Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa
File:                     3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa (raw, json)
Hash identifier:          yMygc2NbhzGF8Vbm39zta0bDReTaDGhtq0fEzMwn+O4=
Subject key identifier:   69:1D:95:DD:53:0F:36:1A:E8:8F:AB:7F:2A:FB:7F:51:C4:FB:9D:AD
Certificate issuer:       /CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
Certificate serial:       7E99F516170A33D58A34E7C7326A89930CC409B5
Authority key identifier: 26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa
Signing time:             Tue 04 Feb 2025 18:03:22 +0000
ROA not before:           Tue 04 Feb 2025 17:58:22 +0000
ROA not after:            Tue 03 Feb 2026 18:03:22 +0000
asID:                     272973
IP address blocks:        181.233.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:99:f5:16:17:0a:33:d5:8a:34:e7:c7:32:6a:89:93:0c:c4:09:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
        Validity
            Not Before: Feb  4 17:58:22 2025 GMT
            Not After : Feb  3 18:03:22 2026 GMT
        Subject: CN=691D95DD530F361AE88FAB7F2AFB7F51C4FB9DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:bd:80:11:2a:ed:13:19:47:82:f3:0e:f6:
                    67:59:cc:bf:fd:96:5e:ca:3c:bb:a5:1c:48:ea:d0:
                    fb:ad:8d:7b:bf:34:9b:45:6b:fd:28:6a:30:fc:72:
                    f2:03:61:d2:7f:88:6c:9c:85:40:02:0f:71:17:ed:
                    bc:bf:cf:9a:f8:0c:7e:d3:6e:8a:62:7f:dd:d6:8f:
                    b3:dc:5a:84:9f:00:39:09:cc:95:50:2b:a9:44:26:
                    7a:ca:d9:f2:09:01:6f:ae:f1:78:fb:93:27:33:15:
                    34:00:78:17:b3:af:e1:b4:95:c0:ed:28:75:1a:84:
                    9e:b8:4f:5a:dd:47:ef:0c:6e:fe:4b:53:1c:e6:e5:
                    be:e1:ab:99:aa:9b:62:a8:a4:b2:10:4b:ef:71:20:
                    a4:9a:b5:60:30:00:88:fe:3a:00:db:66:16:d2:bb:
                    5f:4e:12:54:54:b4:23:bf:00:45:92:20:98:db:5c:
                    8f:f4:07:f3:2f:4b:b1:c6:82:52:23:36:bc:be:59:
                    13:a0:e9:45:be:61:04:5d:ee:90:62:a7:e2:d8:23:
                    18:b3:85:ca:b3:27:23:8d:60:2c:ae:07:9c:a0:ff:
                    72:16:49:a1:c4:88:2b:5c:35:9c:6e:bf:c1:0f:4b:
                    52:ec:c4:8d:76:c2:74:5e:d0:31:51:9d:59:09:80:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:95:DD:53:0F:36:1A:E8:8F:AB:7F:2A:FB:7F:51:C4:FB:9D:AD
            X509v3 Authority Key Identifier:
                keyid:26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:47:43:dc:9c:ad:05:28:be:a2:08:33:1b:b0:6a:3b:ef:e4:
         93:7d:f0:23:5c:cb:d2:b3:bd:df:ae:de:94:9b:39:c7:37:70:
         f7:c1:67:34:ba:ed:38:cb:00:c4:76:38:21:04:eb:9d:71:cc:
         b1:9d:f7:47:53:4b:81:55:c8:19:0c:d7:bd:a2:b8:98:a5:9a:
         93:05:67:f0:42:5c:da:bf:54:5e:d1:75:7d:3e:6a:b9:2b:46:
         5d:7d:eb:cb:4b:e2:fe:ae:9f:e3:55:06:0b:51:64:04:7e:3a:
         43:f8:67:68:66:42:d1:9b:45:3c:3a:fa:9c:aa:e3:cf:2e:6c:
         8e:be:64:37:d7:bd:d3:f7:50:17:f3:57:a4:2c:4b:33:32:3c:
         56:c0:79:29:11:6b:45:90:26:0c:b6:9c:c2:d7:fa:00:78:b5:
         50:0a:ca:e7:4b:49:02:c0:41:40:7b:3e:9a:ce:23:e9:b3:53:
         8f:ae:01:c9:34:6c:c4:75:5e:1a:0a:eb:84:f7:ae:83:1f:d3:
         f7:c3:72:6f:6f:81:00:bc:81:e5:14:3c:fb:94:c1:0b:3b:05:
         af:73:b5:d4:e8:57:e4:2a:f8:a1:5f:1b:fd:30:bd:80:71:27:
         18:c5:7f:f2:96:a6:f3:97:6f:5c:1a:ea:54:f6:32:87:73:67:
         87:7c:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:47 2025 by rpki-client