Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa
File:                     3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa (raw, json)
Hash identifier:          24b5K0xwQxvchxBIR2TatdWt9KDpsCRrmXVxDORTkdk=
Subject key identifier:   FB:D9:01:67:C2:9E:96:88:80:FD:0D:46:8F:C7:BC:14:28:59:8E:32
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       542737EA251A4936ACD6B5AD0080098323B8392B
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:11:33 +0000
ROA not before:           Tue 04 Feb 2025 18:06:33 +0000
ROA not after:            Tue 03 Feb 2026 18:11:33 +0000
asID:                     272082
IP address blocks:        181.232.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:27:37:ea:25:1a:49:36:ac:d6:b5:ad:00:80:09:83:23:b8:39:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:33 2025 GMT
            Not After : Feb  3 18:11:33 2026 GMT
        Subject: CN=FBD90167C29E968880FD0D468FC7BC1428598E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:63:67:e4:72:8d:8b:bc:ca:c6:a0:ae:81:
                    4b:de:59:9e:e0:01:be:2d:b1:32:df:57:74:33:9a:
                    4d:d5:4d:f5:d3:97:bc:c6:16:dd:f1:4a:8a:40:5f:
                    ca:a0:25:02:24:95:9e:db:3c:1f:a3:d4:e1:88:e8:
                    40:9e:80:35:b2:91:7e:0f:50:a7:a3:74:4f:0d:6a:
                    ef:c7:6b:67:e6:ed:c7:88:e5:4f:ba:60:2b:26:f8:
                    86:11:ca:9c:27:15:95:c5:26:75:f9:6e:59:41:ef:
                    99:32:0c:59:ce:d6:69:57:f5:17:8b:23:68:2a:e5:
                    73:87:9a:dc:65:bd:05:45:bf:72:06:6f:25:ff:b4:
                    94:e9:bd:22:12:01:28:1b:68:3b:0a:46:39:56:c6:
                    c9:09:ff:d2:d5:af:5c:6f:f0:74:0a:a1:fd:01:9a:
                    ec:54:96:dd:1a:29:70:63:4a:67:ff:57:7f:51:43:
                    d6:2d:70:18:e0:58:70:0b:0d:eb:15:c6:30:fd:f7:
                    72:06:66:0d:38:b9:64:5a:4c:e6:39:75:f9:9e:2c:
                    dd:57:5d:cf:c6:0c:e8:d1:df:e6:2a:5e:3a:a9:8e:
                    91:70:39:1f:ab:e7:7c:2b:d7:21:5a:41:18:12:a3:
                    19:b5:64:40:22:99:e5:dd:7a:3b:77:8b:3d:86:68:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D9:01:67:C2:9E:96:88:80:FD:0D:46:8F:C7:BC:14:28:59:8E:32
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:57:4a:67:29:c3:f8:ae:65:b1:02:62:02:19:4b:85:fd:19:
         df:c8:f3:9c:88:13:7a:a8:54:f6:96:b4:b3:9e:9c:33:91:e8:
         e8:4c:78:b0:f6:d3:28:ab:8d:75:20:20:73:64:ac:0d:26:fe:
         e2:bd:ea:03:8c:f6:f2:16:f5:83:d8:4e:52:5a:31:85:9d:48:
         8f:10:d9:93:26:15:61:19:3f:9f:0e:67:94:6e:59:78:d9:cd:
         a3:36:c9:dd:36:8a:f4:8c:85:a8:48:f4:50:53:b6:c4:06:31:
         8d:1b:b7:e5:f4:1e:4c:e8:09:a4:95:b1:12:a9:85:bb:73:ce:
         40:de:a3:3c:f6:22:6f:e4:59:3e:c6:99:5d:6f:d2:6a:93:81:
         9e:0e:e8:53:a9:c7:06:2b:65:23:2f:9a:48:ba:ca:0d:f0:c6:
         71:ef:bd:d7:0b:45:09:3c:e3:02:ae:11:e5:59:7f:ec:e1:f2:
         ab:f0:2c:75:7b:14:6d:5f:f2:8e:74:b5:25:78:ff:bf:fa:d1:
         c5:10:68:b8:99:a3:52:f2:25:78:3a:1a:7e:3d:1f:41:c6:4c:
         e2:14:81:e7:8b:23:2c:94:85:07:cf:3f:34:ca:31:83:5a:34:
         e9:bd:8b:e6:07:41:6f:b1:6a:13:75:b7:8c:e8:b1:10:86:51:
         43:8b:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:37 2025 by rpki-client