Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e20323732303637.roa
File:                     3138312e3232342e3139372e302f32342d3234203d3e20323732303637.roa (raw, json)
Hash identifier:          5sbOM+45ard03gsR7tpIDQvVdIxApguZ8uQQxpcBsaU=
Subject key identifier:   83:86:7F:F3:BC:41:D1:91:9A:B5:32:F8:93:44:E7:D1:81:41:B5:2B
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       0AF16053E124210BC61C03D9F6D3634A365046F6
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e20323732303637.roa
Signing time:             Tue 04 Feb 2025 18:53:35 +0000
ROA not before:           Tue 04 Feb 2025 18:48:35 +0000
ROA not after:            Tue 03 Feb 2026 18:53:35 +0000
asID:                     272067
IP address blocks:        181.224.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f1:60:53:e1:24:21:0b:c6:1c:03:d9:f6:d3:63:4a:36:50:46:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Feb  4 18:48:35 2025 GMT
            Not After : Feb  3 18:53:35 2026 GMT
        Subject: CN=83867FF3BC41D1919AB532F89344E7D18141B52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:b8:7a:64:41:70:f5:47:b9:90:81:53:4a:
                    27:41:71:12:6e:5c:c7:e4:bd:34:a6:5b:48:a9:ff:
                    cd:38:98:e7:77:4a:4b:f5:f4:99:1e:4f:1a:69:7e:
                    04:d0:a0:03:0a:db:97:c3:88:15:ee:a0:c4:95:c9:
                    10:b3:5e:3c:1a:62:65:22:8e:d8:61:02:42:d4:6f:
                    24:48:d4:ce:bf:00:06:13:14:38:3c:3a:9b:50:d4:
                    6f:40:73:28:32:b8:d9:06:41:b1:64:5f:dd:95:47:
                    27:d8:f4:a3:4e:d0:ed:a6:05:71:44:95:78:ca:78:
                    c0:b4:09:ca:3e:ff:61:36:40:7c:20:03:99:6b:e9:
                    a5:1d:a1:19:0d:ab:98:d8:1a:9b:14:f0:cf:d8:70:
                    65:a5:0c:f2:f3:ce:a8:c6:f3:c1:8b:84:24:fc:bf:
                    cf:6f:84:47:7c:77:63:16:b1:04:dd:24:8c:cd:4f:
                    2a:78:20:ee:fa:48:e7:a2:2a:5e:cf:62:a4:87:ca:
                    2c:d3:53:43:28:ef:22:98:47:26:40:e3:0b:f4:6f:
                    22:93:27:0a:9d:25:46:9f:9c:4d:1b:cb:38:64:d9:
                    2e:a0:4b:c1:ae:e2:4e:d2:ac:3f:d6:69:bd:b6:fc:
                    a6:47:e7:6e:90:82:b3:41:f9:8f:20:12:71:33:f8:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:7F:F3:BC:41:D1:91:9A:B5:32:F8:93:44:E7:D1:81:41:B5:2B
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e20323732303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a4:e3:c0:7b:ff:17:75:3f:e2:83:2c:82:81:be:68:76:4d:
         95:4d:56:23:81:24:80:24:b8:b3:d3:1f:fb:5d:e5:ed:97:5f:
         57:5f:bb:12:e8:1b:b3:3e:0b:6c:97:af:68:1b:12:06:7f:9d:
         a3:a4:4b:b7:58:4a:a6:55:4b:0a:c5:e8:3f:a2:c8:4e:38:3e:
         cf:78:7b:70:83:e2:d5:eb:e2:bb:9d:c4:bf:d3:e7:2b:82:d6:
         4e:e9:81:15:47:7b:cc:fd:79:3a:51:27:ab:22:b0:8a:1a:10:
         0b:e1:d8:d6:6c:ac:fa:3c:7c:91:3b:7b:45:2c:fd:6b:7b:02:
         79:35:e4:9b:9a:a1:c6:58:c8:7f:90:92:e8:4f:9f:c6:06:ae:
         b0:ac:d7:42:19:d3:61:6f:eb:ac:36:54:31:95:42:a8:2d:29:
         a7:a1:fc:0b:e5:b8:b7:90:d0:e1:e0:72:ad:f1:1b:76:dd:f2:
         7f:76:6c:2b:0e:3b:03:7c:03:9e:f0:33:92:87:d3:73:30:8e:
         46:aa:58:7a:16:9b:df:d8:67:f2:56:72:d0:5b:c0:9c:c9:cd:
         04:51:50:25:7f:54:06:32:9a:db:14:7c:d8:53:48:73:15:44:
         c4:58:bf:08:1b:ba:8c:0b:62:d2:e1:35:d9:f1:0a:36:b2:67:
         d5:cc:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:08 2025 by rpki-client