Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/3138312e3232342e3138342e302f32312d3234203d3e203532343533.roa
File:                     3138312e3232342e3138342e302f32312d3234203d3e203532343533.roa (raw, json)
Hash identifier:          kHyCO5dJmwBoGU87k51e2a8UbrxgwGdS+u7mmw0fvLw=
Subject key identifier:   A1:14:6E:07:62:A2:29:C3:CE:89:B4:49:D1:3F:A1:43:B7:FB:63:41
Certificate issuer:       /CN=0000444BCA2C39D6517175AFCD805D77A40D1E6E
Certificate serial:       12C9D639A2138AE0D3D048AACCA342FD91D6F94A
Authority key identifier: 00:00:44:4B:CA:2C:39:D6:51:71:75:AF:CD:80:5D:77:A4:0D:1E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/3138312e3232342e3138342e302f32312d3234203d3e203532343533.roa
Signing time:             Tue 04 Feb 2025 18:40:50 +0000
ROA not before:           Tue 04 Feb 2025 18:35:50 +0000
ROA not after:            Tue 03 Feb 2026 18:40:50 +0000
asID:                     52453
IP address blocks:        181.224.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c9:d6:39:a2:13:8a:e0:d3:d0:48:aa:cc:a3:42:fd:91:d6:f9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0000444BCA2C39D6517175AFCD805D77A40D1E6E
        Validity
            Not Before: Feb  4 18:35:50 2025 GMT
            Not After : Feb  3 18:40:50 2026 GMT
        Subject: CN=A1146E0762A229C3CE89B449D13FA143B7FB6341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:ff:98:31:f2:30:2a:a4:55:7d:e5:87:0a:
                    2d:38:9e:51:d7:28:15:19:82:74:4d:04:60:1c:e0:
                    7a:e9:30:d3:d2:1b:e7:09:40:f7:36:af:f9:a9:7b:
                    08:bc:ad:ec:bc:79:00:ee:7c:ba:1d:53:01:ce:c1:
                    15:3e:0f:f4:ef:17:b0:0f:4a:f6:2a:64:8d:f5:a5:
                    c5:5b:a7:55:de:94:74:ad:26:51:d0:dc:d3:9e:c1:
                    bd:4a:49:de:a9:aa:b0:bd:4b:9b:f2:57:ce:36:d3:
                    e2:30:2a:ce:6e:9c:9d:a3:63:66:40:ff:7a:69:9f:
                    ea:ac:76:37:c2:7a:37:85:16:bc:d1:e2:ab:c6:f5:
                    06:82:13:da:b6:fd:11:b0:ce:2e:46:5f:b6:7a:2b:
                    35:1e:4e:90:c4:c1:cf:c7:bd:ce:e8:cb:de:d0:08:
                    96:21:50:3b:c0:05:6c:14:3a:20:34:74:77:ea:5c:
                    d3:f1:88:1d:7b:81:8a:89:2a:20:92:89:fc:af:5f:
                    6d:25:d0:10:b0:6e:4a:ca:59:c3:92:b3:f9:02:71:
                    ad:ef:47:af:f2:eb:69:3c:be:7d:d5:a8:3a:cf:89:
                    c5:96:e1:d5:38:6d:88:28:d0:56:25:a6:a9:06:22:
                    56:bc:d7:93:8a:2f:64:db:b6:66:09:b7:67:98:08:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:6E:07:62:A2:29:C3:CE:89:B4:49:D1:3F:A1:43:B7:FB:63:41
            X509v3 Authority Key Identifier:
                keyid:00:00:44:4B:CA:2C:39:D6:51:71:75:AF:CD:80:5D:77:A4:0D:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0000444BCA2C39D6517175AFCD805D77A40D1E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DB26F24CCFA7BC4B435018FAFF10AC03879E5CC0AA6ED839059BB944CD746B5/0/3138312e3232342e3138342e302f32312d3234203d3e203532343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:9f:5b:f8:73:f7:5e:77:05:04:5a:fb:bb:76:d6:0f:b5:
         95:59:e2:ae:d3:fd:5d:fe:d9:44:80:8a:97:a5:5d:a4:4a:20:
         21:b2:2d:40:9c:c1:94:aa:bc:16:b3:12:5c:4b:e1:ff:c2:90:
         b5:82:f2:a9:f1:fa:72:5c:2a:59:a8:20:42:ee:af:9d:5d:c6:
         40:0f:9a:b3:22:d0:05:1d:d1:61:d9:97:ae:f0:7e:0c:5a:1f:
         34:11:f5:01:d3:06:cc:77:65:20:0e:40:15:39:6b:98:13:6b:
         6f:55:31:2e:31:50:19:ca:2b:aa:4c:c8:88:87:9c:ea:dd:08:
         e7:2f:2b:79:c0:13:39:82:38:31:08:7d:38:dc:cd:c2:5a:53:
         fd:40:ef:ff:ac:c6:74:3c:2a:1a:0d:2b:70:82:f4:a6:d5:4e:
         ef:17:0b:0a:ab:05:9c:1b:07:73:ba:f1:12:ae:76:54:c8:33:
         cb:70:78:5e:ff:18:b0:ba:ef:86:78:bc:c0:81:b5:c1:16:c1:
         11:2c:a0:eb:b3:fa:7e:a7:cd:68:e2:1e:c0:a0:3b:f2:17:0d:
         13:a7:18:66:5c:c6:0a:e7:f9:67:19:52:c6:38:54:28:22:c4:
         fd:1c:a3:5d:3f:6e:86:de:c9:5f:b2:ac:7e:24:97:5a:1e:ad:
         8c:b5:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:14:59 2025 by rpki-client