Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e302e302f31372d3234203d3e203532333631.roa
File:                     3138312e3230392e302e302f31372d3234203d3e203532333631.roa (raw, json)
Hash identifier:          cxeHE2TDyfxUzBya4o37zsTxCWdsUpbl9H+sWj89bZY=
Subject key identifier:   4F:C2:B5:7A:4A:67:70:AB:4C:60:8E:EE:DB:FF:7B:97:B8:E6:17:04
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       33C77F76C8A28EA6C0DF6CF1BFAC0A8736842F76
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e302e302f31372d3234203d3e203532333631.roa
Signing time:             Tue 04 Feb 2025 20:01:36 +0000
ROA not before:           Tue 04 Feb 2025 19:56:36 +0000
ROA not after:            Tue 03 Feb 2026 20:01:36 +0000
asID:                     52361
IP address blocks:        181.209.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:7f:76:c8:a2:8e:a6:c0:df:6c:f1:bf:ac:0a:87:36:84:2f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Feb  4 19:56:36 2025 GMT
            Not After : Feb  3 20:01:36 2026 GMT
        Subject: CN=4FC2B57A4A6770AB4C608EEEDBFF7B97B8E61704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:25:7c:05:90:af:72:32:7b:f5:4d:c3:34:
                    3a:21:c1:4f:8b:34:ce:f6:fa:17:27:0d:3d:b5:5e:
                    d4:82:07:47:b2:ce:2d:70:11:85:0e:99:c9:ac:44:
                    a5:7e:22:aa:fb:28:f9:d4:2a:65:35:e4:6d:0a:9d:
                    1b:9d:c7:4a:b9:e3:40:45:4c:09:8f:ed:9e:4d:b2:
                    df:d4:5f:73:3f:6c:d0:b3:dd:46:ea:95:34:80:c1:
                    1d:33:dd:a1:89:01:a9:21:2a:34:20:a4:f1:be:9e:
                    e6:b2:aa:20:77:ac:7b:0d:a7:41:9b:6a:d2:55:f9:
                    4c:7c:67:8c:f8:47:0c:ca:fb:72:73:ec:02:8b:36:
                    e1:ab:b7:b1:7c:c8:b6:69:d6:44:1c:15:36:c7:3d:
                    67:69:03:3c:47:18:be:fd:d9:e7:9f:2c:10:18:31:
                    53:89:5a:ef:0a:31:6d:54:e0:e2:df:c4:c8:e2:2f:
                    7b:f7:74:74:7f:b2:87:d5:6d:f1:44:c8:20:cd:97:
                    30:c2:c8:36:c5:83:23:10:5d:27:6a:16:64:cf:0a:
                    14:09:41:de:da:a1:ff:06:84:1f:8c:d5:6b:bc:60:
                    f1:ad:43:0e:ee:96:ab:7e:15:eb:a7:55:15:fb:d8:
                    95:8a:b2:bd:91:df:9e:4e:d2:93:3d:0c:ff:90:57:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:B5:7A:4A:67:70:AB:4C:60:8E:EE:DB:FF:7B:97:B8:E6:17:04
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e302e302f31372d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:76:fb:15:17:7c:12:89:3d:74:07:a7:80:9e:17:46:5f:3e:
         6c:63:1f:d6:2e:84:b2:db:98:c7:a9:e1:bd:53:7e:ec:96:ac:
         22:da:ba:e9:de:69:93:56:cf:67:ca:ca:ff:0a:0b:9c:43:a4:
         c7:d0:7d:7e:76:d2:25:cf:8d:5d:62:da:d6:d1:1d:4b:da:65:
         f3:ab:82:c0:c6:65:27:91:aa:27:4c:61:dd:43:05:c4:46:df:
         6f:73:33:eb:b2:f1:ee:83:13:a9:d0:2f:26:22:29:d0:67:50:
         c6:43:52:da:81:e3:ca:a2:fc:1f:a9:d5:73:23:e2:2b:1e:d1:
         6f:6b:76:8f:52:4b:8a:f4:d0:3c:43:e7:1d:84:9d:5b:64:f4:
         69:b5:65:b7:cc:c7:cc:39:f7:48:b2:a7:8f:58:77:95:cc:52:
         0c:79:7e:89:22:e8:64:d6:f2:f8:93:46:3f:f7:56:4d:9f:1d:
         46:98:e9:bc:fa:3a:46:6a:62:eb:f1:49:81:bf:fa:f6:30:95:
         61:e2:89:f5:d4:67:6b:3d:fc:2c:45:17:4b:b5:86:29:69:85:
         9b:26:96:f0:7c:6b:32:a2:30:23:24:88:b0:55:a0:e4:d1:63:
         29:b4:2f:0d:59:38:33:57:9b:d0:a2:03:2e:4e:41:61:39:37:
         81:5b:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:12 2025 by rpki-client