Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234342e302f32322d3234203d3e203237383935.roa
File:                     3138312e39342e3234342e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          d72ZjD2qpSLN1mWUcfJYyO6GqlgiaSA70j6VFcC2LSY=
Subject key identifier:   9D:25:97:D1:49:C7:59:C3:D0:F0:06:D5:D5:D5:07:CC:D1:43:E2:8A
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       4241B54281F9CA2A2B4D2133CCA18503333651B9
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234342e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:27 +0000
ROA not before:           Tue 04 Feb 2025 18:21:27 +0000
ROA not after:            Tue 03 Feb 2026 18:26:27 +0000
asID:                     27895
IP address blocks:        181.94.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:41:b5:42:81:f9:ca:2a:2b:4d:21:33:cc:a1:85:03:33:36:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:27 2025 GMT
            Not After : Feb  3 18:26:27 2026 GMT
        Subject: CN=9D2597D149C759C3D0F006D5D5D507CCD143E28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:07:ec:5a:b5:e8:02:80:27:13:0d:ce:2e:
                    b0:24:9b:ad:c3:d3:e2:9a:ee:99:44:b4:f4:c5:32:
                    a0:07:f0:50:92:5b:e0:e9:24:59:d5:0f:31:6f:75:
                    a9:1a:28:7d:a3:93:03:43:63:59:38:8b:f9:b7:f7:
                    18:59:f6:aa:3f:cf:d2:e2:b9:f5:07:28:45:5f:e1:
                    d1:d0:6b:e7:b9:92:19:ab:6a:d3:82:c9:c6:ee:c4:
                    de:70:ea:d6:e2:c0:50:16:12:c8:30:1d:c8:a6:da:
                    bb:1b:6c:0a:8e:ea:e8:e2:7c:e5:96:78:ee:42:ff:
                    c4:2b:63:f2:97:e5:69:24:da:3a:f3:2f:55:78:7c:
                    e2:b5:82:3c:53:ca:8e:f9:c8:37:5c:8f:df:9c:95:
                    cc:9c:26:66:90:45:fe:02:9c:12:4d:18:d3:14:2a:
                    d5:23:0f:22:ec:23:e6:bf:d4:69:a8:5e:12:d7:57:
                    2b:1e:b7:08:df:9e:13:47:e0:4a:88:a5:5e:2c:3b:
                    2b:2d:f0:7d:04:ed:f1:68:6d:d6:af:f2:55:a6:88:
                    48:a9:7a:ab:68:65:fa:e8:7d:91:40:6c:b9:47:92:
                    b9:c1:57:66:3d:a0:90:93:33:f7:2c:58:41:66:c0:
                    c1:9d:a6:a5:d5:ce:ee:aa:8a:e8:cd:22:d9:26:b6:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:97:D1:49:C7:59:C3:D0:F0:06:D5:D5:D5:07:CC:D1:43:E2:8A
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234342e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:c8:ba:14:6a:41:27:81:3e:2f:5d:57:cb:e0:62:0f:4c:
         7b:84:99:d9:71:ad:4b:a7:8c:e7:64:ef:41:87:29:49:65:25:
         d5:b9:f5:f8:9d:6a:36:fd:e0:23:ce:47:bc:bc:24:7d:98:74:
         c0:06:d1:c1:da:1b:33:17:56:27:e7:39:46:75:8e:15:60:0d:
         f9:d9:2f:a4:c5:e6:e4:7b:73:fc:7a:93:3f:c3:5d:10:df:da:
         3f:19:cd:a7:84:65:34:8b:2c:4b:f3:66:0c:9b:42:06:70:79:
         81:1f:a5:35:40:64:bd:27:05:4b:bd:66:35:72:4e:72:a2:19:
         41:aa:b0:41:be:a4:23:c4:2b:f5:40:8c:f9:df:66:34:c0:08:
         8a:21:d7:da:20:61:b6:2d:31:74:30:c4:59:78:73:68:0d:fe:
         d2:cf:27:9b:f5:d8:1d:dd:1c:e5:5d:2d:65:41:2e:fd:97:37:
         22:fd:51:15:c0:7b:cd:05:00:b3:3a:65:62:34:af:e8:8e:92:
         d5:ee:a5:e8:b1:fa:46:28:98:f5:37:10:86:00:27:30:73:c3:
         2a:0d:10:de:6a:d6:a6:58:0d:f6:79:4d:70:63:15:00:05:aa:
         58:b3:ec:e6:0d:ca:a9:96:7f:45:73:21:ae:81:c9:c1:06:45:
         b8:cc:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:29 2025 by rpki-client