Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa
File:                     3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa (raw, json)
Hash identifier:          rEFxGTgcG+NCG0BeRgxsdFw+mw5KnSiF2Y5lDVe3F4s=
Subject key identifier:   9B:21:00:42:75:D4:83:3F:DA:27:DA:AC:B5:08:47:F4:D4:02:A2:4A
Certificate issuer:       /CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A
Certificate serial:       78185B8955A0F7B23804ABCF2FFF68A4A2F430B3
Authority key identifier: D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa
Signing time:             Tue 04 Feb 2025 18:04:15 +0000
ROA not before:           Tue 04 Feb 2025 17:59:15 +0000
ROA not after:            Tue 03 Feb 2026 18:04:15 +0000
asID:                     265790
IP address blocks:        181.191.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:5b:89:55:a0:f7:b2:38:04:ab:cf:2f:ff:68:a4:a2:f4:30:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A
        Validity
            Not Before: Feb  4 17:59:15 2025 GMT
            Not After : Feb  3 18:04:15 2026 GMT
        Subject: CN=9B21004275D4833FDA27DAACB50847F4D402A24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:e7:a2:de:73:c7:10:25:5b:2c:90:ed:c0:
                    ac:23:f6:f3:cf:e2:d0:83:07:92:0b:17:80:25:ab:
                    92:99:01:41:97:1c:02:7a:46:5a:b9:bb:90:a9:d2:
                    05:2a:1d:7b:4c:7e:ae:5b:7b:df:21:d9:c0:89:3e:
                    06:fe:79:6f:f4:48:2e:08:e7:77:bf:85:e8:6f:fe:
                    e5:44:60:45:12:2b:15:37:27:e3:77:7d:08:1b:33:
                    6b:5e:15:06:65:41:b2:69:b9:d2:49:69:2c:35:e1:
                    a4:65:a8:f2:0c:6a:d4:81:d4:74:60:a0:12:18:38:
                    c5:d5:f5:c9:42:73:9c:a8:09:a1:5e:9e:4e:7e:e8:
                    47:3e:34:f3:d1:3b:bb:c1:75:6b:95:e2:9c:ce:7e:
                    18:79:3c:ec:08:6e:83:60:69:8f:87:ba:ff:5a:cf:
                    ac:d5:e6:d1:21:4a:4e:b0:f8:85:61:11:b3:a1:e2:
                    c2:23:c9:77:eb:72:57:90:f7:2d:9a:69:07:18:12:
                    77:6f:95:90:cb:5f:52:25:ec:eb:b2:39:53:57:40:
                    c5:80:91:c3:20:98:61:31:ee:f5:5f:b5:64:3f:6b:
                    9b:a3:e8:03:58:cd:05:09:5c:5b:16:cb:a0:09:de:
                    a8:7a:e4:0c:4d:d4:a2:2e:11:7d:bd:79:12:cb:75:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:00:42:75:D4:83:3F:DA:27:DA:AC:B5:08:47:F4:D4:02:A2:4A
            X509v3 Authority Key Identifier:
                keyid:D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:40:57:b5:10:c0:14:53:52:1e:9e:49:2c:93:5b:c2:05:
         15:84:38:9c:bf:45:3d:ba:62:8f:fa:ff:f7:6d:1f:02:1c:6e:
         17:e1:a5:ba:33:78:d8:24:55:7a:9e:fc:c0:2e:d6:e5:fc:3c:
         b8:e0:21:42:e3:0f:4d:ad:a7:10:1d:7a:2f:58:18:c3:4b:98:
         67:40:70:d2:6f:cb:27:cb:57:8b:92:18:67:42:ef:17:77:e3:
         63:45:61:6e:77:eb:96:e3:78:89:12:1e:42:55:12:8b:bc:46:
         81:02:9e:db:22:67:33:3e:01:b6:dc:b6:9f:bc:4a:c7:04:14:
         8e:c6:26:c1:f9:71:14:81:70:8d:00:a5:08:44:37:bd:5c:65:
         54:b5:d2:3c:76:ef:78:98:00:54:93:47:6b:3e:44:a6:e6:b4:
         07:ef:d1:81:ee:df:14:63:52:0f:e2:5c:2a:46:f0:5e:39:02:
         fc:02:b9:ed:cb:e7:d4:3b:eb:99:09:36:28:de:c4:ff:97:5f:
         c7:72:d2:da:3f:56:50:e7:f8:80:9e:1c:e8:86:53:55:c9:31:
         83:b7:fc:67:9a:09:63:00:02:b6:84:69:21:0f:67:16:97:6a:
         d0:54:b4:84:f0:63:e2:85:94:69:be:be:19:0a:12:11:cd:1d:
         50:17:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:39:38 2025 by rpki-client