Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa
File:                     3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa (raw, json)
Hash identifier:          KKJfQLLThGAAKVwtivTsfa5yqUnFZhZ/02wzS1bCmlQ=
Subject key identifier:   47:0D:DA:B3:55:26:13:74:5B:6D:2D:D9:45:B1:2B:75:E0:A0:51:84
Certificate issuer:       /CN=F941F05838322F3861C4923BEDA92F310248FAF9
Certificate serial:       47BF17FB7419914CB7E7B17BF5291B15CBC44B50
Authority key identifier: F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa
Signing time:             Tue 04 Feb 2025 18:40:12 +0000
ROA not before:           Tue 04 Feb 2025 18:35:12 +0000
ROA not after:            Tue 03 Feb 2026 18:40:12 +0000
asID:                     272035
IP address blocks:        181.232.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 06:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:17:fb:74:19:91:4c:b7:e7:b1:7b:f5:29:1b:15:cb:c4:4b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F941F05838322F3861C4923BEDA92F310248FAF9
        Validity
            Not Before: Feb  4 18:35:12 2025 GMT
            Not After : Feb  3 18:40:12 2026 GMT
        Subject: CN=470DDAB3552613745B6D2DD945B12B75E0A05184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:7b:e0:18:b6:5b:3a:76:17:3b:4f:85:03:
                    94:a0:2b:9d:10:4c:70:6d:3d:f3:be:46:3b:a6:8b:
                    45:37:12:69:64:f0:42:1e:6c:e9:8e:ae:82:ec:4a:
                    fd:ac:6a:6d:92:f1:32:24:47:d1:fa:b7:29:d7:4b:
                    86:a8:ae:89:57:e8:3d:bb:7b:72:b2:bf:54:69:63:
                    7e:24:fd:1d:ba:99:5a:ab:b7:31:a2:69:82:88:0c:
                    ed:9f:c5:cb:d5:e6:4f:c2:2d:30:25:a3:08:15:fe:
                    b1:f9:a7:20:49:2b:ca:92:49:e7:b9:b1:5c:b3:7d:
                    f9:2a:51:4c:b8:3c:87:f2:71:21:8d:31:df:5d:38:
                    ab:ab:4d:dc:54:19:e9:5f:8e:6e:15:86:00:b9:ec:
                    0e:37:9b:77:2e:39:b9:9a:5f:78:e6:40:a3:f7:cd:
                    6e:19:9c:d2:43:a8:12:08:36:ec:a6:0a:de:77:19:
                    f0:f3:78:26:fe:2d:ab:c4:be:06:3d:b3:ac:69:2c:
                    c6:d5:45:cc:b2:d5:71:8b:ab:5b:36:0f:ae:40:d0:
                    29:3d:fe:e7:c0:e2:30:52:36:8a:8c:e2:96:5f:de:
                    4e:3e:89:a5:89:a9:c8:4f:a1:f0:2f:42:de:b1:e7:
                    0f:2c:02:38:24:bd:ab:06:c9:3d:0d:1b:55:30:d7:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0D:DA:B3:55:26:13:74:5B:6D:2D:D9:45:B1:2B:75:E0:A0:51:84
            X509v3 Authority Key Identifier:
                keyid:F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:af:71:01:51:0d:d6:71:eb:75:f6:50:f4:b2:c3:50:bb:1d:
         cf:4a:00:71:50:d8:68:8e:5f:c7:40:6e:16:76:2f:e4:09:be:
         f3:b7:43:aa:cb:be:6b:4a:0b:d0:f3:f7:e3:0a:15:af:ef:df:
         58:b2:28:99:01:14:52:e2:b3:a1:aa:01:3b:10:29:62:20:9f:
         69:6a:ef:4e:59:96:99:01:5e:83:fb:92:45:05:b5:39:27:62:
         15:4a:00:64:3d:bf:40:2b:3e:9b:dc:2c:16:c6:b2:ca:e0:d5:
         9c:b0:d9:2e:94:bf:af:71:aa:94:d6:6a:d8:75:61:fb:8e:6f:
         e1:94:f6:81:c5:fd:50:d1:a3:ec:78:41:aa:13:6e:c7:6c:19:
         dd:41:40:6b:90:71:44:b8:13:01:96:ba:ea:4f:4c:32:c0:8e:
         7e:f9:c2:d0:24:c5:f1:d1:48:3c:4d:1b:5f:97:d6:ae:ba:3c:
         d2:d4:21:a2:ef:ec:6f:28:5c:2f:fa:3d:c9:7b:51:e2:49:73:
         b8:0a:99:f9:16:07:19:b7:8d:5f:de:60:74:4b:a8:35:d7:dd:
         56:8a:28:7d:29:5f:7b:8b:28:79:15:90:d5:06:8f:70:55:70:
         8a:e1:9b:32:c8:b9:83:33:6f:e5:b9:3b:dd:dc:5a:85:98:5e:
         62:4f:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:21 2025 by rpki-client