Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e38352e3230382e302f32322d3234203d3e203237383935.roa
File:                     3138312e38352e3230382e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          zEAsKx6YVpdCBc8cUM9TkV/IZspRNH04JcaxvGzr9uk=
Subject key identifier:   02:E6:B8:06:47:87:06:9C:4F:04:C2:CC:84:6E:BD:E7:CD:D6:CE:76
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       0CC4985CBF02F2637BE4176365680BCFCFF598
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e38352e3230382e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:27 +0000
ROA not before:           Tue 04 Feb 2025 18:21:27 +0000
ROA not after:            Tue 03 Feb 2026 18:26:27 +0000
asID:                     27895
IP address blocks:        181.85.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c4:98:5c:bf:02:f2:63:7b:e4:17:63:65:68:0b:cf:cf:f5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:27 2025 GMT
            Not After : Feb  3 18:26:27 2026 GMT
        Subject: CN=02E6B8064787069C4F04C2CC846EBDE7CDD6CE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:e3:18:c9:df:c6:72:6c:eb:dc:75:c6:18:
                    f4:ae:52:c6:39:19:ca:76:58:0b:b5:ef:80:50:95:
                    dd:ea:9b:0b:e4:05:22:55:3b:6a:1d:3f:46:b1:4c:
                    49:6f:e7:f1:37:bf:9d:78:1b:30:42:00:0b:0c:50:
                    78:44:26:14:64:dd:fa:08:88:cd:1b:50:10:a2:48:
                    14:55:ef:9b:35:88:4b:dd:5e:28:41:4e:87:36:65:
                    50:73:27:10:82:86:18:7a:3f:73:15:f4:eb:e3:1e:
                    bd:8c:87:eb:f9:60:94:d3:70:d0:0b:c7:36:57:69:
                    7a:2d:85:1f:0a:f1:90:c5:0a:ec:a3:eb:9f:ba:37:
                    11:e0:d3:65:e2:5b:20:39:0c:1c:6f:a8:7c:6e:ec:
                    6f:c8:d9:91:60:2d:a9:2b:0a:1f:81:f3:04:cd:78:
                    27:52:10:ee:84:89:32:28:f0:6e:68:5f:01:3f:8e:
                    6f:4e:cb:ec:d7:ee:7e:f2:09:8b:9d:d4:5f:6b:d2:
                    1a:f7:b2:26:f8:5e:f5:e2:ee:7b:ae:d9:6f:57:73:
                    31:14:fa:f5:e5:7b:9d:d7:e1:d4:20:ce:3f:46:5a:
                    d9:0f:0f:fe:a8:a8:e4:22:2d:04:32:bf:a9:7b:9d:
                    fb:40:e9:97:49:28:e7:94:d4:9c:99:11:97:b3:38:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:B8:06:47:87:06:9C:4F:04:C2:CC:84:6E:BD:E7:CD:D6:CE:76
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e38352e3230382e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.85.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:95:29:46:1f:1d:01:b2:39:f2:bc:6c:55:47:fc:60:fb:
         2a:2c:89:12:15:30:ed:3b:cf:0d:d1:7d:27:e8:ed:8f:63:bd:
         5f:3e:b5:82:0a:f9:78:c7:9b:81:1e:c3:1e:f5:09:da:88:4e:
         04:ab:ba:19:97:c6:66:e5:42:fa:cd:e6:b3:d7:46:b4:ad:f4:
         9e:c6:19:43:97:f9:b6:37:f0:dc:64:8a:40:97:9f:f9:bd:68:
         02:70:b3:40:a8:4f:29:f3:13:3d:ca:ae:74:53:54:f6:76:f2:
         1e:09:14:e4:fd:e5:36:1c:5e:a5:31:97:46:a7:91:b9:55:49:
         e5:1a:a9:f8:e1:94:12:ba:b5:ee:5b:ce:ed:7c:66:a5:37:4e:
         91:56:aa:9f:07:6a:e3:49:41:04:3f:91:a8:de:8f:f0:f0:76:
         50:94:9c:3a:44:72:e3:28:8f:48:d7:3f:3a:e2:c0:14:17:cc:
         96:cb:82:49:af:e9:bc:d7:21:85:18:3a:20:4a:c9:34:80:5e:
         16:c3:51:57:6e:0c:32:de:28:13:b6:30:13:0f:1d:7b:44:c6:
         10:0e:9e:2a:f2:b6:7e:19:ff:9e:87:e3:3a:b7:80:62:73:ee:
         d9:e7:61:17:e9:cd:59:94:05:63:fa:4c:81:db:13:85:82:08:
         1d:19:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:01:45 2025 by rpki-client