Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3235302e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3235302e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          kDV+1ChDUh58cCjlZ64mXhxoiqjxcFnShYL8S6BwRq4=
Subject key identifier:   24:0A:95:2A:6B:CB:DE:82:A5:F1:34:31:D7:72:F9:10:47:CA:B8:11
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       2E85BB6D96E21EC931FF785B8E9C738EEC1D8A82
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3235302e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 04 Feb 2025 18:26:22 +0000
ROA not before:           Tue 04 Feb 2025 18:21:22 +0000
ROA not after:            Tue 03 Feb 2026 18:26:22 +0000
asID:                     27895
IP address blocks:        181.94.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:85:bb:6d:96:e2:1e:c9:31:ff:78:5b:8e:9c:73:8e:ec:1d:8a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Feb  4 18:21:22 2025 GMT
            Not After : Feb  3 18:26:22 2026 GMT
        Subject: CN=240A952A6BCBDE82A5F13431D772F91047CAB811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:5f:7d:e3:15:07:1a:de:4d:30:d3:f2:7e:
                    98:18:fb:48:ac:9f:05:95:f0:da:d7:85:e0:fe:9a:
                    04:c7:3e:d4:88:4d:82:c7:e3:e6:fb:de:d6:55:49:
                    7d:2d:a7:e7:54:85:04:1e:45:51:81:e4:e7:f9:ce:
                    0a:69:30:24:b2:8e:49:fc:80:e4:91:80:96:3f:a5:
                    c7:5e:a8:1c:e2:df:d5:28:34:b9:9b:3f:35:41:84:
                    1b:7d:51:7b:cd:df:50:b0:9a:b1:64:aa:e5:fd:86:
                    b9:2e:40:71:50:ca:4a:a4:38:05:e9:27:68:56:5b:
                    4b:0c:2b:d5:8f:40:fa:51:8e:74:9f:2a:60:d0:96:
                    30:c5:a5:9a:e4:76:04:ac:b1:7a:9d:60:39:69:b2:
                    db:ee:50:70:59:a2:aa:d0:e1:90:13:a1:6e:95:02:
                    71:f8:5b:c0:4e:0b:b7:c6:68:3d:e1:30:20:2a:bd:
                    d9:bd:a4:2f:db:41:91:af:02:7a:c6:e2:56:e8:b7:
                    50:14:38:67:9a:ff:f9:e2:8c:b2:b8:0c:8f:84:f0:
                    b1:45:3d:9e:22:6a:e9:4b:06:35:0c:0e:66:63:4c:
                    36:eb:d4:3a:db:09:50:dc:b4:38:9e:7e:bf:88:e9:
                    d0:9f:d5:2b:07:7a:3b:05:22:19:6e:87:ba:2a:93:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:95:2A:6B:CB:DE:82:A5:F1:34:31:D7:72:F9:10:47:CA:B8:11
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3235302e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:be:54:17:a2:60:74:95:4b:b3:9e:b0:6b:dd:b7:56:23:f1:
         5f:4c:d5:c0:05:77:e1:a8:fd:86:df:cf:a3:20:38:2d:f1:d3:
         c2:7d:f5:86:f2:19:28:7b:f6:51:ff:9a:74:c3:0d:8c:c8:8c:
         6d:da:07:e6:c4:6d:f3:9c:76:ae:7f:9b:ad:6f:67:57:2b:6a:
         b4:75:f9:6e:5e:3b:1b:89:4f:fe:87:f5:5a:85:cd:8f:03:96:
         26:77:5f:73:b5:97:3a:4c:35:e2:68:51:9a:9c:ac:b6:6a:9b:
         a0:79:70:c8:15:4c:86:cf:12:ee:82:9b:d6:95:33:a5:f7:f2:
         b0:59:ec:51:6e:02:7d:fc:e9:d6:d4:97:1f:ce:82:6f:ec:11:
         7b:f2:de:e4:5e:38:b0:1f:68:60:ba:38:79:44:16:55:cd:65:
         4c:e9:04:1d:7e:06:da:59:3e:b6:9b:5e:3a:b2:ca:6a:47:13:
         c7:25:bf:7f:d2:92:2e:99:79:da:02:f3:14:c4:30:af:d0:0e:
         55:d4:13:f1:bb:94:e4:55:48:d4:eb:8c:c7:39:be:1a:0a:a6:
         90:9f:d0:2c:36:7b:49:2b:36:dc:32:4f:81:74:df:12:d8:18:
         78:7b:12:d4:99:82:ae:18:d1:30:52:41:fe:24:d8:33:9c:a5:
         10:09:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:46 2025 by rpki-client