Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138312e3230382e302e302f31362d3234203d3e203231383236.roa
File:                     3138312e3230382e302e302f31362d3234203d3e203231383236.roa (raw, json)
Hash identifier:          xKeeT5M348x6zLKV7F8mXUfBeaf4QdnEVuvM64B+y/M=
Subject key identifier:   41:34:37:81:3B:93:96:44:75:22:C2:8F:B9:0E:19:69:B2:A9:ED:54
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       1992C65379758AE63A3B52229592EB64928B925C
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138312e3230382e302e302f31362d3234203d3e203231383236.roa
Signing time:             Tue 04 Feb 2025 18:44:31 +0000
ROA not before:           Tue 04 Feb 2025 18:39:31 +0000
ROA not after:            Tue 03 Feb 2026 18:44:31 +0000
asID:                     21826
IP address blocks:        181.208.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:92:c6:53:79:75:8a:e6:3a:3b:52:22:95:92:eb:64:92:8b:92:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Feb  4 18:39:31 2025 GMT
            Not After : Feb  3 18:44:31 2026 GMT
        Subject: CN=413437813B9396447522C28FB90E1969B2A9ED54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:0e:28:57:4d:67:53:db:8e:b9:76:73:da:
                    d6:17:62:08:df:51:b0:aa:7b:8c:a2:98:95:f6:68:
                    33:1f:e1:1f:da:29:54:98:e4:64:e4:95:7f:61:d9:
                    c4:e7:db:4a:be:26:84:09:b8:47:74:b6:36:4d:dc:
                    d7:01:36:39:7e:f2:a5:fc:db:09:0e:b8:1b:a9:01:
                    00:98:ad:70:cc:d3:33:a1:4d:f3:a1:95:2d:dd:41:
                    27:a3:b5:a7:21:5e:47:f1:8c:c1:90:3e:b1:c1:79:
                    b3:2d:be:5b:7f:ff:d2:66:cf:3d:6b:9b:c3:52:89:
                    54:8f:c4:9c:96:b4:6b:37:e8:b6:b3:ee:fc:ae:69:
                    70:f9:19:78:94:dd:4e:08:17:88:32:68:10:d6:a0:
                    ef:29:4a:bf:42:de:da:b2:ad:f2:97:45:5a:ca:a0:
                    4e:27:e4:52:77:83:43:6c:1f:bc:cd:f8:25:0f:0b:
                    76:7a:fb:dd:25:a1:0a:ae:a6:d2:8b:f2:0d:89:c8:
                    71:6a:e3:fd:85:0c:78:bd:1f:3a:c0:47:ac:27:0c:
                    e1:70:f3:8f:e0:e5:44:c4:e7:75:c7:e7:5a:20:ac:
                    10:b6:7a:b4:0d:72:d5:a3:9b:b4:a5:d5:83:b5:ed:
                    83:26:b7:83:e7:53:dc:31:6c:9d:1c:51:b5:6f:16:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:37:81:3B:93:96:44:75:22:C2:8F:B9:0E:19:69:B2:A9:ED:54
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138312e3230382e302e302f31362d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:8d:58:dd:eb:8c:f2:4a:93:68:5b:be:1c:6a:2f:9d:3e:7f:
         d8:2f:b1:11:9a:5f:2d:55:d0:19:22:23:a0:0b:84:87:34:91:
         7f:27:ba:d9:a6:db:51:c6:01:74:e6:76:d3:e7:78:fe:df:57:
         ea:5d:2c:d9:8b:b3:55:d8:dd:cd:48:a9:30:a1:ce:1c:79:d4:
         73:9d:58:98:45:02:ef:37:e9:dc:44:d5:f6:d3:a9:c4:e8:eb:
         21:a2:84:4a:a8:59:ee:e6:dc:80:88:ef:7d:d9:8f:8a:43:6d:
         d7:22:a0:72:34:36:d0:a3:59:73:ee:cd:01:a2:03:f6:f0:d9:
         b8:6d:71:d3:54:a6:68:fd:1c:f6:5f:1b:11:3e:80:47:5e:30:
         76:46:40:2e:69:e7:64:e3:72:52:38:3b:a6:b0:72:1e:13:bd:
         e6:d9:e8:56:f8:b5:ee:09:6e:56:2d:f1:4b:d8:33:53:45:0b:
         84:91:99:24:a9:35:5a:7f:45:82:a7:b4:02:b5:e8:94:26:74:
         39:ad:e7:52:7c:27:3e:24:46:9f:c2:20:5a:8c:07:08:d4:f6:
         85:51:6e:df:89:d5:56:84:6e:4e:a3:71:f0:fa:e4:d2:85:04:
         72:c3:e4:cb:ac:b1:ff:77:0f:2c:56:85:32:78:d9:81:c6:bb:
         1f:c7:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:48 2025 by rpki-client