Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3138312e3139372e3139322e302f31382d3234203d3e203237383333.roa
File:                     3138312e3139372e3139322e302f31382d3234203d3e203237383333.roa (raw, json)
Hash identifier:          mYLqlJdlGAIrbSNEO//lJy/x2iBXgHy6k0LGkuhKJqE=
Subject key identifier:   5A:66:9C:F6:1E:B0:89:B6:41:5C:05:1C:F4:B0:2B:A2:EF:32:63:5B
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       7241CE16797ADB82775FE2C0A8575843C0494864
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3138312e3139372e3139322e302f31382d3234203d3e203237383333.roa
Signing time:             Tue 04 Feb 2025 18:25:54 +0000
ROA not before:           Tue 04 Feb 2025 18:20:54 +0000
ROA not after:            Tue 03 Feb 2026 18:25:54 +0000
asID:                     27833
IP address blocks:        181.197.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:41:ce:16:79:7a:db:82:77:5f:e2:c0:a8:57:58:43:c0:49:48:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Feb  4 18:20:54 2025 GMT
            Not After : Feb  3 18:25:54 2026 GMT
        Subject: CN=5A669CF61EB089B6415C051CF4B02BA2EF32635B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:ee:37:a3:78:25:fb:d9:ca:03:3f:14:6f:
                    09:27:5a:17:b3:61:9e:11:65:14:ba:6a:d3:d5:47:
                    d0:49:1a:7b:9f:3b:ef:42:b0:41:0e:fd:bc:a7:04:
                    6e:cb:06:ee:93:91:d9:41:28:35:ed:85:8b:7a:83:
                    2a:5f:6c:16:a8:8b:1b:ac:f8:48:eb:f1:03:ec:0a:
                    f6:0c:19:5f:5f:eb:9e:44:00:5d:d7:d0:7b:d5:08:
                    1a:14:73:9d:36:4d:6c:03:60:ca:0a:62:4c:39:b2:
                    12:87:15:24:92:0f:79:63:7f:a4:05:b3:f2:13:c3:
                    7f:5e:e5:d6:07:c5:7d:7d:2d:42:d2:02:aa:3c:5d:
                    65:de:3c:cd:39:67:bf:20:c1:47:cd:72:74:97:a4:
                    3c:13:a1:bc:0b:c8:cf:51:9e:63:3f:f1:79:50:4f:
                    b8:ab:23:f6:ef:c8:ce:56:e7:d3:a2:fa:7b:d2:64:
                    e8:c2:1a:2a:b8:e5:7b:29:c1:cf:ea:c9:bc:49:88:
                    0a:5d:ae:39:9d:a5:f9:57:96:1a:ec:68:21:2e:ce:
                    f1:c2:68:b9:4c:8c:5f:40:12:80:0f:06:09:57:5e:
                    9c:a3:17:ca:78:80:09:61:77:fd:fc:09:d7:45:40:
                    92:eb:ac:fd:b0:2d:72:a6:b6:9f:fd:ce:f8:59:47:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:66:9C:F6:1E:B0:89:B6:41:5C:05:1C:F4:B0:2B:A2:EF:32:63:5B
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3138312e3139372e3139322e302f31382d3234203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:fd:9c:a9:06:a5:08:11:75:9b:69:88:ee:84:07:22:b9:
         b9:53:60:53:4b:13:e1:92:78:df:38:0d:3c:a6:5f:4b:a9:44:
         44:17:da:f6:7e:31:53:e5:4f:ba:73:76:ea:bf:7d:c9:db:de:
         f1:0f:f3:09:6d:33:66:33:5c:49:0d:a6:ec:74:e2:5b:4e:4c:
         d0:8e:74:3d:24:0e:d7:d3:5b:2f:9b:fa:3b:26:f8:a7:c9:13:
         ae:cd:cf:6b:ce:9d:6b:8d:d3:c0:36:84:ea:b2:d6:4f:db:44:
         35:f1:6f:65:e4:ab:d3:31:5e:f2:cd:aa:f1:96:c8:f1:28:2e:
         7d:32:b0:00:0b:0a:21:9b:ba:43:d9:df:a8:94:f7:19:c4:e2:
         45:91:3f:5a:70:fc:4e:91:ce:5f:89:cd:a7:fc:b8:c7:05:ff:
         50:7f:f4:3c:e5:74:f4:c6:cb:24:26:01:68:e5:51:2a:e4:b0:
         63:37:a0:9d:05:b9:aa:3a:4d:a0:c9:df:d5:0b:40:e7:f4:42:
         aa:1b:fd:ed:86:72:0f:3c:d2:da:55:67:80:d0:63:a6:96:1f:
         59:39:8f:ad:df:cb:59:65:4c:84:c2:5d:b7:e3:c7:25:dd:9d:
         a0:ba:92:14:4d:c3:3f:86:4a:76:b5:51:fe:be:0b:5e:1a:23:
         f6:b2:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:50:16 2025 by rpki-client