Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa
File:                     3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          CAR5nhY6HBOONcGps5kKAx+1GGlLoWJ2LxLSqcc7pms=
Subject key identifier:   8E:F2:1D:F2:03:E9:C6:B2:1C:55:FF:2E:A3:44:BF:76:6E:68:32:98
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       61B0046C57D5A3B6E1F1E3A01F6892CD41436499
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa
Signing time:             Sat 05 Apr 2025 11:14:00 +0000
ROA not before:           Sat 05 Apr 2025 11:09:00 +0000
ROA not after:            Sat 04 Apr 2026 11:14:00 +0000
asID:                     262191
IP address blocks:        181.189.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b0:04:6c:57:d5:a3:b6:e1:f1:e3:a0:1f:68:92:cd:41:43:64:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Apr  5 11:09:00 2025 GMT
            Not After : Apr  4 11:14:00 2026 GMT
        Subject: CN=8EF21DF203E9C6B21C55FF2EA344BF766E683298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:f7:3f:7b:2b:d0:81:a3:92:20:79:dc:57:
                    f5:9f:4e:fb:8d:0f:3d:eb:9b:42:72:08:d7:59:25:
                    8b:73:e8:56:ac:03:e9:17:0a:31:bb:73:36:73:aa:
                    ca:2d:71:62:da:3b:b1:93:fa:a6:e6:f0:11:3d:74:
                    f8:6b:80:23:94:86:1b:da:94:29:9a:0b:c4:2a:85:
                    8a:c8:9e:cb:4c:ac:59:1a:56:c0:5a:61:fd:de:3d:
                    c7:be:12:43:15:18:09:92:9b:f3:dc:c9:3a:7a:45:
                    8d:b0:50:5d:9a:39:d5:11:41:15:10:07:cc:82:7a:
                    83:bd:c1:f3:ce:2f:19:48:bb:17:d4:77:d7:23:1d:
                    d7:7b:7e:df:ce:3e:1e:07:c8:7b:df:0a:99:a5:85:
                    60:00:f7:12:df:6c:27:16:1e:6f:3a:c7:73:fd:4c:
                    42:81:1c:98:91:e7:d4:a7:9f:78:61:f1:cb:43:fd:
                    50:44:5b:8a:70:c5:b3:80:58:8f:66:b4:d0:05:25:
                    15:cb:f2:a3:53:af:a2:d7:32:25:6b:ad:75:bc:09:
                    2d:dc:d3:0f:ae:fe:7e:a2:3b:9c:3b:34:76:e1:1b:
                    df:db:e2:87:ba:f2:73:a8:6f:6b:d1:67:bb:dd:ac:
                    4e:5a:9f:26:c9:1d:4a:bf:b4:15:28:7a:5d:80:6a:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:1D:F2:03:E9:C6:B2:1C:55:FF:2E:A3:44:BF:76:6E:68:32:98
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:7e:02:e3:b6:bf:0c:3d:cd:19:2b:d9:d0:59:5c:69:97:
         16:6a:b8:a9:60:bb:fe:02:4c:9c:10:54:36:ca:18:6f:9e:38:
         fa:4f:fa:9a:a5:ef:f8:99:76:20:af:40:63:75:6f:9a:85:f7:
         ed:89:8d:49:41:75:32:a6:b7:94:b2:72:c0:48:34:09:23:17:
         a9:07:28:79:2f:d9:22:18:8a:88:3e:42:1c:53:21:10:fb:f9:
         72:3c:d9:56:c5:25:56:4f:b3:1c:0a:c1:9e:22:6c:31:a5:be:
         af:88:0a:b4:e6:45:a5:4d:90:e6:f0:bf:e6:79:30:71:a4:cd:
         40:ac:0d:ab:07:31:c1:79:72:a5:0d:f3:e6:31:98:27:1e:9c:
         51:69:26:a1:a1:dd:bc:e3:74:72:5f:9b:e1:c8:cb:af:27:c4:
         eb:1c:9f:4a:7b:96:b2:8b:3d:3b:63:e4:e7:9b:da:ea:4c:f0:
         28:2e:bd:e7:75:05:93:de:a5:2a:87:94:db:9c:9e:56:b0:b8:
         dc:c3:50:5e:e4:e2:d5:47:24:e5:f7:de:46:98:6a:04:b6:da:
         b4:fc:b3:47:1d:cd:3b:bf:c8:7b:91:84:5c:b6:d8:85:e8:77:
         1b:91:8f:ae:13:25:6b:64:6d:0e:7f:ea:7f:6a:43:95:17:50:
         45:7b:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:59 2025 by rpki-client