Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233362e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3233362e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          NM0VjZgoNH7/t4fetUv+kCJtxsHwkMgD+rG43iF2Uw0=
Subject key identifier:   A6:1D:A2:FE:D7:37:D8:C1:0C:59:0D:42:1F:BA:E3:E5:6B:B3:3E:C7
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       27C5FB7F1AC815111E1651ED64C31154E1B0933B
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233362e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:27 +0000
ROA not before:           Tue 04 Feb 2025 18:21:27 +0000
ROA not after:            Tue 03 Feb 2026 18:26:27 +0000
asID:                     27895
IP address blocks:        181.94.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c5:fb:7f:1a:c8:15:11:1e:16:51:ed:64:c3:11:54:e1:b0:93:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:27 2025 GMT
            Not After : Feb  3 18:26:27 2026 GMT
        Subject: CN=A61DA2FED737D8C10C590D421FBAE3E56BB33EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:7a:e0:00:9a:9a:7f:be:cf:4c:1f:0b:89:
                    14:8b:67:42:e8:ce:a4:64:46:8a:8f:a7:7f:bf:18:
                    1d:5a:17:19:97:d8:02:bc:75:f7:36:9f:b3:92:4b:
                    7a:30:6f:fc:5b:e6:10:89:3a:0c:a9:c9:44:11:cc:
                    c1:cc:a2:34:41:6b:27:92:8c:e9:0f:51:43:19:47:
                    df:90:51:ab:40:45:e5:01:99:5c:0c:31:38:2e:d3:
                    1d:6f:c7:7e:5a:4d:11:3a:a7:25:29:ed:99:cb:0d:
                    a2:c6:15:fb:6a:27:84:17:a8:66:af:83:11:dd:30:
                    b7:f5:6f:c1:9d:aa:ec:e1:c4:18:0a:ec:eb:f5:6a:
                    8f:07:3a:2a:b0:59:44:5c:a7:79:a7:17:c1:66:e5:
                    97:44:f9:94:f1:10:fa:ae:ea:7c:5e:46:df:93:e1:
                    b5:92:0f:68:0e:e3:ff:1c:c6:5d:98:cb:e2:06:a2:
                    a9:a6:30:f0:e0:1a:26:f3:6a:40:d9:90:e0:39:ef:
                    61:9f:c0:c8:a2:0b:4f:3e:d4:09:5c:ad:7e:df:c2:
                    84:4f:0e:4f:01:24:51:36:15:26:2b:32:70:f9:86:
                    0c:b6:01:96:27:3e:ba:29:86:2f:71:72:8a:b5:7b:
                    fd:f1:25:4d:ca:21:0c:f3:85:ad:e5:b8:13:a8:67:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:A2:FE:D7:37:D8:C1:0C:59:0D:42:1F:BA:E3:E5:6B:B3:3E:C7
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233362e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:dd:3f:3e:09:c0:7f:9a:27:17:8a:bc:fc:f4:db:b8:ff:
         f9:ab:6b:47:fd:37:a9:9d:db:03:f5:b8:2e:e5:4f:d2:2b:40:
         46:b0:e7:6e:b3:fd:ac:7c:62:fb:ce:52:45:a9:e9:c6:39:e0:
         95:40:19:32:37:23:33:e2:23:66:97:6a:aa:df:8c:e6:09:32:
         3c:4b:c6:7b:18:35:e1:3c:63:01:fc:08:61:11:bc:37:fc:41:
         00:56:48:0b:19:b2:7d:94:17:3e:8d:ce:07:2f:fd:c2:0c:36:
         b6:21:ee:29:2a:cc:e3:c8:45:03:0e:62:c3:dc:1e:a1:a3:a1:
         08:17:f9:89:6a:08:30:a8:ac:dd:f9:ff:f6:61:f9:b0:0f:d9:
         8c:b8:b1:21:0e:90:69:79:02:17:f3:a2:4b:c1:3f:b0:8d:c5:
         9a:01:bd:2f:cb:ca:11:cb:3c:9b:f3:99:bb:8f:51:96:6d:d2:
         af:68:22:83:0e:67:f6:8d:21:13:5d:e2:93:52:96:da:63:48:
         27:0d:c9:99:5f:4a:34:55:c9:e6:db:e0:e3:6e:7f:c3:37:f7:
         80:25:c4:ca:2a:95:75:b1:21:31:a6:4b:aa:57:8a:50:80:c8:
         9d:3c:b6:48:cd:18:a4:83:bb:89:60:08:0d:fa:1c:07:29:50:
         0f:e7:0b:38
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ8X7fxrIFREeFlHtZMMRVOGwkzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNTAyMDQxODIxMjdaFw0yNjAyMDMxODI2MjdaMDMxMTAvBgNV
BAMTKEE2MURBMkZFRDczN0Q4QzEwQzU5MEQ0MjFGQkFFM0U1NkJCMzNFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnXrgAJqaf77PTB8LiRSLZ0Lo
zqRkRoqPp3+/GB1aFxmX2AK8dfc2n7OSS3owb/xb5hCJOgypyUQRzMHMojRBayeS
jOkPUUMZR9+QUatAReUBmVwMMTgu0x1vx35aTRE6pyUp7ZnLDaLGFftqJ4QXqGav
gxHdMLf1b8GdquzhxBgK7Ov1ao8HOiqwWURcp3mnF8Fm5ZdE+ZTxEPqu6nxeRt+T
4bWSD2gO4/8cxl2Yy+IGoqmmMPDgGibzakDZkOA572GfwMiiC08+1AlcrX7fwoRP
Dk8BJFE2FSYrMnD5hgy2AZYnProphi9xcoq1e/3xJU3KIQzzha3luBOoZ0vJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUph2i/tc32MEMWQ1CH7rj5WuzPscwHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMxMzgzMTJlMzkzNDJlMzIzMzM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM4MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbVe7DAN
BgkqhkiG9w0BAQsFAAOCAQEAjxHdPz4JwH+aJxeKvPz027j/+atrR/03qZ3bA/W4
LuVP0itARrDnbrP9rHxi+85SRanpxjnglUAZMjcjM+IjZpdqqt+M5gkyPEvGexg1
4TxjAfwIYRG8N/xBAFZICxmyfZQXPo3OBy/9wgw2tiHuKSrM48hFAw5iw9weoaOh
CBf5iWoIMKis3fn/9mH5sA/ZjLixIQ6QaXkCF/OiS8E/sI3FmgG9L8vKEcs8m/OZ
u49Rlm3Sr2gigw5n9o0hE13ik1KW2mNIJw3JmV9KNFXJ5tvg425/wzf3gCXEyiqV
dbEhMaZLqleKUIDInTy2SM0YpIO7iWAIDfocBylQD+cLOA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:30 2025 by rpki-client