Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e31362e36342e302f31382d3234203d3e203237393834.roa
File:                     3138312e31362e36342e302f31382d3234203d3e203237393834.roa (raw, json)
Hash identifier:          iHwimyJBqtjUra3kOCxnRLHtUIC8uOW6Muxp02tNb60=
Subject key identifier:   33:8C:B4:41:BE:E3:CF:B2:E7:99:5E:FE:76:9A:B4:E2:A6:C3:33:96
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       3FC99E03A3962CAB3984F7D46070EA23DC0CF5BB
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e31362e36342e302f31382d3234203d3e203237393834.roa
Signing time:             Tue 04 Feb 2025 18:04:55 +0000
ROA not before:           Tue 04 Feb 2025 17:59:55 +0000
ROA not after:            Tue 03 Feb 2026 18:04:55 +0000
asID:                     27984
IP address blocks:        181.16.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c9:9e:03:a3:96:2c:ab:39:84:f7:d4:60:70:ea:23:dc:0c:f5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Feb  4 17:59:55 2025 GMT
            Not After : Feb  3 18:04:55 2026 GMT
        Subject: CN=338CB441BEE3CFB2E7995EFE769AB4E2A6C33396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:fb:75:b2:53:2f:04:8c:7d:33:6e:ee:6e:
                    a2:a6:fa:a7:54:cc:45:22:c7:47:ef:12:ec:61:74:
                    b2:4a:f0:d5:72:f6:3c:ca:59:aa:23:2e:ba:42:c7:
                    d8:65:91:f1:22:e1:5e:88:a8:9c:18:c6:ef:cd:27:
                    a2:99:96:37:75:66:8d:e4:68:94:6d:f2:1c:ac:b5:
                    70:2d:fd:a4:a9:8c:e4:02:9c:06:f1:4f:de:87:ec:
                    80:af:b8:dc:61:bb:fc:bb:39:4f:54:b1:5e:27:90:
                    81:76:a0:18:cd:d7:1a:7c:dc:41:2e:84:53:f4:eb:
                    66:2e:47:88:4a:b0:78:46:f7:f1:72:6f:fe:f2:60:
                    fe:fc:b7:c2:1c:68:5b:e6:60:21:66:af:d2:94:e8:
                    f0:32:8b:d1:15:18:15:4b:3f:39:3b:fd:42:6c:9d:
                    33:11:22:0a:ae:94:75:33:71:80:50:a9:f6:5e:e8:
                    74:b0:dd:7b:65:a1:fe:f8:8d:5c:89:5e:b4:7a:c9:
                    51:3e:41:b8:6c:d6:bb:73:6d:64:03:0b:0e:05:c7:
                    5f:8b:bd:99:1d:b9:78:69:8a:b5:00:7e:49:a2:0f:
                    ea:5c:e2:65:bd:0f:af:b6:9a:ce:ec:f8:9e:fe:40:
                    15:23:bc:8c:ed:03:6f:26:45:aa:19:fa:a3:fb:a0:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:B4:41:BE:E3:CF:B2:E7:99:5E:FE:76:9A:B4:E2:A6:C3:33:96
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e31362e36342e302f31382d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:1e:3f:43:6f:86:b5:55:c5:fd:81:ac:c8:a5:8a:f2:be:
         77:5a:3f:ad:a6:75:8c:c8:99:9a:24:d1:f2:ff:9c:04:89:69:
         3e:74:e7:45:20:a6:3c:cc:71:41:08:64:87:e4:29:03:c6:0e:
         c3:3a:f4:d8:6b:46:1f:39:a4:43:02:fc:5e:bc:46:d3:27:10:
         d0:99:ae:96:99:d7:d3:af:1a:9f:83:7e:a6:82:b5:7c:e4:b9:
         d2:55:9e:10:65:42:57:1e:e0:c9:cd:e4:90:d4:16:6f:0d:9a:
         4b:9d:a5:65:2d:63:a3:d7:65:30:f3:e4:03:e4:b5:a0:bc:3c:
         b2:c6:24:32:3f:39:a5:01:fc:34:69:20:45:eb:d3:2c:2d:6b:
         09:e9:a4:0d:cd:c2:2d:f8:2e:e0:a5:27:4e:b5:e0:ba:a4:14:
         05:02:05:f4:81:1b:66:02:94:ab:68:45:ce:ab:78:66:f8:c4:
         bc:63:59:50:c3:8a:fa:8e:3a:d3:41:94:73:7b:72:69:60:70:
         bc:0b:29:33:ca:7f:e6:06:67:35:42:b1:68:19:8d:73:b9:85:
         07:42:49:ef:86:ac:d8:b7:44:25:b8:a7:e5:14:fc:91:39:1b:
         c5:90:fa:1d:db:5e:3f:e8:9f:4a:3e:67:cd:b1:77:c8:f6:1c:
         bd:1b:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:36:35 2025 by rpki-client