Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa
File:                     3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa (raw, json)
Hash identifier:          7cFMnF7s4FiZDQOabfwddMvzpCApwqRLuoSV9HIzEdI=
Subject key identifier:   DF:BC:F2:21:B7:09:C8:99:47:4E:F1:BB:FE:F1:E1:73:EC:64:77:E6
Certificate issuer:       /CN=4538D7686904F5F08B68B3D1367B00E808A7CD76
Certificate serial:       41234BC5EB7F2A618CFCBFA890FD0E8FE5803E64
Authority key identifier: 45:38:D7:68:69:04:F5:F0:8B:68:B3:D1:36:7B:00:E8:08:A7:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa
Signing time:             Tue 04 Feb 2025 18:09:38 +0000
ROA not before:           Tue 04 Feb 2025 18:04:38 +0000
ROA not after:            Tue 03 Feb 2026 18:09:38 +0000
asID:                     271829
IP address blocks:        181.233.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:23:4b:c5:eb:7f:2a:61:8c:fc:bf:a8:90:fd:0e:8f:e5:80:3e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538D7686904F5F08B68B3D1367B00E808A7CD76
        Validity
            Not Before: Feb  4 18:04:38 2025 GMT
            Not After : Feb  3 18:09:38 2026 GMT
        Subject: CN=DFBCF221B709C899474EF1BBFEF1E173EC6477E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:d9:ef:4f:15:8a:ae:da:1c:0a:cb:09:44:
                    78:56:67:b9:3c:0d:01:e6:ac:26:fa:e8:de:0a:76:
                    33:7f:a3:e7:de:36:ba:c0:5c:de:a0:b5:a4:ab:20:
                    34:d5:0e:25:f4:84:80:2b:49:be:34:47:e2:fb:97:
                    45:25:fc:65:7b:25:87:67:78:50:3b:03:02:4f:78:
                    bc:d3:5a:75:80:71:1c:a5:a6:33:29:5b:c5:41:05:
                    8e:b7:05:3b:24:48:b1:ab:3f:bc:0b:0e:d0:67:dd:
                    8f:ad:30:23:2b:34:b9:16:0f:37:db:36:21:2e:28:
                    80:13:d1:2e:30:47:02:b9:10:88:ff:4e:b0:72:a4:
                    85:31:89:cb:d2:e9:2b:fe:a7:11:86:fe:e3:10:90:
                    2a:ff:08:6a:1c:02:6b:f9:08:00:14:7d:5a:ad:a0:
                    74:c5:d3:2f:91:ac:ea:cd:54:3c:f3:4c:7a:6e:1a:
                    77:5c:85:2f:c8:bf:c1:2e:07:d0:d8:79:10:c7:cc:
                    ea:b8:87:b5:db:d3:31:dc:ce:0c:87:6f:8d:dd:ad:
                    1c:df:e5:18:35:2e:30:7e:8f:36:71:a0:5a:9f:fb:
                    18:b8:4a:66:39:0a:2a:a1:45:96:61:35:24:1c:10:
                    ae:2a:ec:c2:ed:ef:bd:97:d4:2a:c8:48:81:4f:b2:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BC:F2:21:B7:09:C8:99:47:4E:F1:BB:FE:F1:E1:73:EC:64:77:E6
            X509v3 Authority Key Identifier:
                keyid:45:38:D7:68:69:04:F5:F0:8B:68:B3:D1:36:7B:00:E8:08:A7:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:54:06:72:b8:5c:60:d1:fa:30:36:9e:6c:78:54:a8:e7:14:
         60:64:66:5f:9e:43:e5:7d:88:26:dc:40:57:ec:d0:d2:c5:43:
         57:60:a1:1b:94:2a:23:1d:5f:bf:4f:59:35:92:6e:9a:b2:fa:
         c4:81:d7:09:ea:89:0a:e0:dd:11:64:3f:8c:23:75:43:5b:cf:
         66:08:ee:ac:1c:5e:96:75:3e:b2:27:12:15:19:1d:bf:91:7a:
         aa:d8:ed:9b:3f:42:bc:1d:64:93:51:c5:96:5d:b1:15:45:02:
         03:5b:29:79:2e:35:ca:9c:71:cc:bb:d3:e5:7c:c8:69:a5:4f:
         7e:8e:85:a4:3e:a3:7b:e1:15:8a:41:aa:48:1b:74:97:7e:eb:
         1d:86:aa:bf:27:2c:e7:9d:d7:22:14:1c:7c:6a:f7:06:24:8c:
         42:6b:53:24:e6:78:d0:cb:76:68:9f:12:a6:80:da:31:19:c3:
         1e:8b:cd:a8:da:16:9f:79:58:40:c3:a0:64:04:a6:4c:d3:d7:
         f5:ca:d2:e5:71:11:e7:56:e3:a3:f9:4e:d8:ee:5c:21:0f:9b:
         8c:47:4f:12:dc:e0:d0:8c:86:79:ad:fb:01:42:46:4f:4e:7b:
         ae:21:63:12:54:e6:1d:b6:bc:d6:35:2d:ac:35:dd:42:62:c6:
         0c:2c:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:47 2025 by rpki-client