Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135372e302f32342d3234203d3e20323732303632.roa
File:                     3138312e3233322e3135372e302f32342d3234203d3e20323732303632.roa (raw, json)
Hash identifier:          9iXczwKM+H/3CRq9zLo3JTa19IEFXP85gi1ByJ/iV7s=
Subject key identifier:   8C:39:78:6E:C5:10:4F:35:89:CA:D9:B1:01:C7:B3:C6:21:F0:C0:F3
Certificate issuer:       /CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Certificate serial:       1D489B264DAE0B2E61C24E185CEC8D3F506326CF
Authority key identifier: E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135372e302f32342d3234203d3e20323732303632.roa
Signing time:             Tue 04 Feb 2025 18:17:35 +0000
ROA not before:           Tue 04 Feb 2025 18:12:35 +0000
ROA not after:            Tue 03 Feb 2026 18:17:35 +0000
asID:                     272062
IP address blocks:        181.232.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:9b:26:4d:ae:0b:2e:61:c2:4e:18:5c:ec:8d:3f:50:63:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A5288FFD963231D7A31DF358516C1DE9044850
        Validity
            Not Before: Feb  4 18:12:35 2025 GMT
            Not After : Feb  3 18:17:35 2026 GMT
        Subject: CN=8C39786EC5104F3589CAD9B101C7B3C621F0C0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:a0:43:7b:c4:9b:5a:0f:0a:a8:24:6d:89:
                    0c:ae:1b:1c:04:b9:10:76:78:f1:ec:65:aa:be:fc:
                    2e:ca:8c:55:e7:7d:7e:41:b2:10:eb:b5:b9:9b:5f:
                    07:50:9b:d4:70:cc:b8:bc:42:bf:94:0f:c5:62:2c:
                    e8:91:87:22:56:2f:9d:1a:d3:ba:3b:39:6c:e7:23:
                    f6:fc:cb:9b:d1:37:59:7b:48:c9:55:c4:63:5a:e3:
                    f3:7d:77:b4:07:fa:1c:6a:44:b2:0a:aa:3f:46:09:
                    f4:8f:fa:dc:24:0c:65:fc:27:9b:c7:0f:11:56:f5:
                    60:03:7e:92:b9:2e:71:cc:22:bd:ab:91:e9:0a:1b:
                    8e:33:6c:1b:ac:22:01:2e:8f:94:2f:b3:8a:44:35:
                    3c:4c:09:f4:91:19:20:74:85:35:cb:39:66:b5:2f:
                    d0:5d:b9:1a:12:c5:0c:20:88:5b:58:d9:7d:ed:04:
                    08:05:15:92:af:01:df:52:7b:d9:4a:35:b3:2b:f0:
                    6c:8d:de:5d:15:e0:cd:25:88:07:25:81:46:3f:ed:
                    6f:e5:fd:70:74:02:00:c7:a4:8a:20:ba:92:1e:12:
                    be:63:97:4a:3c:6c:88:95:f5:00:33:71:41:d6:35:
                    ae:d9:79:e0:f4:28:7e:27:2a:a4:73:f7:80:a8:f8:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:39:78:6E:C5:10:4F:35:89:CA:D9:B1:01:C7:B3:C6:21:F0:C0:F3
            X509v3 Authority Key Identifier:
                keyid:E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135372e302f32342d3234203d3e20323732303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:10:b2:51:83:1c:10:97:94:03:11:05:21:4e:44:23:d7:3c:
         b8:44:f4:7b:12:15:2a:5e:ef:1a:82:fd:cf:58:c0:1b:13:e9:
         63:f9:ff:05:51:d3:16:59:46:cf:c3:8f:42:18:83:a3:87:18:
         aa:3f:f2:86:14:d6:bb:e0:12:d2:13:28:54:a7:b9:97:68:05:
         19:c7:39:cc:de:e4:61:83:93:cf:c2:74:43:6a:16:aa:f3:c5:
         77:92:d5:81:29:c0:b6:86:f2:54:7b:a7:8c:9f:4a:47:a0:dc:
         27:08:18:dc:78:47:96:d4:a1:c0:63:35:f4:b1:87:e7:b7:3d:
         e1:08:a1:af:a2:da:77:dd:ef:f1:9b:34:6c:5d:f6:5c:da:94:
         15:f6:7c:61:fa:92:04:28:c3:91:67:55:e0:13:00:4c:d4:60:
         a4:32:23:2f:f3:a6:a7:76:3d:c6:ac:f7:f7:7c:a2:bc:0c:02:
         4a:97:a7:d2:8d:fe:7c:09:30:ee:01:ed:35:3b:35:0e:50:74:
         b7:93:cd:8b:30:f7:6f:30:70:cf:3f:2e:2e:03:3f:cd:00:4d:
         2a:31:35:df:cd:7a:ff:06:c0:02:a3:87:2e:4e:03:f7:07:5b:
         8d:a1:4e:cf:d7:57:e1:bd:37:d2:5b:2c:76:62:74:b3:bb:cd:
         45:f6:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:14 2025 by rpki-client