Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa
File:                     3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          7PxBAIWGNQrNoiKKhn34+QxCILCF+8X+FGksgZkfuVY=
Subject key identifier:   9C:90:BC:FF:03:C9:41:F7:F2:8D:81:FE:8B:F5:F2:A4:BB:1E:F0:F4
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       76A2C2E17A982DC27E8E62489E0081BDC2A204DC
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa
Signing time:             Mon 10 Feb 2025 19:09:25 +0000
ROA not before:           Mon 10 Feb 2025 19:04:25 +0000
ROA not after:            Mon 09 Feb 2026 19:09:25 +0000
asID:                     265524
IP address blocks:        181.191.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a2:c2:e1:7a:98:2d:c2:7e:8e:62:48:9e:00:81:bd:c2:a2:04:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Feb 10 19:04:25 2025 GMT
            Not After : Feb  9 19:09:25 2026 GMT
        Subject: CN=9C90BCFF03C941F7F28D81FE8BF5F2A4BB1EF0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:cc:fc:c5:c3:ed:c8:f2:9b:ea:10:48:11:
                    b2:2c:ca:4b:4a:da:83:e4:9d:0f:ed:df:31:2d:ed:
                    6e:f8:b9:c3:6f:b1:23:b3:90:0e:1a:14:2d:a8:a4:
                    9d:ef:64:b1:d6:79:81:ca:d6:5d:84:e7:97:4a:9e:
                    0f:de:20:04:ee:98:d3:24:c5:b5:a9:f3:01:7a:41:
                    0b:d9:f4:eb:39:fb:18:25:48:13:6f:7d:3b:43:9d:
                    13:f7:fe:16:f9:fc:5e:5c:81:2f:f4:10:8c:ea:10:
                    5d:19:a1:b9:e1:aa:98:c9:a6:3b:d7:44:fb:31:3c:
                    dc:92:81:fb:43:ff:8c:b2:b1:b7:26:d4:de:a6:26:
                    1d:b6:02:40:52:9d:71:2c:0e:0e:0e:81:fa:0f:52:
                    4c:9d:47:30:92:5e:fc:69:cf:e0:0c:19:08:dc:a3:
                    8f:ee:9e:23:65:ad:e2:7e:e9:8e:71:6d:7b:d3:41:
                    42:7b:2c:8e:65:85:d2:28:7b:d3:36:9c:c1:51:ba:
                    e9:6c:76:69:49:b7:4e:4d:78:11:54:29:29:78:a0:
                    52:19:ff:f4:55:de:34:13:24:5a:bc:a5:41:61:7c:
                    45:5d:57:6e:d2:bd:c9:52:ec:a8:12:9b:17:2a:ff:
                    13:8d:00:78:7b:ef:f4:ee:b6:77:19:ff:bc:a3:a4:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:90:BC:FF:03:C9:41:F7:F2:8D:81:FE:8B:F5:F2:A4:BB:1E:F0:F4
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:e4:9b:66:c0:fb:a2:2a:6c:53:af:da:76:70:3f:6d:8c:aa:
         11:2a:07:10:91:b7:52:c2:ac:83:3f:99:1c:45:8a:b4:41:de:
         d4:ab:6b:97:18:cc:36:94:50:05:8f:88:96:a9:e1:ea:1f:8c:
         0d:31:89:e2:de:de:38:ea:cb:a5:1a:73:5f:a9:46:18:77:d7:
         49:e2:71:98:a3:21:71:6f:cb:20:c8:c9:c3:af:dc:56:58:f2:
         14:32:15:18:2b:da:a0:b4:12:9c:74:23:3d:c6:63:7e:13:43:
         5e:84:7b:b6:aa:e4:47:4a:5a:99:7a:eb:98:0b:c8:df:c4:4b:
         94:43:34:b4:f8:b5:ae:3d:5e:7f:5e:33:ab:24:4b:02:8a:07:
         f1:07:b2:30:a7:8e:e1:06:6e:d8:23:ca:27:6d:74:28:fb:c3:
         fa:6e:96:b8:1a:48:75:fd:1b:6e:c1:d4:5b:5a:47:89:91:53:
         cf:49:e8:33:cd:cb:f8:70:e9:1f:e6:ef:3b:2c:01:73:d5:74:
         ff:59:5f:c6:66:e1:38:cd:0a:61:61:ca:d9:6d:53:82:75:76:
         9d:03:d4:2a:fb:5f:38:87:b6:9e:43:7a:f6:80:33:b7:66:a0:
         63:29:f0:7c:9b:46:63:18:61:24:bb:74:9a:2c:4a:5a:30:02:
         2f:0f:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:07 2025 by rpki-client