Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3139372e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3139372e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          fQTlKPSqrOEzFW6FVR2ASDI+9iriQcZ46gv9pXwRzbk=
Subject key identifier:   28:78:C1:31:BA:68:B5:46:99:34:55:90:66:32:8D:00:AC:2B:A6:F4
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       2B06DCAC54ED85BF29E38139EBA31D24E37F2FA3
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3139372e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:26 +0000
ROA not before:           Tue 04 Feb 2025 18:21:26 +0000
ROA not after:            Tue 03 Feb 2026 18:26:26 +0000
asID:                     27895
IP address blocks:        181.94.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:06:dc:ac:54:ed:85:bf:29:e3:81:39:eb:a3:1d:24:e3:7f:2f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:26 2025 GMT
            Not After : Feb  3 18:26:26 2026 GMT
        Subject: CN=2878C131BA68B5469934559066328D00AC2BA6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:c6:76:af:35:12:e3:d8:44:2d:be:c2:43:
                    13:48:45:0f:46:1d:cd:d2:86:4d:4a:fc:07:fd:02:
                    36:c4:86:74:98:93:80:fb:4f:05:99:00:30:09:03:
                    11:fe:2d:a1:6c:a4:4a:2a:2d:93:7d:a9:d3:44:e6:
                    2b:c9:51:43:a3:47:26:33:51:b7:f6:11:78:27:16:
                    be:dd:50:c2:1f:67:a1:8d:46:b8:75:f7:c2:98:33:
                    40:bf:2b:d6:69:79:2b:3f:46:52:6b:a2:0b:7d:2e:
                    da:b9:c8:2f:46:49:0f:e6:1b:eb:eb:ef:e7:2c:30:
                    9a:30:7d:5a:8b:70:be:8d:73:39:16:96:2d:68:fa:
                    b6:fc:5e:fd:0a:a8:48:eb:2d:52:5d:1c:cd:fd:fb:
                    8c:dd:f5:37:00:f7:34:4e:f2:37:c9:ed:b5:6a:52:
                    f3:4b:96:53:aa:f4:39:0a:e5:4e:67:e2:35:48:a2:
                    ce:d5:9a:2e:e9:f7:9b:d8:a0:89:95:7a:25:1a:06:
                    04:e1:47:6b:fe:1b:91:5e:17:05:04:2a:7c:91:1a:
                    e2:ae:97:ac:11:79:4a:4c:21:c9:eb:73:6d:2e:a7:
                    db:78:91:8b:cb:4a:24:84:f5:8d:35:87:93:c5:35:
                    ca:6d:e1:c5:ce:bf:0f:c7:69:5a:6a:20:fd:a9:0b:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:C1:31:BA:68:B5:46:99:34:55:90:66:32:8D:00:AC:2B:A6:F4
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3139372e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8b:cf:53:29:54:98:2d:0c:c0:28:32:19:64:31:39:1d:2c:
         45:e5:c0:40:45:05:6f:47:94:7c:02:a0:49:0c:f8:db:06:47:
         af:ad:cc:5a:34:9a:70:e9:2c:bb:88:34:39:1b:c7:7a:7f:af:
         87:5c:8a:e4:41:c2:d4:99:92:03:b4:d6:1b:8a:30:b9:75:4d:
         02:d0:cb:7e:c0:bd:d3:89:86:63:a4:44:c2:01:19:af:a5:9d:
         05:55:8f:f0:ea:72:6e:dd:f7:22:db:ad:8d:35:43:8c:de:4f:
         27:d0:18:22:0b:64:64:30:71:47:78:4a:f1:76:27:9d:1f:ef:
         a8:bf:57:1d:4a:dd:7e:26:5a:30:61:2e:ce:59:b5:d9:31:e0:
         75:74:0a:26:de:26:33:51:b4:00:79:15:85:02:2d:bd:0b:b8:
         95:79:39:80:05:17:25:5d:68:51:43:e9:1f:91:43:e5:bd:76:
         1f:56:cd:91:00:15:f7:6b:a6:bd:8f:fc:d2:6e:b4:45:f2:f2:
         a1:5b:06:c8:e0:bb:26:00:f9:59:fc:24:ad:07:f0:a2:30:47:
         69:42:ae:7e:6d:b5:39:0e:08:42:1b:fe:00:9e:db:aa:37:2d:
         b9:f9:f4:2a:25:73:17:4e:5e:84:35:11:26:32:b9:18:0a:ff:
         0c:32:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:28 2025 by rpki-client