Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234312e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3234312e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          n5mEcqLoNdLN5h1D34o53PfUoenu+ME+dsWwL9EiuRo=
Subject key identifier:   D2:50:7D:CA:E3:CD:77:8F:4E:93:02:DA:EE:A8:E3:38:C5:65:6A:6A
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       16D212271A7E623E61F5C64F8F38B105E71DA3AD
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234312e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:24 +0000
ROA not before:           Tue 04 Feb 2025 18:21:24 +0000
ROA not after:            Tue 03 Feb 2026 18:26:24 +0000
asID:                     27895
IP address blocks:        181.94.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d2:12:27:1a:7e:62:3e:61:f5:c6:4f:8f:38:b1:05:e7:1d:a3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:24 2025 GMT
            Not After : Feb  3 18:26:24 2026 GMT
        Subject: CN=D2507DCAE3CD778F4E9302DAEEA8E338C5656A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:d7:5a:9c:1f:d6:12:76:6f:3a:f2:35:1a:
                    15:ae:e3:d9:dd:1e:42:10:6e:29:bf:f2:a5:04:72:
                    5c:71:0c:e4:8e:67:33:2d:5b:7f:59:02:ca:f7:e4:
                    db:7f:44:28:2c:5f:d2:ad:95:af:5c:17:e0:30:61:
                    4b:54:d3:78:3f:c3:8b:08:72:45:2d:18:48:28:6d:
                    1a:db:bc:59:d1:fd:91:b8:57:77:e2:f5:c8:b9:5c:
                    91:c6:4a:9c:23:b4:55:46:06:a4:bf:f2:fc:5e:91:
                    9d:d2:36:65:31:6f:99:08:99:47:4a:e7:cf:3f:8a:
                    a8:e4:0d:76:bc:a0:61:80:7e:24:9b:1c:b1:13:fa:
                    07:ac:e1:53:3e:aa:3e:7b:20:81:45:58:19:90:17:
                    1f:0d:24:25:fc:8b:42:b6:f7:e7:f8:48:4a:a6:e0:
                    50:38:ad:bd:4b:b6:a1:30:fc:a9:cf:40:2a:2b:4c:
                    38:9a:3f:96:61:a4:f2:fc:02:48:f3:56:74:43:03:
                    5c:a4:7b:fc:47:d0:39:d5:40:cf:55:80:1d:89:99:
                    fc:9f:61:eb:54:a0:a7:96:e5:9a:51:0f:ef:20:57:
                    64:0a:a8:97:42:03:4d:05:55:b8:b8:38:af:87:69:
                    5d:22:f9:93:54:2f:08:7c:c2:9c:46:ad:78:eb:59:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:50:7D:CA:E3:CD:77:8F:4E:93:02:DA:EE:A8:E3:38:C5:65:6A:6A
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234312e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:2c:98:21:01:d8:ce:7a:15:4e:7a:0c:c8:10:0d:e8:b1:
         ad:ce:b6:90:ca:93:b2:cf:88:73:3b:ef:06:c0:b9:5f:ab:7b:
         d6:3a:0b:fe:71:e8:1f:eb:8c:fc:54:34:48:8b:ff:8d:9c:6c:
         bb:6e:c0:ad:8d:b7:bb:13:5d:81:6f:c6:26:f1:54:94:fb:cf:
         10:8d:77:29:e3:72:92:1f:5f:d7:29:3d:01:e5:8c:8c:ed:90:
         cf:87:c5:e8:e8:cc:84:08:0f:2a:01:f2:ca:8a:2c:e4:77:89:
         32:5d:cd:a2:b7:61:13:74:28:8a:45:ef:44:b1:da:27:ce:6a:
         b7:22:8d:3d:a7:96:42:34:84:63:f2:24:a7:f2:8d:f1:13:f4:
         4a:91:8d:c5:80:04:6e:1a:f6:cd:75:e2:02:4f:da:e6:fc:28:
         28:6f:c9:97:8a:b7:fd:2f:96:03:b1:66:e2:cb:9f:39:18:5d:
         6e:83:e1:22:85:30:84:1b:ef:93:32:8e:00:41:1c:b3:5f:82:
         04:7d:07:06:99:49:ee:1b:6e:96:28:aa:8d:d6:35:f6:1d:f0:
         87:f5:81:6f:c5:1c:bf:61:2f:36:96:3b:9d:e2:7f:66:14:1f:
         02:08:c2:d7:ed:98:67:b3:dd:39:c5:a2:41:63:2e:4e:38:ac:
         e7:a3:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:47 2025 by rpki-client