Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa
File:                     3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa (raw, json)
Hash identifier:          ETgofM8QYITwnZVRDCqSRPKnJO84DpLZCuaSlnxVsXc=
Subject key identifier:   E5:E6:A3:61:EB:31:BA:30:EB:F3:A0:3B:A2:D2:CF:F5:B5:21:3B:1D
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       361E08263AE7B24D5ADCDAA9B549675710234B1B
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:39 +0000
ROA not before:           Tue 04 Feb 2025 18:06:39 +0000
ROA not after:            Tue 03 Feb 2026 18:11:39 +0000
asID:                     271935
IP address blocks:        181.232.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 11:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1e:08:26:3a:e7:b2:4d:5a:dc:da:a9:b5:49:67:57:10:23:4b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:39 2025 GMT
            Not After : Feb  3 18:11:39 2026 GMT
        Subject: CN=E5E6A361EB31BA30EBF3A03BA2D2CFF5B5213B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:43:14:b5:6d:04:c8:62:3f:35:ab:42:65:
                    ef:e9:0c:cf:b4:a7:82:4d:e3:43:68:6b:7c:06:e2:
                    73:38:a1:33:07:90:d0:b6:f5:60:54:3d:e4:97:7d:
                    00:b9:15:31:ab:b2:3b:bb:c0:c7:98:69:f5:ab:13:
                    61:bf:02:d0:75:8a:1a:b8:79:5a:eb:05:0a:62:c5:
                    48:52:05:85:6f:ed:e0:e3:c3:93:a0:bb:f0:0e:ec:
                    d0:3f:c0:65:cb:ab:a4:5f:14:b3:a0:71:fd:c1:14:
                    c3:79:98:f1:1b:b4:31:6e:aa:1a:9e:c0:21:23:ed:
                    d2:75:49:97:9e:39:5b:51:e9:38:7b:7a:b7:5b:ce:
                    20:06:92:6c:22:f1:cd:e5:e6:07:8d:4d:0e:79:53:
                    ad:48:aa:98:e8:3b:e6:6d:d3:c7:0d:ab:1a:cc:fc:
                    b6:cc:9b:17:ac:26:34:48:c2:43:b4:79:dc:81:5d:
                    2d:68:9c:d1:e7:b2:a7:e1:a9:1e:97:52:9a:34:83:
                    93:06:89:13:bf:7f:e4:a3:36:0b:2f:b0:88:6a:00:
                    5a:ff:b3:16:73:c4:ea:75:18:08:10:3b:a5:90:0d:
                    98:9c:f5:22:49:84:19:d5:c8:c7:f3:79:37:55:69:
                    10:4c:87:19:92:fa:95:5c:6f:93:1e:b0:0a:cc:1f:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E6:A3:61:EB:31:BA:30:EB:F3:A0:3B:A2:D2:CF:F5:B5:21:3B:1D
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:48:48:f0:1b:de:42:89:16:a4:d1:90:63:4b:e7:eb:32:1d:
         32:e7:f4:61:4b:9d:cf:ee:f0:ce:58:51:3d:fb:aa:17:b5:19:
         58:59:db:fd:e9:5f:bc:c5:93:e9:16:e6:46:f9:3f:4e:6f:be:
         34:6d:f1:3f:8a:bd:70:62:f0:c1:c7:3d:d2:08:3d:90:2a:64:
         4a:b4:4a:15:99:8f:c2:12:ca:9b:5e:72:3f:68:de:a9:5f:8b:
         80:1d:c6:75:3b:d9:a3:45:57:9a:13:5b:7c:5d:4b:49:1a:d8:
         bd:5b:16:e1:d6:95:42:d0:61:20:2a:84:7b:5e:4d:9b:a9:47:
         f8:a3:fc:43:dd:b1:fd:fd:48:3f:01:71:44:3a:9a:87:0e:05:
         7c:65:f5:d1:b6:07:65:a7:56:51:ce:7e:c0:e0:2e:9c:38:5d:
         6f:5b:f6:71:51:d7:dc:78:6b:7f:8e:93:48:b9:ac:f0:e3:16:
         a7:a5:d9:d9:35:14:f0:2d:d6:bd:f7:86:28:47:51:04:32:c8:
         69:a6:6b:db:e7:a1:0d:0b:a4:6e:70:1b:6b:7e:f9:50:42:a9:
         15:b4:9b:45:29:78:b8:f4:7c:29:5e:a5:03:81:ec:ea:03:80:
         7b:9f:c1:b6:bb:31:b5:a6:bb:8b:5d:a2:e9:2f:20:8d:82:d1:
         2b:6f:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:10 2025 by rpki-client