Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138312e3132302e302e302f31332d3234203d3e203233323031.roa
File:                     3138312e3132302e302e302f31332d3234203d3e203233323031.roa (raw, json)
Hash identifier:          4sANsGc3uaieg9EFOkZ1onprtH/EQEuPXfGqv/V09Jk=
Subject key identifier:   99:21:21:B0:6F:8E:2A:09:89:A0:20:68:1A:E3:BC:B0:18:46:BF:D4
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       0513E9015DAE93AA39FD2FD092256352C9011A19
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138312e3132302e302e302f31332d3234203d3e203233323031.roa
Signing time:             Tue 04 Feb 2025 18:40:25 +0000
ROA not before:           Tue 04 Feb 2025 18:35:25 +0000
ROA not after:            Tue 03 Feb 2026 18:40:25 +0000
asID:                     23201
IP address blocks:        181.120.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:e9:01:5d:ae:93:aa:39:fd:2f:d0:92:25:63:52:c9:01:1a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Feb  4 18:35:25 2025 GMT
            Not After : Feb  3 18:40:25 2026 GMT
        Subject: CN=992121B06F8E2A0989A020681AE3BCB01846BFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:09:b9:5f:62:70:cf:24:92:56:95:2c:50:
                    4a:02:2b:18:40:0c:9e:80:31:2a:9c:8c:19:a8:9d:
                    dc:99:66:e0:e8:45:0f:e6:8b:87:6d:60:f0:03:51:
                    f6:4f:16:79:83:95:5f:52:41:5b:23:ee:79:08:25:
                    5f:35:be:ed:c9:64:0b:f1:54:30:fa:80:7a:31:77:
                    86:ef:82:b5:42:42:95:2a:f0:a9:8e:fe:9e:b5:da:
                    c8:e9:c7:ed:0a:64:54:6b:48:e7:38:48:aa:75:14:
                    b3:6d:1a:69:c1:74:0a:3d:08:80:e7:51:0f:2f:d0:
                    87:4f:82:f8:7e:c5:1d:4f:d1:85:7c:bb:91:87:e4:
                    ae:a5:5f:2a:3e:25:66:17:69:60:40:a7:62:44:9a:
                    6f:64:e8:d0:3f:55:90:ab:38:f9:49:91:36:e2:43:
                    20:a9:d9:42:52:77:57:4a:9a:b1:0f:8d:44:18:0e:
                    45:df:65:71:66:ad:b6:48:33:f1:88:7b:81:03:98:
                    6c:b7:bc:3c:e1:49:86:c2:b1:c9:1f:d6:2b:19:f6:
                    d3:6e:d0:c3:9e:e0:4f:b0:93:2c:d0:32:f1:67:ed:
                    c3:29:6d:76:fd:40:68:98:c8:79:6d:fd:04:37:67:
                    6a:c0:74:0a:05:3a:d4:ec:d5:4a:44:3a:a1:4f:3a:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:21:B0:6F:8E:2A:09:89:A0:20:68:1A:E3:BC:B0:18:46:BF:D4
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138312e3132302e302e302f31332d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.120.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:83:d0:f6:fe:fd:ff:b9:fa:c9:6d:0b:42:e2:e8:5a:9a:
         de:3a:a9:49:83:69:b8:d1:9f:5b:f3:2a:a3:9e:05:c1:09:dc:
         f4:a2:8f:6d:c8:cb:b3:53:84:79:6c:5d:4e:36:69:11:c8:70:
         82:57:1f:19:57:ac:79:3f:9a:85:bc:75:69:ce:e4:22:cd:f2:
         b4:7e:89:35:76:ec:5f:75:36:fe:57:3d:1f:80:64:bb:00:cd:
         c3:1a:bd:b0:43:5a:e4:6d:75:5b:d0:7d:b4:63:99:ad:16:66:
         0f:38:74:f5:08:66:52:b9:62:7f:cc:31:88:23:e7:5c:5f:8d:
         1f:0b:5e:70:6e:6f:bf:dc:8b:60:41:33:e8:e5:6f:9b:7f:38:
         5e:f5:ef:64:70:48:1b:d4:42:a8:a8:c8:70:a1:10:0e:8f:60:
         82:03:ee:dd:41:82:dc:98:a9:6c:77:39:54:8d:98:56:7c:dd:
         f0:67:17:ef:b9:de:2a:75:03:f7:10:c6:11:9d:a7:6e:98:47:
         76:05:e0:a4:d3:d1:6a:35:71:19:39:43:f9:1a:11:2e:07:97:
         a4:0e:d0:19:5c:39:a6:ca:64:eb:94:be:ab:84:75:80:28:dc:
         2e:15:61:1f:4e:0a:a9:26:54:33:8e:37:57:6f:2c:b7:96:a0:
         3c:e3:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:40 2025 by rpki-client