Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135382e302f32342d3234203d3e20323732303632.roa
File:                     3138312e3233322e3135382e302f32342d3234203d3e20323732303632.roa (raw, json)
Hash identifier:          xkJYkMCe3/GXGDsZfxcKv/jL16dgx/K+lEGpOzeCU3E=
Subject key identifier:   BD:C8:8C:23:B5:2F:AB:10:DB:BA:76:9C:D6:1B:C2:6B:4C:2E:91:27
Certificate issuer:       /CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Certificate serial:       5B0603144AE15F99A5C16B7A50518745C6C94450
Authority key identifier: E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135382e302f32342d3234203d3e20323732303632.roa
Signing time:             Tue 04 Feb 2025 18:17:34 +0000
ROA not before:           Tue 04 Feb 2025 18:12:34 +0000
ROA not after:            Tue 03 Feb 2026 18:17:34 +0000
asID:                     272062
IP address blocks:        181.232.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:03:14:4a:e1:5f:99:a5:c1:6b:7a:50:51:87:45:c6:c9:44:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A5288FFD963231D7A31DF358516C1DE9044850
        Validity
            Not Before: Feb  4 18:12:34 2025 GMT
            Not After : Feb  3 18:17:34 2026 GMT
        Subject: CN=BDC88C23B52FAB10DBBA769CD61BC26B4C2E9127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:06:ce:36:3d:15:f4:21:9b:1d:71:b1:9c:
                    3b:fa:b1:9c:f2:16:b7:7f:d6:21:0c:26:ec:3a:33:
                    da:6c:0c:d3:84:94:bb:14:08:10:f6:ba:c2:57:80:
                    18:28:73:e8:ae:33:f7:4b:c2:00:ec:74:b7:27:3e:
                    f6:e6:2a:1b:35:c4:4c:fe:4a:39:e7:a7:58:27:97:
                    22:33:77:30:c9:54:d3:d2:30:78:95:9f:fc:94:42:
                    dc:88:1f:63:bc:b2:3b:e4:e6:72:bc:09:4d:10:26:
                    dd:8b:f6:75:6b:89:0f:8c:33:76:75:55:5a:30:87:
                    63:c8:e0:ce:00:10:75:ea:91:29:bc:65:44:8d:20:
                    a1:30:cb:d1:d9:b4:af:0d:41:8a:46:7e:81:d9:89:
                    da:62:6a:6a:6a:3e:90:77:ba:89:56:d9:94:49:09:
                    82:3e:87:a0:6b:ba:a3:28:9d:b2:cd:27:27:30:e6:
                    d1:4f:db:6f:3e:67:e0:4e:b2:bc:36:b9:6f:16:7e:
                    c9:22:3c:c9:bf:59:89:08:6b:ae:ff:2c:9b:54:ff:
                    d9:ba:1c:5e:e2:2c:a4:ae:7f:5b:4d:54:93:9a:e9:
                    64:3d:11:13:0c:c1:31:5b:91:fa:5d:75:84:be:8e:
                    b9:b0:b4:9b:6d:01:a7:b8:4c:8e:24:6a:fa:6b:08:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:8C:23:B5:2F:AB:10:DB:BA:76:9C:D6:1B:C2:6B:4C:2E:91:27
            X509v3 Authority Key Identifier:
                keyid:E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135382e302f32342d3234203d3e20323732303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:0d:1e:63:1f:a2:dd:4b:2b:ce:f8:c3:62:6a:63:a9:e0:
         97:51:bb:a0:5e:02:ac:d1:03:f7:09:a5:66:68:c1:bf:1c:88:
         af:c9:5d:b0:07:27:e9:e2:0d:9c:13:dd:93:fe:a7:9f:27:6b:
         16:2e:44:ad:cf:6e:2e:de:f0:91:2e:9c:e2:db:14:3f:7c:61:
         39:0b:fa:dc:81:73:bc:0f:a5:e2:be:17:e1:a0:e4:30:b7:9a:
         d5:db:4b:43:7e:a9:d5:5d:d5:f9:74:f9:f6:9f:59:b5:2c:83:
         b9:72:8e:93:e9:bd:94:6b:1c:a0:a4:d6:26:a7:84:c0:62:ce:
         52:ed:4f:71:d8:97:a8:ba:52:60:17:60:5d:91:7d:3e:42:cd:
         bb:39:d2:0b:69:a1:d5:ca:49:5f:8a:d8:34:38:77:83:97:5b:
         ba:f8:bf:36:9f:19:66:fb:fb:fe:ba:16:52:e4:19:e3:da:d2:
         d0:92:2c:1d:73:d2:48:ea:e4:ad:6e:ed:e6:d9:e1:78:9d:5b:
         5e:60:55:1c:f6:1f:3d:4e:93:9d:a4:d1:55:e9:57:6e:a2:90:
         dd:84:3d:a9:9f:0c:5c:6f:cb:75:e8:3d:2d:52:06:97:62:06:
         dc:5e:29:c6:4b:4b:a6:49:49:9e:ba:f4:37:36:a7:ad:c1:c8:
         02:fa:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:27 2025 by rpki-client