Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa
File:                     3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa (raw, json)
Hash identifier:          SUpGvwbwXTed625ACPTa8a1QSJ6GRLd+wNidbuMsKq4=
Subject key identifier:   9C:52:FB:C1:81:60:0D:49:3A:48:C2:42:E1:C8:BD:B1:47:10:C7:1D
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       2DF2E22DEDE2CA38ED0E27D7651C648D49E643FE
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa
Signing time:             Tue 04 Feb 2025 20:01:35 +0000
ROA not before:           Tue 04 Feb 2025 19:56:35 +0000
ROA not after:            Tue 03 Feb 2026 20:01:35 +0000
asID:                     265819
IP address blocks:        181.209.88.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f2:e2:2d:ed:e2:ca:38:ed:0e:27:d7:65:1c:64:8d:49:e6:43:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Feb  4 19:56:35 2025 GMT
            Not After : Feb  3 20:01:35 2026 GMT
        Subject: CN=9C52FBC181600D493A48C242E1C8BDB14710C71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:b8:77:a1:f9:bc:77:44:33:57:17:f5:5f:
                    67:ac:c8:45:a2:0c:c9:86:ad:b4:37:dd:6f:05:8a:
                    8c:d4:7a:21:aa:e8:a9:eb:18:0b:19:3f:41:ef:54:
                    40:8b:1f:44:6f:ec:bf:bd:3b:3e:86:b6:59:78:10:
                    0d:1a:81:72:d3:88:06:94:61:cd:21:c9:9b:cd:5b:
                    2c:4b:5c:ec:ec:df:a5:4d:51:76:79:81:26:b8:7d:
                    01:63:0d:d3:55:74:fc:85:50:e7:f1:b6:c5:34:bc:
                    26:a5:eb:21:0a:40:a8:f1:3b:b1:66:7e:ba:57:8e:
                    70:e2:64:03:6c:fb:73:c2:94:75:4d:f5:58:4b:49:
                    ee:40:86:a4:91:b0:4c:e2:3d:69:78:96:20:8f:db:
                    82:78:c1:33:bd:b4:18:03:7d:f0:20:6f:17:c6:8b:
                    f8:d7:42:dc:f8:de:85:79:3e:a5:2b:31:ec:cb:8d:
                    11:12:fb:a5:87:55:cd:56:0e:4e:0a:57:6f:96:b3:
                    9a:df:ce:56:83:38:6d:d1:b2:5f:45:09:a5:83:30:
                    ed:b4:36:34:2d:a4:69:51:4f:60:f4:57:ff:d4:e6:
                    f1:e2:55:57:a9:99:73:6a:d5:ae:4c:d2:70:bd:47:
                    b1:a0:0f:71:1c:c9:c8:57:5c:25:38:fe:3a:bb:82:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:52:FB:C1:81:60:0D:49:3A:48:C2:42:E1:C8:BD:B1:47:10:C7:1D
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.88.0/29

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:c2:41:39:15:e7:28:2b:db:3a:6e:e4:44:0f:83:43:87:
         43:62:f9:24:63:b9:95:22:e8:dc:3c:bd:d4:20:63:af:7e:5e:
         1e:47:9a:c6:67:26:96:93:6f:06:67:21:66:b6:24:e4:3d:ca:
         9e:15:38:10:95:ee:c6:aa:82:4d:29:f4:4f:4e:18:ca:c3:6d:
         5a:79:91:ec:49:46:29:5a:5c:59:8b:3d:da:e6:c6:8a:86:53:
         54:a5:a0:a7:4d:21:48:c4:3d:4c:25:34:5c:97:f1:f9:f9:97:
         9c:ad:8a:67:33:16:aa:32:df:89:f5:7f:b8:b9:25:e2:bc:9d:
         e8:be:4b:35:48:8e:36:6d:30:cf:c2:f3:16:dc:65:e7:49:ff:
         f1:0c:ad:4b:a6:79:72:c1:cc:7f:ce:89:69:75:91:d5:3b:76:
         13:93:c4:7d:7b:6b:24:89:ee:a1:f6:dc:29:89:16:e0:02:e4:
         36:3f:e4:1c:08:c4:59:c6:f2:80:e6:7e:62:74:65:b7:ef:2d:
         ca:6d:63:b7:d4:45:ef:d2:a1:34:53:21:41:34:dc:bf:93:80:
         08:1a:c8:93:2a:77:96:d3:9f:b9:41:d8:6e:b1:10:20:98:c0:
         3d:df:58:1d:ef:6e:c8:7c:12:9b:9f:02:06:82:ca:99:dd:fc:
         5e:cd:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:13 2025 by rpki-client