Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e3139322e302f31382d3138203d3e203238303234.roa
File:                     3138312e3232372e3139322e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          cEav8GnKQ3Qas6P5dEWtTYCnz8UzDXhOteaaCUt5mwI=
Subject key identifier:   33:21:2F:51:5B:28:5F:8B:07:BB:F8:FD:15:7B:07:56:2F:10:D2:8A
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       6EBDD34F385572C368B627ED3A29E3A7BCD4CD46
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e3139322e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:00 +0000
ROA not before:           Tue 04 Feb 2025 17:58:00 +0000
ROA not after:            Tue 03 Feb 2026 18:03:00 +0000
asID:                     28024
IP address blocks:        181.227.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:d3:4f:38:55:72:c3:68:b6:27:ed:3a:29:e3:a7:bc:d4:cd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:00 2025 GMT
            Not After : Feb  3 18:03:00 2026 GMT
        Subject: CN=33212F515B285F8B07BBF8FD157B07562F10D28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:fa:3f:e8:2d:f4:55:2d:24:20:6c:0c:cb:
                    68:0f:bc:db:d4:73:e0:7a:f9:f1:b2:df:cd:cb:eb:
                    c2:45:b0:b3:30:88:23:4e:77:0d:00:a8:3c:cc:e1:
                    49:9c:6b:f4:a9:8a:22:c8:94:a7:f4:6e:9e:b0:25:
                    d2:09:02:e7:17:51:64:b3:f2:d2:5d:61:a7:5c:2a:
                    aa:ac:56:df:d1:5b:06:56:6d:f8:01:46:2b:a7:98:
                    5c:92:2c:ca:11:3b:e5:55:88:41:75:56:e1:6d:20:
                    54:79:f1:c1:44:cf:f7:da:d2:f9:ee:37:fa:be:06:
                    47:3a:d9:e8:fd:02:14:37:46:dc:49:54:93:f7:47:
                    99:3d:16:a3:83:db:2c:fa:11:0d:f4:37:48:91:60:
                    dd:31:f3:88:d7:7c:29:3f:fb:0f:75:7b:c0:2c:95:
                    29:70:1f:61:70:c9:06:9b:b7:df:99:66:71:8b:b5:
                    6d:ad:7b:02:82:77:c0:46:8d:7d:bf:5e:6d:09:a9:
                    e5:b8:8a:93:51:04:f2:42:03:75:03:ad:fc:16:68:
                    ca:13:ba:c6:67:24:19:bc:8b:e7:cf:08:96:13:7b:
                    4f:9d:da:6e:12:27:7a:7e:a4:20:a4:1b:ac:1b:9f:
                    e0:ad:56:4d:2c:c6:90:e8:9e:6c:94:6d:75:4d:5b:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:21:2F:51:5B:28:5F:8B:07:BB:F8:FD:15:7B:07:56:2F:10:D2:8A
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e3139322e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.227.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:73:fa:f4:3e:f5:46:69:29:f6:75:ac:96:c9:9f:6b:0e:0a:
         51:18:e0:14:58:f8:74:06:85:c3:50:05:a4:63:d9:08:92:ca:
         31:80:38:00:6d:7c:8d:bb:24:31:fd:77:42:9f:18:27:00:4e:
         94:ce:17:6e:e9:1d:8f:bd:f3:46:d4:7c:1a:73:ca:d4:ed:d7:
         e2:c6:0c:be:cf:c6:98:6d:10:69:01:98:dc:f9:54:9e:b3:b3:
         46:c9:53:94:91:3d:80:12:25:d5:cb:fa:8c:64:d0:17:2b:c5:
         be:88:5a:ee:d8:ec:33:37:6d:fd:07:e9:74:64:0f:44:6a:d2:
         17:e6:d1:61:3b:6b:9f:47:b5:8a:6a:ef:b5:ef:4b:52:26:f4:
         a9:3d:01:e2:e8:67:3d:8d:94:72:a2:ac:32:d7:a4:a9:a7:eb:
         c1:49:bb:64:f3:db:d5:ae:a4:c7:c1:d6:79:34:4d:35:99:6e:
         92:0d:ed:7a:8e:43:15:2b:47:fb:cd:cb:75:c8:ff:fc:36:6f:
         5f:79:cc:1b:50:ab:e2:30:b9:5a:8a:c5:54:32:fc:5d:78:09:
         8c:4e:57:88:03:8f:52:4a:7c:0e:7d:9c:09:2d:ee:5f:41:c1:
         72:65:7c:0e:33:fa:5f:2c:70:9b:7f:5a:0e:98:bd:6a:fc:5b:
         55:00:1e:03
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbr3TTzhVcsNotiftOinjp7zUzUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNTAyMDQxNzU4MDBaFw0yNjAyMDMxODAzMDBaMDMxMTAvBgNV
BAMTKDMzMjEyRjUxNUIyODVGOEIwN0JCRjhGRDE1N0IwNzU2MkYxMEQyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCph/o/6C30VS0kIGwMy2gPvNvU
c+B6+fGy383L68JFsLMwiCNOdw0AqDzM4Umca/SpiiLIlKf0bp6wJdIJAucXUWSz
8tJdYadcKqqsVt/RWwZWbfgBRiunmFySLMoRO+VViEF1VuFtIFR58cFEz/fa0vnu
N/q+Bkc62ej9AhQ3RtxJVJP3R5k9FqOD2yz6EQ30N0iRYN0x84jXfCk/+w91e8As
lSlwH2FwyQabt9+ZZnGLtW2tewKCd8BGjX2/Xm0JqeW4ipNRBPJCA3UDrfwWaMoT
usZnJBm8i+fPCJYTe0+d2m4SJ3p+pCCkG6wbn+CtVk0sxpDonmyUbXVNW689AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMyEvUVsoX4sHu/j9FXsHVi8Q0oowHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzgzMTJlMzIzMjM3MmUzMTM5MzIy
ZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzMjM4MzAzMjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGtePA
MA0GCSqGSIb3DQEBCwUAA4IBAQBjc/r0PvVGaSn2dayWyZ9rDgpRGOAUWPh0BoXD
UAWkY9kIksoxgDgAbXyNuyQx/XdCnxgnAE6Uzhdu6R2PvfNG1Hwac8rU7dfixgy+
z8aYbRBpAZjc+VSes7NGyVOUkT2AEiXVy/qMZNAXK8W+iFru2OwzN239B+l0ZA9E
atIX5tFhO2ufR7WKau+170tSJvSpPQHi6Gc9jZRyoqwy16Spp+vBSbtk89vVrqTH
wdZ5NE01mW6SDe16jkMVK0f7zct1yP/8Nm9fecwbUKviMLlaisVUMvxdeAmMTleI
A49SSnwOfZwJLe5fQcFyZXwOM/pfLHCbf1oOmL1q/FtVAB4D
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:40:10 2025 by rpki-client