Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31362d3136203d3e203238303234.roa
File:                     3138312e3232372e302e302f31362d3136203d3e203238303234.roa (raw, json)
Hash identifier:          HZ9tnf50LEnatC0isGCh0cdGwwo2PuuaPCtCIxpsI8M=
Subject key identifier:   60:3E:BC:6B:68:6F:27:6B:5E:E1:AE:74:B0:30:DB:32:CC:3E:5F:7F
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       27EE452ACF2A7B1A9618CB6529BAA17EC8B073B6
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31362d3136203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:11 +0000
ROA not before:           Tue 04 Feb 2025 17:58:11 +0000
ROA not after:            Tue 03 Feb 2026 18:03:11 +0000
asID:                     28024
IP address blocks:        181.227.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ee:45:2a:cf:2a:7b:1a:96:18:cb:65:29:ba:a1:7e:c8:b0:73:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:11 2025 GMT
            Not After : Feb  3 18:03:11 2026 GMT
        Subject: CN=603EBC6B686F276B5EE1AE74B030DB32CC3E5F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:0d:b8:8f:80:70:73:f5:ee:08:8d:cc:68:
                    ec:5f:91:69:ef:17:4d:ea:60:d1:dc:6e:50:c4:b4:
                    61:06:aa:40:95:88:fa:9a:e9:c3:ad:70:ba:2e:d5:
                    76:32:97:57:3f:d4:5c:bd:68:a8:42:4b:80:41:74:
                    34:42:ea:25:97:5d:e3:ab:76:ab:c7:d0:c6:59:d3:
                    17:97:87:09:da:74:ba:77:4a:ab:fe:84:43:f4:43:
                    cc:e4:56:75:29:8c:3d:d2:ba:67:0b:84:cb:dd:68:
                    a6:d9:5c:62:ee:f4:b2:52:87:d7:fe:f1:a9:0e:ca:
                    ec:0e:bf:90:09:37:23:fd:91:9d:f5:bb:fc:53:59:
                    d9:05:86:4c:96:0e:30:65:aa:47:18:6e:ca:c3:09:
                    af:87:7a:c6:5c:b2:e2:84:b8:32:b1:aa:e5:bd:97:
                    cf:b6:80:a6:3f:d0:34:44:6a:57:5a:ea:81:68:24:
                    77:73:8f:a6:02:f6:a1:14:be:22:c9:4d:5a:1d:f1:
                    3e:71:1a:df:78:7b:35:71:b6:bb:f0:58:cf:27:ca:
                    2f:5d:94:c9:46:c5:3a:18:37:b7:6e:13:1f:87:0c:
                    1b:a1:01:4b:10:7f:91:c4:92:10:e6:8d:0c:19:fa:
                    0e:0e:b2:e4:c1:dd:5f:3e:c2:50:a0:51:78:09:7b:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3E:BC:6B:68:6F:27:6B:5E:E1:AE:74:B0:30:DB:32:CC:3E:5F:7F
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31362d3136203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:49:81:6d:4e:fb:c1:cd:fd:9b:f2:ba:7c:d2:b8:4d:59:
         ba:c2:b4:14:3d:f0:29:62:ea:60:4d:c8:e3:75:6a:6e:ac:a7:
         41:b6:6b:dd:65:40:70:41:64:ef:50:60:a7:1f:c1:bc:e7:eb:
         b1:b9:7d:4e:3a:c1:74:be:0f:f5:3a:2e:0b:f5:69:c4:18:f4:
         70:19:e7:4c:4c:b7:a1:f4:21:16:28:90:6a:8b:e5:3c:32:5b:
         56:9d:80:c2:58:ad:3d:64:c0:28:e8:7c:6a:ae:6f:36:85:a8:
         e4:23:70:94:2f:7d:f2:c6:80:b1:e7:09:68:85:eb:a6:00:a8:
         4f:31:71:da:e9:45:97:8d:38:ff:6a:3c:18:b5:62:8c:bf:5c:
         00:21:d9:1a:97:34:7c:5c:d9:12:20:d6:93:84:43:69:ff:85:
         49:a6:c4:01:d1:09:52:14:a2:c3:ca:3a:bf:68:5a:93:98:ea:
         e8:c6:9a:b8:46:f4:62:74:b0:0b:51:86:4d:56:ea:0c:44:36:
         bf:1e:f3:a3:ba:53:59:df:61:7b:b2:f4:da:ea:fc:72:d7:77:
         ad:7d:c2:73:ea:43:69:1c:4f:4c:aa:eb:16:16:c6:96:70:f0:
         d8:6c:0b:73:5b:68:e3:3f:be:76:4a:6e:0b:04:92:e8:b0:d0:
         8e:f7:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:39:09 2025 by rpki-client