Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/3138312e3139312e33362e302f32322d3234203d3e20323636373637.roa
File:                     3138312e3139312e33362e302f32322d3234203d3e20323636373637.roa (raw, json)
Hash identifier:          fXKAt7ILPreMWTNUC7/qWz5rWMhMCuaZhZKU6yJ42lg=
Subject key identifier:   90:70:D6:AE:CE:58:12:5F:AF:BB:F2:D3:56:E3:72:8B:4C:EA:C7:EA
Certificate issuer:       /CN=B639E65ACFC73F2B9C830A20801066140D1966F6
Certificate serial:       3A1139EA26926E0FE35A1FDBCF1ED51AC0AA00A5
Authority key identifier: B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/3138312e3139312e33362e302f32322d3234203d3e20323636373637.roa
Signing time:             Tue 04 Feb 2025 20:07:15 +0000
ROA not before:           Tue 04 Feb 2025 20:02:15 +0000
ROA not after:            Tue 03 Feb 2026 20:07:15 +0000
asID:                     266767
IP address blocks:        181.191.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:11:39:ea:26:92:6e:0f:e3:5a:1f:db:cf:1e:d5:1a:c0:aa:00:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B639E65ACFC73F2B9C830A20801066140D1966F6
        Validity
            Not Before: Feb  4 20:02:15 2025 GMT
            Not After : Feb  3 20:07:15 2026 GMT
        Subject: CN=9070D6AECE58125FAFBBF2D356E3728B4CEAC7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:ff:66:c8:bd:08:6d:9f:1b:b9:4a:1c:a8:
                    ad:b4:46:3a:d0:f1:eb:d6:0a:10:f6:0e:28:49:e3:
                    37:81:0f:ab:79:4e:73:54:99:fe:45:a2:12:0e:23:
                    f3:12:51:01:0f:c3:51:0d:dc:d7:c0:4f:87:ef:ea:
                    4c:45:65:61:96:c7:5f:3e:ad:c0:d2:3f:80:71:3c:
                    c1:ff:fd:15:44:85:e2:34:1f:b9:d0:2f:27:ec:9c:
                    d4:5a:dc:f3:53:fa:69:02:f1:4f:75:f4:38:31:d6:
                    4f:05:22:03:44:ea:2f:97:e8:55:25:90:7e:46:d7:
                    49:7d:ff:53:6e:e7:bf:b6:a7:a7:f9:df:0c:2c:25:
                    e8:33:77:fe:4f:16:d0:da:04:37:20:30:e1:f9:48:
                    3e:b3:80:db:0e:63:db:20:f9:13:b1:33:a2:14:56:
                    60:27:45:ed:80:4d:f7:d1:4b:c0:27:cb:ab:33:b3:
                    53:f4:e2:43:34:32:73:e1:a9:6d:91:ab:a8:f3:24:
                    19:21:32:9a:c2:c3:ed:c6:ee:fe:55:db:25:58:ce:
                    b5:d8:b6:b6:f8:cc:f4:04:51:30:ad:a1:8b:f7:0f:
                    e3:ff:da:9f:da:78:ce:d3:35:d7:2b:9f:48:8e:6f:
                    40:8c:31:f6:e1:9c:5d:82:e1:6f:79:d0:e6:0a:0f:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:D6:AE:CE:58:12:5F:AF:BB:F2:D3:56:E3:72:8B:4C:EA:C7:EA
            X509v3 Authority Key Identifier:
                keyid:B6:39:E6:5A:CF:C7:3F:2B:9C:83:0A:20:80:10:66:14:0D:19:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/B639E65ACFC73F2B9C830A20801066140D1966F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B639E65ACFC73F2B9C830A20801066140D1966F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/747704800E6FCA522881230A2197A1BA97D91F8E7066CA4E0DBF407B4B42011E/0/3138312e3139312e33362e302f32322d3234203d3e20323636373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:8c:95:ec:87:49:e2:50:7a:70:d3:87:69:07:5c:61:5b:d9:
         ea:56:6d:09:9f:29:33:f9:20:9e:7a:34:9a:5f:72:c7:90:fd:
         69:49:8e:54:eb:11:c3:d1:42:9d:1e:12:fa:c0:8a:82:6b:3e:
         54:95:85:2e:72:16:71:de:f1:40:6e:b8:a0:7c:a7:23:82:93:
         db:5d:c2:00:08:37:ce:cf:ff:03:71:8f:d2:d6:68:09:0c:1d:
         ae:9a:f7:2e:c6:8d:b6:9d:7a:14:06:56:57:00:81:20:b8:67:
         31:da:59:57:30:c6:eb:0d:72:15:f7:ce:c1:97:cb:95:ce:fc:
         4a:e1:fc:66:6e:f0:ac:8d:27:f3:1b:a8:ef:97:61:01:e1:eb:
         31:0a:21:45:eb:29:f5:52:2d:4a:ce:54:3a:dd:1c:70:84:b4:
         bf:47:b3:54:2b:ea:37:0c:a0:c3:a0:4b:83:11:78:b2:9e:b8:
         c5:a8:03:72:25:23:5e:67:7c:33:79:69:a6:bf:97:92:4e:c1:
         e9:f7:81:0b:63:aa:be:2c:50:48:88:55:d1:7b:d6:7e:c6:4b:
         0f:21:e0:b7:30:4f:0b:49:ca:92:72:0f:a7:ed:0e:82:93:e1:
         b3:7a:62:f9:5b:65:34:8d:60:97:42:1d:74:d8:09:c0:9f:af:
         1a:d4:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:38:12 2025 by rpki-client