Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa
File:                     3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa (raw, json)
Hash identifier:          PoyXFTvQ7db7j+kJDWVo/oqWsuPk8LSDW8VGfmx4Zdo=
Subject key identifier:   CE:4F:91:79:CE:DD:5E:A4:E9:04:AB:6D:6E:EB:86:D5:DF:8A:E5:4B
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       11733473D9CB412EDD137837BC0758B00D4F188C
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa
Signing time:             Tue 04 Feb 2025 18:25:15 +0000
ROA not before:           Tue 04 Feb 2025 18:20:15 +0000
ROA not after:            Tue 03 Feb 2026 18:25:15 +0000
asID:                     264764
IP address blocks:        181.199.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:34:73:d9:cb:41:2e:dd:13:78:37:bc:07:58:b0:0d:4f:18:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Feb  4 18:20:15 2025 GMT
            Not After : Feb  3 18:25:15 2026 GMT
        Subject: CN=CE4F9179CEDD5EA4E904AB6D6EEB86D5DF8AE54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:b7:89:5a:8a:8f:99:77:3c:aa:9d:7a:e3:
                    42:6c:33:97:a9:39:62:64:5e:67:74:a7:34:c8:4e:
                    08:d1:09:23:fc:cf:0e:02:4b:9d:f7:46:d5:e6:e3:
                    50:fa:74:1b:54:78:dc:94:1b:35:ad:18:88:19:d2:
                    e0:bf:d8:d5:d0:20:33:cb:ca:c1:7b:be:3e:b0:7b:
                    e6:98:4c:b3:7d:ab:87:e5:ce:9e:11:67:a5:dd:90:
                    0c:81:bb:43:f4:b0:7b:ef:0d:c4:39:e9:33:e2:b3:
                    8d:7a:45:92:8e:7b:90:53:8c:dd:69:4f:24:15:f7:
                    67:33:d6:6c:c4:31:ab:7d:38:ee:bc:fa:14:f7:ea:
                    a3:00:31:65:da:71:4b:a3:37:6a:31:fb:0d:8b:dc:
                    e8:45:89:ae:cd:a2:47:40:a8:fc:03:b4:f4:02:0e:
                    94:c7:22:f6:0c:db:2c:41:56:4e:12:59:74:46:95:
                    91:be:ea:3b:c8:97:94:88:c5:bc:b3:b6:87:6b:49:
                    60:40:76:08:7c:7b:c8:ee:ec:f2:c6:07:06:fe:3c:
                    0d:28:e3:6f:17:8d:59:1a:8a:9d:e8:04:84:a0:84:
                    92:77:29:39:88:30:49:bc:a0:e9:c5:c1:39:dd:f4:
                    06:27:9a:1e:18:a6:ed:79:31:db:7a:d9:67:80:2e:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:91:79:CE:DD:5E:A4:E9:04:AB:6D:6E:EB:86:D5:DF:8A:E5:4B
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:02:6d:29:8e:a5:68:b5:83:88:74:89:d4:6a:f3:89:64:8e:
         0e:d6:e8:0c:0e:2f:20:73:84:f4:97:76:b7:ff:76:e2:bf:ff:
         ba:22:02:55:8d:38:51:c5:e1:03:65:52:ec:55:74:93:8d:fe:
         43:62:1e:33:f7:f3:c8:38:27:ce:70:96:38:44:fc:3b:9e:b9:
         e3:51:e4:c6:4c:e5:6d:c4:d1:c1:54:35:da:81:1a:0c:a9:7e:
         c8:3f:bc:62:36:f3:fc:50:f1:b7:bc:3b:9b:63:c5:85:7d:64:
         2c:1a:68:5e:14:88:02:12:fd:37:ab:f8:57:e4:5c:ec:0e:0b:
         cd:76:64:c8:9c:ac:23:9c:45:26:8d:da:ed:6c:a8:79:8d:90:
         7c:2f:80:de:b2:bd:95:ba:cc:fe:26:64:51:92:d4:94:ad:df:
         45:78:30:81:ba:a6:89:32:ff:ff:ae:f0:62:d9:1b:94:c6:9e:
         de:2a:a4:59:7e:82:75:83:f2:3f:e1:97:75:97:1c:ef:20:94:
         44:64:46:83:70:bd:8e:39:f6:b9:5b:be:b8:ed:11:ec:58:49:
         9d:83:e7:63:2d:90:9c:71:b1:84:ff:f4:59:da:f6:4d:9b:a1:
         4f:6e:72:bd:b4:37:26:fc:50:ef:90:2e:44:7f:a3:fb:c4:90:
         8b:50:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:10 2025 by rpki-client