Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138312e33362e302e302f31352d3234203d3e203238313138.roa
File:                     3138312e33362e302e302f31352d3234203d3e203238313138.roa (raw, json)
Hash identifier:          vW+YfwTpmqCMjREl5LmdWC46rLGlT5JEsWzWyGrppNw=
Subject key identifier:   12:CE:7E:72:07:8F:3E:46:29:D8:F0:62:2E:1B:72:EB:B1:65:61:91
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       1FD1BF90F5E8BD07CD36F035D2C38E32EB087EB0
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138312e33362e302e302f31352d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:47:01 +0000
ROA not before:           Tue 04 Feb 2025 18:42:01 +0000
ROA not after:            Tue 03 Feb 2026 18:47:01 +0000
asID:                     28118
IP address blocks:        181.36.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d1:bf:90:f5:e8:bd:07:cd:36:f0:35:d2:c3:8e:32:eb:08:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:01 2025 GMT
            Not After : Feb  3 18:47:01 2026 GMT
        Subject: CN=12CE7E72078F3E4629D8F0622E1B72EBB1656191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:e2:63:38:fa:45:48:9b:5d:7f:91:36:1f:
                    92:52:28:e1:38:e7:12:88:26:f1:54:f9:f9:14:67:
                    f3:ee:f6:0b:e6:66:56:bc:db:44:9e:17:87:44:4a:
                    d4:61:7c:ad:d6:b6:01:be:02:14:bb:dd:ef:b0:f8:
                    54:6b:46:d8:23:c8:d6:16:64:32:a0:b2:c7:6e:47:
                    ad:ec:38:35:4c:f3:75:da:5c:ab:9d:92:6a:d4:e1:
                    67:1b:e3:0f:1a:82:dc:3d:2a:e1:5e:40:5d:e1:2c:
                    ea:30:09:28:2a:f4:ca:74:d0:b3:ca:cb:78:c0:9a:
                    d2:b0:6e:a7:ab:f2:fc:bc:6b:43:46:ab:04:65:bf:
                    3f:ca:b4:9a:5a:e0:f8:9a:34:4b:3c:8d:61:ff:49:
                    dc:60:95:77:6e:ad:25:55:0e:fb:7e:d6:4f:8e:5c:
                    d1:a4:4b:55:f9:0a:f7:af:b3:17:12:42:16:08:59:
                    14:5f:11:6d:22:a1:f7:5d:4d:c6:d5:0c:0c:d3:5f:
                    97:fc:33:1f:90:09:d5:3b:a3:8e:25:31:cf:9b:77:
                    14:ea:63:25:0f:6e:9b:dd:ca:09:e7:1e:15:c9:13:
                    15:2a:c1:15:b9:12:eb:b1:e3:f4:86:5c:d2:bc:18:
                    ec:43:24:96:99:49:f0:f7:e2:f2:fa:87:73:5d:51:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CE:7E:72:07:8F:3E:46:29:D8:F0:62:2E:1B:72:EB:B1:65:61:91
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138312e33362e302e302f31352d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.36.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:e0:81:91:43:1b:37:0b:3e:72:d6:bc:a7:7e:c0:4c:8e:
         ab:46:0e:7f:04:c4:73:35:c8:d2:fa:10:84:88:d0:de:41:97:
         d5:87:f3:3c:87:4a:0d:4f:34:7f:96:42:db:36:23:97:94:bd:
         7a:36:5f:55:ac:c1:45:c7:af:27:c5:45:f0:f8:f6:0a:76:4a:
         9d:ef:bd:1e:42:27:7a:58:c5:41:44:c0:aa:7b:1d:fb:79:81:
         2b:2c:cf:91:b2:11:17:ba:3a:72:61:45:3e:82:3d:01:cb:96:
         e9:b5:26:6b:e6:66:8f:c7:e1:61:38:28:c8:85:fa:60:d1:c5:
         61:96:a6:f7:d5:b8:47:68:ac:29:f7:aa:5f:2b:c2:ab:e4:c0:
         bd:74:5e:5b:3b:e1:eb:a0:b2:d0:b5:22:2e:91:83:de:d6:a2:
         12:4f:8a:71:d5:79:77:76:9a:6f:b7:cc:63:e7:7e:00:a2:35:
         de:72:f8:cc:a8:72:88:66:bf:9f:40:ce:98:a6:2b:a7:58:02:
         0b:e2:bf:89:aa:34:9d:5e:f4:0a:ea:0d:bb:d6:ad:19:8d:09:
         be:61:c2:0a:f1:c7:84:9d:0a:e7:4a:72:8b:b4:05:90:cd:d5:
         c4:a4:8e:56:fc:d3:f4:4e:ba:a6:de:cf:24:d3:3e:31:12:88:
         12:6e:bd:6d
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUH9G/kPXovQfNNvA10sOOMusIfrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy
NjBBRTY5QjAeFw0yNTAyMDQxODQyMDFaFw0yNjAyMDMxODQ3MDFaMDMxMTAvBgNV
BAMTKDEyQ0U3RTcyMDc4RjNFNDYyOUQ4RjA2MjJFMUI3MkVCQjE2NTYxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEd+JjOPpFSJtdf5E2H5JSKOE4
5xKIJvFU+fkUZ/Pu9gvmZla820SeF4dEStRhfK3WtgG+AhS73e+w+FRrRtgjyNYW
ZDKgssduR63sODVM83XaXKudkmrU4Wcb4w8agtw9KuFeQF3hLOowCSgq9Mp00LPK
y3jAmtKwbqer8vy8a0NGqwRlvz/KtJpa4PiaNEs8jWH/SdxglXdurSVVDvt+1k+O
XNGkS1X5CvevsxcSQhYIWRRfEW0iofddTcbVDAzTX5f8Mx+QCdU7o44lMc+bdxTq
YyUPbpvdygnnHhXJExUqwRW5Euux4/SGXNK8GOxDJJaZSfD34vL6h3NdUdRXAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUEs5+cgePPkYp2PBiLhty67FlYZEwHwYDVR0j
BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC
QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3
QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx
OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1
QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMxMzgzMTJlMzMzNjJlMzAyZTMwMmYz
MTM1MmQzMjM0MjAzZDNlMjAzMjM4MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBtSQwDQYJKoZI
hvcNAQELBQADggEBAIT24IGRQxs3Cz5y1rynfsBMjqtGDn8ExHM1yNL6EISI0N5B
l9WH8zyHSg1PNH+WQts2I5eUvXo2X1WswUXHryfFRfD49gp2Sp3vvR5CJ3pYxUFE
wKp7Hft5gSssz5GyERe6OnJhRT6CPQHLlum1JmvmZo/H4WE4KMiF+mDRxWGWpvfV
uEdorCn3ql8rwqvkwL10Xls74eugstC1Ii6Rg97WohJPinHVeXd2mm+3zGPnfgCi
Nd5y+Myocohmv59AzpimK6dYAgviv4mqNJ1e9ArqDbvWrRmNCb5hwgrxx4SdCudK
cou0BZDN1cSkjlb80/ROuqbezyTTPjESiBJuvW0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client