:56:97:da:71:b6:a2:b6:
                    01:ab:02:ec:db:3c:50:b6:af:1d:8c:80:ef:d0:92:
                    28:db:b3:b5:a0:65:6d:2f:00:14:54:4f:e1:15:05:
                    8e:aa:3a:7a:29:40:19:6d:aa:5e:71:49:d0:49:ed:
                    8d:dd:69:1d:79:ff:27:60:79:0d:2e:0e:5a:04:ee:
                    9a:78:fb:e6:e4:88:ba:6e:d1:00:b7:06:92:e5:c6:
                    f7:87:78:5c:66:ea:07:05:4f:59:7f:cb:bb:42:c6:
                    a2:eb:d3:14:ae:01:0a:23:db:e0:32:de:f8:0e:7a:
                    51:50:f1:59:ec:1f:86:8f:ea:d6:30:17:10:0d:b7:
                    a5:20:26:6d:1a:f0:40:3a:e4:aa:77:b0:03:48:c1:
                    5d:4a:ea:15:6f:ed:82:c8:f0:d2:96:f7:f5:b2:3d:
                    e8:04:e9:b2:c4:22:f9:45:91:7f:ea:cf:7a:e2:cb:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:12:04:11:E9:EE:64:70:9B:3D:D1:1D:19:7B:0C:2C:41:9F:7F:4C
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31342e302f32342d3234203d3e203235373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:e0:ea:2a:4b:eb:21:1b:58:71:e3:bd:f9:c4:11:74:79:
         47:8b:4e:68:8e:59:62:00:0e:d7:bf:b4:bf:24:ba:fb:5e:0f:
         a1:4f:0b:88:20:06:f8:54:7c:84:bd:b5:38:58:2a:23:a7:6c:
         cc:4e:d3:05:3d:e7:32:f8:00:55:f4:b7:b2:b3:ce:99:a5:64:
         62:fd:59:5a:20:6a:98:dd:4a:e1:c0:a2:79:08:7a:31:0e:fc:
         82:72:26:fe:67:49:5e:18:13:31:c8:80:f0:6b:7f:d5:40:2c:
         32:42:29:50:79:2d:91:4d:92:02:02:a9:15:88:b2:13:8a:88:
         7b:cc:d6:fa:59:ab:79:22:4b:a8:a8:fe:c3:44:52:bb:9b:d2:
         a7:70:17:1d:14:cf:72:cb:da:f2:89:4d:61:58:de:7e:9e:a0:
         ad:a5:7e:a9:fb:93:ca:d9:53:6f:ac:7e:37:67:73:66:09:29:
         40:04:da:c2:4d:f5:e2:18:8f:75:31:36:cf:70:81:af:86:b2:
         4d:80:0b:6b:7d:22:75:11:6f:c3:6b:67:30:c5:73:da:b3:bf:
         6a:c5:af:10:2e:9c:97:18:69:cf:bf:b5:e4:32:da:ae:40:4a:
         41:1a:eb:ca:1d:70:2d:f6:f1:4e:1b:9e:bd:e0:be:4b:e3:3b:
         5b:5a:24:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULax8w11/1HwCFrD7U45n4KvMn7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxREUwNDlBQzNDOTMyNjMxNzg1RDc5RTY1NjlBQjdD
RjU3QTM0MDAeFw0yNTAyMTIxNzU1MDBaFw0yNjAyMTExODAwMDBaMDMxMTAvBgNV
BAMTKDk1MTIwNDExRTlFRTY0NzA5QjNERDExRDE5N0IwQzJDNDE5RjdGNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PFT2KHmdIwkQY/B1J9+VpYqt
t5cbAq4UWwL3Eo31/XSWZXwKAbQ3K/Jm3jIQns1rSphOyMafIgKTQrObosuyPglS
D+lofwyrxKEvuVIVa7GTVpfacbaitgGrAuzbPFC2rx2MgO/Qkijbs7WgZW0vABRU
T+EVBY6qOnopQBltql5xSdBJ7Y3daR15/ydgeQ0uDloE7pp4++bkiLpu0QC3BpLl
xveHeFxm6gcFT1l/y7tCxqLr0xSuAQoj2+Ay3vgOelFQ8VnsH4aP6tYwFxANt6Ug
Jm0a8EA65Kp3sANIwV1K6hVv7YLI8NKW9/WyPegE6bLEIvlFkX/qz3riy4R5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlRIEEenuZHCbPdEdGXsMLEGff0wwHwYDVR0j
BBgwFoAUJB3gSaw8kyYxeF155laat89Xo0AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDhGNTFCMUQxNjU3QkYzNjY2MTQ1MTFBMjA1ODFCREVE
MDNCMzJGQkNENUU5RDQ3MUFGOTg2QkE0MzYyMTFCLzAvMjQxREUwNDlBQzNDOTMy
NjMxNzg1RDc5RTY1NjlBQjdDRjU3QTM0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDFERTA0OUFDM0M5MzI2MzE3
ODVENzlFNjU2OUFCN0NGNTdBMzQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQ4RjUxQjFEMTY1N0JGMzY2NjE0NTExQTIwNTgxQkRFRDAzQjMyRkJD
RDVFOUQ0NzFBRjk4NkJBNDM2MjExQi8wLzMxMzgzMTJlMzEzMTM0MmUzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTM3MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALVyDjAN
BgkqhkiG9w0BAQsFAAOCAQEAKZvg6ipL6yEbWHHjvfnEEXR5R4tOaI5ZYgAO17+0
vyS6+14PoU8LiCAG+FR8hL21OFgqI6dszE7TBT3nMvgAVfS3srPOmaVkYv1ZWiBq
mN1K4cCieQh6MQ78gnIm/mdJXhgTMciA8Gt/1UAsMkIpUHktkU2SAgKpFYiyE4qI
e8zW+lmreSJLqKj+w0RSu5vSp3AXHRTPcsva8olNYVjefp6graV+qfuTytlTb6x+
N2dzZgkpQATawk314hiPdTE2z3CBr4ayTYALa30idRFvw2tnMMVz2rO/asWvEC6c
lxhpz7+15DLarkBKQRrryh1wLfbxThueveC+S+M7W1okiA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:58 2025 by rpki-client