Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS271984.roa
File:                     AS271984.roa (raw, json)
Hash identifier:          TVq48OaHfbwp+5EP8Hekqc01NWEhsKzoS5e72EGm0zY=
Subject key identifier:   1B:BD:BB:37:49:22:D7:61:37:62:CC:B5:57:8E:97:93:7E:67:C0:FB
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       0CED38A3D901D9D79BF61C1B6617493B2E4F3D04
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS271984.roa
Signing time:             Tue 04 Feb 2025 20:07:00 +0000
ROA not before:           Tue 04 Feb 2025 20:02:00 +0000
ROA not after:            Tue 03 Feb 2026 20:07:00 +0000
asID:                     271984
IP address blocks:        181.13.217.0/24 maxlen: 24
                          181.85.152.0/24 maxlen: 24
                          186.108.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ed:38:a3:d9:01:d9:d7:9b:f6:1c:1b:66:17:49:3b:2e:4f:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:02:00 2025 GMT
            Not After : Feb  3 20:07:00 2026 GMT
        Subject: CN=1BBDBB374922D7613762CCB5578E97937E67C0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:0e:d1:15:62:6a:fc:a2:0d:56:ea:af:0c:
                    ab:cf:ed:1b:8c:d5:c6:30:2b:33:11:ff:44:34:95:
                    ce:34:b0:33:ef:19:d9:49:c9:c9:ff:b5:bf:05:e2:
                    29:dc:19:e1:82:44:d1:79:c5:dc:a6:2f:ec:6e:32:
                    41:ec:15:05:13:f9:8e:9f:19:3c:62:6e:6c:99:a7:
                    eb:0d:ea:c4:11:2e:02:35:6a:ba:a2:df:b9:60:23:
                    63:b6:f8:5d:63:8c:b3:c4:66:fe:7e:3c:00:87:6f:
                    fd:3c:19:8b:24:a1:20:df:bb:c1:19:fb:00:82:cb:
                    70:6d:f5:f0:05:43:55:d9:b6:8f:63:b1:43:f8:54:
                    3f:33:6a:af:b3:6c:44:15:41:79:79:53:67:e8:d2:
                    6e:b8:1b:9b:45:01:68:02:44:04:d7:db:12:ff:c3:
                    9a:04:49:e2:a4:5e:0f:9c:70:dc:fe:9e:d0:fd:c0:
                    d9:20:3b:9a:3d:f6:bb:6d:20:76:7d:d0:81:4f:da:
                    f2:14:94:14:76:45:4c:21:f5:b7:b9:03:6e:94:ba:
                    8b:9f:cb:4a:d2:da:2c:92:fb:c4:27:7a:e8:a2:94:
                    ad:85:af:a4:3f:b9:32:df:34:65:d3:28:3e:dd:9b:
                    c9:fc:35:ac:8a:81:80:9a:24:26:20:ec:f1:ea:0a:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:BB:37:49:22:D7:61:37:62:CC:B5:57:8E:97:93:7E:67:C0:FB
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS271984.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.217.0/24
                  181.85.152.0/24
                  186.108.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:23:9b:4d:fe:90:63:8c:18:a0:d0:55:e2:0b:a6:b3:07:20:
         d4:31:6e:66:a9:c6:8a:fb:7f:60:b0:42:6b:8a:5e:e7:a2:32:
         28:e6:44:04:7a:77:61:0e:27:86:38:5a:e4:49:d7:7d:38:10:
         4c:8e:d5:c6:39:f6:1b:3b:59:a3:3d:4e:5c:cd:fe:44:1b:0a:
         6b:26:49:17:6e:08:75:18:21:e2:77:ca:43:bc:c3:a0:79:e7:
         07:d9:21:11:49:7a:44:ac:19:f6:0f:2a:a7:39:2d:bd:7a:52:
         a0:b6:d7:b9:f6:81:a1:24:86:31:27:17:1d:84:82:b9:24:f6:
         2a:32:71:f9:53:20:0d:4b:91:92:1d:c5:e6:dc:de:0a:e7:62:
         0b:b2:a0:31:3a:69:b9:45:2c:2a:da:aa:b4:aa:1a:0a:a2:ac:
         94:6b:61:45:00:fd:2b:dc:f6:45:d3:80:88:37:bd:52:09:1a:
         99:d1:49:b9:41:18:a6:da:60:2d:0c:11:72:8e:df:64:08:0f:
         27:b8:f4:ad:dc:10:02:c1:5d:4e:a8:80:c0:a2:95:c8:ff:ff:
         5c:0a:2f:c5:c3:1b:c4:e6:06:9c:e0:19:48:de:9c:d2:88:58:
         59:b8:50:43:63:d8:9e:8b:5a:0e:d9:07:3d:98:03:79:94:fc:
         ec:22:63:39
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUDO04o9kB2deb9hwbZhdJOy5PPQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNTAyMDQyMDAyMDBaFw0yNjAyMDMyMDA3MDBaMDMxMTAvBgNV
BAMTKDFCQkRCQjM3NDkyMkQ3NjEzNzYyQ0NCNTU3OEU5NzkzN0U2N0MwRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkg7RFWJq/KINVuqvDKvP7RuM
1cYwKzMR/0Q0lc40sDPvGdlJycn/tb8F4incGeGCRNF5xdymL+xuMkHsFQUT+Y6f
GTxibmyZp+sN6sQRLgI1arqi37lgI2O2+F1jjLPEZv5+PACHb/08GYskoSDfu8EZ
+wCCy3Bt9fAFQ1XZto9jsUP4VD8zaq+zbEQVQXl5U2fo0m64G5tFAWgCRATX2xL/
w5oESeKkXg+ccNz+ntD9wNkgO5o99rttIHZ90IFP2vIUlBR2RUwh9be5A26Uuouf
y0rS2iyS+8QneuiilK2Fr6Q/uTLfNGXTKD7dm8n8NayKgYCaJCYg7PHqClnxAgMB
AAGjggKlMIICoTAdBgNVHQ4EFgQUG727N0ki12E3Ysy1V46Xk35nwPswHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNzE5ODQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAC1DdkD
BAC1VZgDBAG6bFgwDQYJKoZIhvcNAQELBQADggEBAAUjm03+kGOMGKDQVeILprMH
INQxbmapxor7f2CwQmuKXueiMijmRAR6d2EOJ4Y4WuRJ1304EEyO1cY59hs7WaM9
TlzN/kQbCmsmSRduCHUYIeJ3ykO8w6B55wfZIRFJekSsGfYPKqc5Lb16UqC217n2
gaEkhjEnFx2Egrkk9ioycflTIA1LkZIdxebc3grnYguyoDE6ablFLCraqrSqGgqi
rJRrYUUA/Svc9kXTgIg3vVIJGpnRSblBGKbaYC0MEXKO32QIDye49K3cEALBXU6o
gMCilcj//1wKL8XDG8TmBpzgGUjenNKIWFm4UENj2J6LWg7ZBz2YA3mU/OwiYzk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:38 2025 by rpki-client