Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39312e38342e302f32322d3234203d3e203237383935.roa
File:                     3138312e39312e38342e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          tYTMyjRQbyDxEiEuadN70dmjsGotuUivUzculQbzS6o=
Subject key identifier:   49:30:56:44:2A:24:FC:93:37:C1:59:F5:7B:9E:E7:F3:C6:28:19:6C
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       3CABC253179F7D49D6B29D822720773B51C8F4C7
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39312e38342e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:24 +0000
ROA not before:           Tue 04 Feb 2025 18:21:24 +0000
ROA not after:            Tue 03 Feb 2026 18:26:24 +0000
asID:                     27895
IP address blocks:        181.91.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ab:c2:53:17:9f:7d:49:d6:b2:9d:82:27:20:77:3b:51:c8:f4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:24 2025 GMT
            Not After : Feb  3 18:26:24 2026 GMT
        Subject: CN=493056442A24FC9337C159F57B9EE7F3C628196C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:26:1a:85:3f:62:89:3e:d3:5b:ce:e3:f9:
                    dd:96:0a:aa:a3:68:8a:87:98:6b:1d:fa:4d:3f:d4:
                    c7:07:97:46:4c:5e:50:3b:d5:73:0e:21:fc:5f:06:
                    7e:4f:5a:ff:5c:5c:7a:af:68:4e:a0:25:e1:dd:fd:
                    95:05:c3:af:40:15:b0:d8:ef:79:45:6b:b6:ce:6f:
                    9f:cb:53:c3:5a:d1:39:fd:b7:98:2f:7f:5a:99:d7:
                    b1:75:01:71:06:08:99:3e:1a:47:11:4f:e5:86:fb:
                    f6:63:03:f2:06:19:c7:fc:35:71:c2:55:b0:42:8b:
                    54:c1:40:d6:1c:44:0f:e8:a3:17:bd:fa:a3:1f:5e:
                    e4:f4:e3:0e:25:26:f4:6d:89:47:8b:58:01:06:6a:
                    c4:fa:c9:e2:2b:99:57:c8:53:d8:2b:17:0a:c1:99:
                    4c:a9:54:e9:35:0b:be:95:b8:22:74:32:88:17:4f:
                    df:28:a0:5a:b5:a8:94:5c:f2:84:6d:23:e4:bc:0e:
                    d9:c9:e1:15:59:34:56:08:d1:d8:70:d5:da:55:51:
                    f9:db:ba:88:8b:ee:c1:dd:d9:27:10:c0:b5:21:c2:
                    19:3a:f8:f1:d6:58:c1:5a:ed:e0:c0:e7:9e:8e:78:
                    5a:f5:f5:5a:8f:69:a5:cf:4d:92:22:13:a9:5b:d8:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:56:44:2A:24:FC:93:37:C1:59:F5:7B:9E:E7:F3:C6:28:19:6C
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39312e38342e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.91.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:9b:a2:bd:8e:72:e3:45:b8:ca:9f:35:4b:5d:c8:18:25:
         da:e7:c0:fd:57:e0:35:61:2b:de:ff:44:e0:4b:20:82:42:41:
         8c:96:ef:3c:98:cd:df:e9:16:82:e0:30:3f:c2:05:0c:f2:1b:
         37:1d:18:9b:82:8b:7b:18:92:c3:cb:4d:24:c9:19:3f:46:5e:
         74:f7:51:24:4c:19:0f:d9:c9:46:49:66:a6:b5:8d:e0:d2:77:
         11:b5:f6:ce:bc:4e:b7:d4:7f:f1:ed:48:f3:0b:66:eb:b0:7c:
         95:75:08:b7:b9:fd:b4:bf:6f:77:ff:78:01:7b:77:9b:63:53:
         3c:34:23:c7:a2:08:dd:00:f5:10:6b:7d:07:24:dd:fe:6d:4b:
         33:db:e7:06:a5:61:38:b6:e6:ef:29:fd:78:e3:d2:a4:b1:54:
         ae:a9:69:20:7e:36:45:f9:1e:9b:8d:aa:67:57:53:7b:86:a0:
         da:64:53:48:9e:b1:a4:60:13:51:09:39:5a:02:1d:80:1c:e3:
         49:4b:ff:a1:72:cc:2b:d2:ae:6d:84:1c:14:3f:a9:22:e9:59:
         b3:fe:e9:9c:58:c9:a9:dc:5a:8a:a2:ce:a9:d8:b6:b1:02:7e:
         77:88:c7:8d:f5:3d:c7:6b:f4:74:51:3d:90:34:5c:d8:53:38:
         28:c5:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:47 2025 by rpki-client