Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234322e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3234322e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          flOxRlXjjzNCk/E0gzvDhUKdnNIgsZd7PGRPS7vPbpA=
Subject key identifier:   5B:24:0A:69:2A:14:44:42:A3:B2:D7:ED:5D:49:AF:78:26:19:0B:FE
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       079BF29D08357FA315C0CFFDEBE7118A3D17028D
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234322e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:25 +0000
ROA not before:           Tue 04 Feb 2025 18:21:25 +0000
ROA not after:            Tue 03 Feb 2026 18:26:25 +0000
asID:                     27895
IP address blocks:        181.94.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9b:f2:9d:08:35:7f:a3:15:c0:cf:fd:eb:e7:11:8a:3d:17:02:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:25 2025 GMT
            Not After : Feb  3 18:26:25 2026 GMT
        Subject: CN=5B240A692A144442A3B2D7ED5D49AF7826190BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:27:4c:dc:8e:83:2e:b9:ef:12:b5:72:00:
                    57:8b:d9:23:66:18:60:37:23:fb:1d:5a:13:5a:02:
                    4f:1e:85:49:15:57:67:6d:40:72:91:38:c0:45:5c:
                    72:d6:71:d4:30:54:cf:8f:b8:b1:49:91:c1:0b:e8:
                    1a:68:61:9b:42:6b:18:39:89:23:c3:22:05:4c:fb:
                    1a:4b:5b:e5:ac:db:f0:18:f4:ad:b0:5c:e2:d7:e4:
                    c8:50:0a:99:99:eb:d6:ad:f8:23:dd:b0:d8:42:2c:
                    68:14:27:c9:2e:a0:01:90:63:46:52:3e:3a:c2:0e:
                    05:dd:fe:7a:92:a3:30:75:13:69:7f:97:69:3a:0b:
                    bc:4a:05:78:1f:cb:25:52:2e:87:98:37:ed:fe:80:
                    71:13:00:3e:28:32:3b:6d:70:cb:25:fc:69:87:c8:
                    23:31:b3:0f:4a:d5:c6:01:a5:7d:c2:af:27:f3:4e:
                    f1:67:37:07:d3:2e:2e:15:55:64:b8:08:42:75:fe:
                    3a:0c:e3:4b:1d:b3:33:7e:38:ae:15:9e:a0:ab:32:
                    50:30:4d:24:c9:97:9b:8e:f6:20:cc:e0:ce:2f:ae:
                    17:92:98:b9:8d:68:3b:08:6a:66:62:23:35:00:be:
                    17:d2:33:85:28:f0:a4:2d:fb:51:5d:18:3a:b4:47:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:24:0A:69:2A:14:44:42:A3:B2:D7:ED:5D:49:AF:78:26:19:0B:FE
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234322e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:12:fc:13:44:92:52:3f:13:92:39:c0:49:f5:a0:2a:36:
         ed:d0:67:50:82:58:2c:67:8e:10:a6:32:be:6b:bf:fb:8e:a7:
         d6:3b:24:8b:26:ee:cc:e6:5d:2d:9e:e9:10:ed:da:df:5c:41:
         35:d6:61:5e:58:4d:49:ee:99:ae:91:d7:5f:0a:29:24:47:54:
         80:1a:2b:27:11:27:04:01:f6:ed:5d:ca:ad:76:d2:95:69:d1:
         e3:a5:82:81:77:29:26:00:35:f9:9d:92:83:d4:45:86:06:87:
         aa:f7:95:ef:41:cb:98:7e:96:cd:19:91:c0:48:66:56:d0:48:
         78:74:a8:88:79:7a:75:df:84:9f:21:82:56:67:76:75:d1:ec:
         3a:c8:9d:fa:cc:ca:03:9a:45:0e:7a:ad:e1:99:48:f8:3c:78:
         93:e6:14:22:45:d5:ce:d4:03:77:df:2d:e1:a3:bc:b4:90:70:
         a3:32:51:1a:12:bc:a1:5f:cc:d0:92:c3:c0:f4:de:70:d6:3d:
         ba:a5:8d:1f:a7:3d:8f:e4:94:a3:a9:24:ef:e6:95:30:c6:a1:
         87:fe:26:45:ec:1f:b0:19:66:64:71:17:c9:74:b8:18:a7:1b:
         1e:22:45:48:7d:94:66:b6:77:a4:ef:fd:01:e4:6d:fe:fa:8f:
         91:3a:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:27 2025 by rpki-client