Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3230382e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3230382e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          pn8Id5wWY0rXGmU5o5jjCG0Dywrf+sQJgufpXwOczvA=
Subject key identifier:   33:0B:A6:A0:7F:F7:8B:EB:A4:DB:3F:19:10:FF:AC:66:C9:3B:21:70
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       663374A65ACD422D1FCC5C9A28FBA3DB8AFEF88E
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3230382e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:26 +0000
ROA not before:           Tue 04 Feb 2025 18:21:26 +0000
ROA not after:            Tue 03 Feb 2026 18:26:26 +0000
asID:                     27895
IP address blocks:        181.94.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:33:74:a6:5a:cd:42:2d:1f:cc:5c:9a:28:fb:a3:db:8a:fe:f8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:26 2025 GMT
            Not After : Feb  3 18:26:26 2026 GMT
        Subject: CN=330BA6A07FF78BEBA4DB3F1910FFAC66C93B2170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:0a:a6:b2:89:f6:30:e8:5a:a0:46:84:aa:
                    9e:ac:dd:73:b9:02:25:e6:e9:10:a1:91:0c:e4:9b:
                    a5:c1:02:a8:97:04:a1:14:3f:74:5e:a2:8b:b8:b7:
                    7a:12:7b:4a:86:7a:9a:79:aa:ff:c3:74:5d:64:3f:
                    ff:d1:dc:83:36:b5:92:52:04:84:37:dc:78:30:da:
                    6a:f9:10:33:ad:74:72:14:f9:ee:f3:c5:3a:c3:6e:
                    97:7e:76:46:3a:ab:4e:32:7b:00:89:de:6d:07:f4:
                    f8:c2:a5:06:b2:d9:c6:ad:6f:93:e1:d0:3c:00:88:
                    ed:58:03:97:84:c5:60:c4:bc:b5:d2:c5:7a:10:e0:
                    5a:d9:90:27:8f:9e:de:de:dc:c4:ca:75:33:a1:68:
                    0a:6b:ae:95:43:1e:6c:da:ce:ce:39:8a:1d:26:77:
                    10:d1:83:b4:d7:2c:56:4e:41:fa:a6:c7:2d:34:9c:
                    79:de:68:c6:b1:80:6c:1c:50:dc:36:da:21:5a:5d:
                    20:1d:0b:df:00:31:6c:3b:59:10:72:69:4f:90:47:
                    79:e1:ca:b0:56:ac:bc:b2:1a:aa:19:97:9d:ed:89:
                    88:e2:48:19:c9:5e:90:7b:42:cc:d6:83:da:87:b4:
                    11:56:a6:59:66:2b:12:1c:70:d9:95:cb:f3:57:70:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0B:A6:A0:7F:F7:8B:EB:A4:DB:3F:19:10:FF:AC:66:C9:3B:21:70
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3230382e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:5e:0b:32:21:f8:70:95:73:70:0f:81:32:69:45:43:b6:
         69:0c:2d:2c:95:0f:f7:eb:05:d1:bf:57:01:5e:0d:94:ea:0f:
         22:c4:92:4a:a0:b6:d8:57:6f:ad:55:a6:35:54:ea:a4:c1:15:
         c5:d6:0b:13:9c:6b:c2:79:8c:fd:4e:e6:cb:2c:f6:91:aa:e9:
         9e:91:d6:2e:b8:39:69:1e:82:be:74:b2:eb:c6:df:f4:27:62:
         76:61:fc:58:80:b5:03:38:21:cf:31:37:52:f4:09:65:55:0d:
         b6:a6:66:5e:72:6b:76:a0:93:a6:0e:6e:d0:6e:f7:fa:dc:e6:
         a1:75:6a:3a:1b:f5:09:a6:a1:e5:5a:a1:53:88:c3:07:fb:16:
         a5:b1:94:86:6d:5d:3a:58:55:8e:81:6c:f1:f9:c9:26:ae:08:
         6e:7b:be:ab:cb:f4:1f:8a:14:24:af:c0:34:bf:b6:7a:f1:0a:
         b2:b5:37:75:e4:26:76:88:17:74:29:77:cf:bb:af:27:ee:35:
         c4:f2:97:aa:86:8c:d1:d5:8a:22:86:74:4f:aa:c8:eb:10:e3:
         c9:35:95:ab:21:74:12:c4:66:ac:92:09:b4:cc:a6:dd:b2:85:
         aa:90:2d:02:50:9f:3e:2c:5e:55:80:16:81:b7:f9:8d:e3:54:
         58:7e:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:25 2025 by rpki-client