Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230302e302e302f31362d3234203d3e2037343138.roa
File:                     3138312e3230302e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Jl2fFK7UDnthLRjUueIifr9Q41cI3Adze+XQAplm+sE=
Subject key identifier:   15:CA:E1:AE:9E:24:F6:3B:45:13:DE:E0:C0:C2:90:DC:1A:D2:C4:82
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5BDCF5A12B61F2648B029A5ECCDA30AC86D7440F
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230302e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:13:00 +0000
ROA not before:           Tue 04 Feb 2025 18:08:00 +0000
ROA not after:            Tue 03 Feb 2026 18:13:00 +0000
asID:                     7418
IP address blocks:        181.200.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:dc:f5:a1:2b:61:f2:64:8b:02:9a:5e:cc:da:30:ac:86:d7:44:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:08:00 2025 GMT
            Not After : Feb  3 18:13:00 2026 GMT
        Subject: CN=15CAE1AE9E24F63B4513DEE0C0C290DC1AD2C482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:a2:2d:4b:df:44:e0:ba:96:e6:0c:00:6b:
                    2d:df:e6:a6:db:a9:3b:81:64:ee:65:68:77:32:bd:
                    27:fe:72:1a:65:8f:2e:f7:f6:e6:f9:8e:a6:d1:fd:
                    d1:10:07:31:9b:4f:03:b6:c0:5f:55:fd:2a:68:5b:
                    16:0e:66:61:37:53:2c:c4:be:7b:2f:0e:83:f8:08:
                    a2:33:a4:ce:6b:7a:42:00:c1:4a:79:8c:f5:32:0f:
                    2c:53:92:75:d9:89:c3:f8:25:15:6e:66:4f:94:36:
                    3a:5f:85:78:53:7c:50:60:ae:a6:1b:15:45:99:4f:
                    b4:86:0a:b7:3f:4f:af:c9:25:5d:f5:fb:a0:4c:37:
                    b0:f8:d7:92:50:0f:cd:eb:e8:1a:71:c4:49:12:65:
                    53:f5:8a:58:e8:ca:f1:74:68:53:b8:9d:d3:51:2e:
                    79:f0:68:94:80:3b:db:4d:5c:e4:aa:52:82:e4:c4:
                    50:a9:dd:71:5a:02:89:fa:17:e2:1b:ba:10:54:5e:
                    75:75:20:55:f7:96:5c:37:40:75:89:7e:6c:a4:64:
                    1c:34:de:f6:81:23:03:89:e5:4a:b4:16:eb:4a:f4:
                    b8:4c:07:b8:26:90:91:41:d7:99:4d:30:23:8f:49:
                    62:f1:9e:e3:84:12:13:b3:07:99:20:b1:48:0c:6f:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:E1:AE:9E:24:F6:3B:45:13:DE:E0:C0:C2:90:DC:1A:D2:C4:82
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230302e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:cd:ef:03:ac:88:f8:7b:aa:5b:4d:10:dc:79:cc:ba:47:fc:
         53:71:de:5b:30:01:27:9e:3b:09:b3:5a:e7:5f:74:a7:6a:71:
         5b:4a:4f:0e:ba:1d:27:f6:76:2b:31:90:0b:39:ca:00:59:c4:
         b2:0f:b4:4f:76:c2:95:cb:3e:a9:11:83:95:1e:bc:e7:1a:fc:
         8e:08:43:2f:c9:b7:fd:4f:8e:93:55:c7:c4:e2:48:a2:68:41:
         a6:6c:22:05:6f:b5:82:0e:c7:31:f5:bf:c0:3c:22:89:14:37:
         e1:84:3c:f9:0a:d4:20:5d:7a:a2:88:43:35:6e:32:df:8a:10:
         10:cc:b9:2d:0b:4d:f4:cd:d4:0a:9a:a9:39:7c:9c:f5:5c:a0:
         07:86:44:06:89:7c:12:6c:9f:87:7a:bc:ae:53:c2:14:4b:27:
         e8:69:56:0b:90:ff:b9:82:a2:a5:b7:24:68:0d:11:2d:ab:1b:
         b8:a1:b2:34:ab:f4:16:3d:f2:e6:d4:e9:90:a5:06:c4:68:28:
         ca:b4:fb:2b:61:b0:77:af:f9:14:fe:33:8b:5a:6e:3a:19:c0:
         2c:1d:97:46:b2:8f:e0:20:8b:05:13:99:e1:ab:23:cc:ad:54:
         65:73:aa:13:5d:b6:72:24:d2:24:43:e7:b2:47:1f:d4:66:da:
         63:78:08:b3
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUW9z1oSth8mSLAppezNowrIbXRA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNTAyMDQxODA4MDBaFw0yNjAyMDMxODEzMDBaMDMxMTAvBgNV
BAMTKDE1Q0FFMUFFOUUyNEY2M0I0NTEzREVFMEMwQzI5MERDMUFEMkM0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlaItS99E4LqW5gwAay3f5qbb
qTuBZO5laHcyvSf+chpljy739ub5jqbR/dEQBzGbTwO2wF9V/SpoWxYOZmE3UyzE
vnsvDoP4CKIzpM5rekIAwUp5jPUyDyxTknXZicP4JRVuZk+UNjpfhXhTfFBgrqYb
FUWZT7SGCrc/T6/JJV31+6BMN7D415JQD83r6BpxxEkSZVP1iljoyvF0aFO4ndNR
LnnwaJSAO9tNXOSqUoLkxFCp3XFaAon6F+IbuhBUXnV1IFX3llw3QHWJfmykZBw0
3vaBIwOJ5Uq0FutK9LhMB7gmkJFB15lNMCOPSWLxnuOEEhOzB5kgsUgMb4dHAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUFcrhrp4k9jtFE97gwMKQ3BrSxIIwHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMxMzgzMTJlMzIzMDMwMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtcgwDQYJKoZI
hvcNAQELBQADggEBALzN7wOsiPh7qltNENx5zLpH/FNx3lswASeeOwmzWudfdKdq
cVtKTw66HSf2disxkAs5ygBZxLIPtE92wpXLPqkRg5UevOca/I4IQy/Jt/1PjpNV
x8TiSKJoQaZsIgVvtYIOxzH1v8A8IokUN+GEPPkK1CBdeqKIQzVuMt+KEBDMuS0L
TfTN1AqaqTl8nPVcoAeGRAaJfBJsn4d6vK5TwhRLJ+hpVguQ/7mCoqW3JGgNES2r
G7ihsjSr9BY98ubU6ZClBsRoKMq0+ythsHev+RT+M4tabjoZwCwdl0ayj+AgiwUT
meGrI8ytVGVzqhNdtnIk0iRD57JHH9Rm2mN4CLM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:10 2025 by rpki-client