Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e203136363239.roa
File:                     3138312e3230332e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          hZhi0BhzvZOV+j0G35oOhpWSLljaNQKZKirj+l/qVpE=
Subject key identifier:   68:1F:28:6B:EC:65:79:C3:EF:CA:54:DD:D7:98:E5:D4:C3:E5:B6:72
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       702069163C7102753B80F3F08D8214557981647D
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:13:01 +0000
ROA not before:           Tue 04 Feb 2025 18:08:01 +0000
ROA not after:            Tue 03 Feb 2026 18:13:01 +0000
asID:                     16629
IP address blocks:        181.203.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:69:16:3c:71:02:75:3b:80:f3:f0:8d:82:14:55:79:81:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:08:01 2025 GMT
            Not After : Feb  3 18:13:01 2026 GMT
        Subject: CN=681F286BEC6579C3EFCA54DDD798E5D4C3E5B672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:6d:48:4a:37:c8:23:40:e3:8a:22:be:ad:
                    49:72:43:0c:7f:e0:03:57:61:f7:e5:8c:16:8f:dd:
                    8d:a5:22:1f:09:76:35:5d:bb:31:a4:6c:c5:03:6e:
                    a1:ec:08:0e:b8:f5:88:de:b6:28:b6:44:78:a9:1c:
                    c0:56:9e:52:1e:b7:09:d2:91:05:41:ef:ed:06:e0:
                    85:49:fd:cf:66:d7:7b:ba:4c:9a:b6:58:a2:d7:19:
                    ab:78:b5:d6:53:4d:64:1f:3d:b1:4d:18:db:eb:33:
                    d7:2f:4a:42:8c:fb:90:f4:cd:04:a7:6c:99:8a:fa:
                    41:9a:7d:35:e2:74:01:00:e7:22:1b:f9:a4:6b:2b:
                    43:9d:1a:f1:d6:d5:1d:f9:ea:78:64:94:8b:0a:52:
                    3d:51:ab:29:66:0a:8f:f9:88:05:73:a8:f4:c2:ad:
                    39:f1:22:97:33:29:90:e3:d9:80:6a:13:cd:e5:ee:
                    5e:9e:b4:bf:46:59:85:c9:7e:6b:f5:ef:de:50:df:
                    68:f4:84:06:a6:08:e7:7c:7f:a1:58:99:ac:e5:cd:
                    3e:2b:6b:3b:10:aa:31:a8:46:a6:39:e2:21:aa:1a:
                    81:c9:d7:63:32:03:39:43:1b:58:15:f2:77:4d:39:
                    22:f9:f5:1b:c5:9b:26:72:13:17:10:2b:84:e5:7f:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:28:6B:EC:65:79:C3:EF:CA:54:DD:D7:98:E5:D4:C3:E5:B6:72
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.203.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:be:db:90:64:9a:17:d1:ce:8b:bd:ac:90:ac:f5:72:be:06:
         82:db:f9:db:59:2d:ba:53:a9:18:92:8d:9e:5c:63:81:f8:79:
         d4:af:1a:63:86:66:e0:b3:a8:2a:57:ef:8d:c5:e1:e5:47:37:
         73:42:71:39:16:6e:f5:71:52:dc:7d:8f:3c:4c:cb:2f:c1:c6:
         81:ec:66:57:30:7f:14:7f:1f:f6:f1:07:75:72:94:77:f1:6c:
         97:0e:96:e8:ff:b2:be:80:87:6e:c3:c4:49:07:cf:fd:4f:8e:
         d2:22:4e:85:cd:1c:e1:a6:98:0a:f3:54:0b:db:56:b9:e4:1f:
         4c:27:15:cf:fa:a7:20:0c:fe:fc:45:05:56:72:b4:18:74:02:
         e3:2a:41:03:19:77:d9:89:22:e8:bc:8c:17:e6:5d:f4:ec:46:
         f0:9f:ef:31:29:25:b8:fa:5c:06:a5:5c:d6:1c:7e:66:cc:4a:
         1f:4c:80:a1:e6:80:fa:0a:8c:48:c5:a6:a3:64:21:1f:10:4f:
         0d:ca:4f:b5:86:06:89:fb:0d:33:81:e6:97:57:db:14:9d:ec:
         bb:77:80:54:2c:f8:08:5b:36:db:5f:b4:42:2c:e6:2b:47:6d:
         16:3f:88:12:1a:10:87:55:62:73:71:0f:3c:6c:9f:dd:30:f4:
         73:56:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:45 2025 by rpki-client