Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3138312e3137372e3232302e302f32322d3234203d3e20323639393933.roa
File:                     3138312e3137372e3232302e302f32322d3234203d3e20323639393933.roa (raw, json)
Hash identifier:          oZb0zpnrFMIP9N8YumIxpb9aqBVncCnhhlgvvZY4Q/c=
Subject key identifier:   9C:4C:4D:58:9C:2D:43:DE:C9:82:99:F4:F6:43:D5:72:15:3A:9F:34
Certificate issuer:       /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial:       1F133E3BEE126FA5E82FFC24877572D3C997204E
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3138312e3137372e3232302e302f32322d3234203d3e20323639393933.roa
Signing time:             Tue 04 Feb 2025 20:00:03 +0000
ROA not before:           Tue 04 Feb 2025 19:55:03 +0000
ROA not after:            Tue 03 Feb 2026 20:00:03 +0000
asID:                     269993
IP address blocks:        181.177.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:13:3e:3b:ee:12:6f:a5:e8:2f:fc:24:87:75:72:d3:c9:97:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
        Validity
            Not Before: Feb  4 19:55:03 2025 GMT
            Not After : Feb  3 20:00:03 2026 GMT
        Subject: CN=9C4C4D589C2D43DEC98299F4F643D572153A9F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:f0:4a:ab:7b:21:2a:f5:ca:41:80:6d:5c:
                    98:3b:37:15:13:36:39:6c:b2:71:db:12:67:6a:ef:
                    69:38:e6:1d:01:f3:ba:de:0c:cf:99:a7:25:e0:73:
                    7e:7e:e4:f5:63:24:84:71:f2:c2:2f:b6:b7:09:ac:
                    43:c9:55:fa:31:b2:c1:cc:c1:2b:0d:b0:13:60:cb:
                    65:d4:e5:c7:f5:00:fe:78:70:59:15:a6:ec:66:52:
                    14:50:e7:70:6d:9c:0c:46:72:11:40:1b:49:c6:ff:
                    f0:24:97:28:b9:bd:ed:9e:c6:e1:01:48:44:a0:a1:
                    35:54:1c:ac:04:20:f5:4d:77:4e:64:69:11:1b:74:
                    00:55:5d:6d:f5:bc:8b:f5:8b:f8:5c:a7:40:44:77:
                    18:44:82:9a:68:3e:f0:5a:1d:3a:42:af:df:b5:36:
                    4e:af:30:f8:f1:45:7f:8d:94:22:30:64:6f:fd:42:
                    f8:ad:c1:4a:60:96:63:6e:cb:75:c5:0d:dd:7b:93:
                    2e:d1:44:fc:35:a6:97:47:94:79:94:05:6a:fd:cc:
                    73:87:88:b9:65:c5:73:50:38:ec:e7:c2:4d:7b:5f:
                    b6:11:35:d3:7e:86:4c:b7:eb:c2:fc:51:5e:a3:51:
                    04:8c:72:24:4a:54:05:5e:48:96:1e:51:51:80:0e:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4C:4D:58:9C:2D:43:DE:C9:82:99:F4:F6:43:D5:72:15:3A:9F:34
            X509v3 Authority Key Identifier:
                keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3138312e3137372e3232302e302f32322d3234203d3e20323639393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:a5:77:fe:7b:e1:67:a0:a2:90:1c:d3:3e:d8:4e:93:64:c5:
         7c:c9:ef:4f:c9:2e:af:47:56:a6:98:64:92:f7:cd:51:86:84:
         8c:00:50:6d:08:8b:9e:e9:ec:de:52:8d:4a:27:a5:d3:f3:92:
         62:fc:f8:40:95:b9:51:c4:a5:4a:81:90:db:a8:01:26:53:2b:
         4d:9c:8f:39:ad:d7:30:1c:10:bd:c9:0a:69:6b:be:48:52:2d:
         f8:07:57:c6:c5:58:c2:6f:3a:06:ae:5c:01:14:33:86:6a:d8:
         c8:bc:60:90:f8:90:76:8e:68:19:b3:70:20:08:9e:7f:6d:40:
         ab:bc:d4:a5:21:91:4c:66:90:61:0c:b8:8e:95:7b:2b:1c:60:
         32:69:ab:79:b1:be:de:6d:a7:a2:ba:8e:93:ed:25:6c:48:ea:
         0f:dd:10:14:49:92:d3:18:cc:0a:43:d8:00:31:17:7c:75:a8:
         4b:a1:5f:20:49:b1:a2:65:f6:6a:58:11:83:47:35:7d:93:51:
         5e:fd:16:ad:48:03:13:10:03:e0:16:cd:9a:96:d5:2d:1a:91:
         c2:dc:7f:b0:6e:0d:4a:e9:b7:a8:7a:7a:ce:23:ff:b7:f1:d0:
         28:b3:4f:cf:04:a5:d2:31:e7:f9:c1:0c:4f:2f:2e:92:bb:b3:
         18:ce:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:25 2025 by rpki-client