Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa
File:                     3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa (raw, json)
Hash identifier:          gTj3jxbmMKUZGnTQd3/k89FwrI8zDoECcIsO4kox9l0=
Subject key identifier:   8E:B4:91:F6:A0:39:7A:84:E0:79:AE:C2:24:E4:9D:B0:01:09:37:AB
Certificate issuer:       /CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
Certificate serial:       0241B657A19EB0449DCC0B59B935B05A3B88D247
Authority key identifier: FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa
Signing time:             Tue 04 Feb 2025 18:45:31 +0000
ROA not before:           Tue 04 Feb 2025 18:40:31 +0000
ROA not after:            Tue 03 Feb 2026 18:45:31 +0000
asID:                     272038
IP address blocks:        181.233.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 04:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:41:b6:57:a1:9e:b0:44:9d:cc:0b:59:b9:35:b0:5a:3b:88:d2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
        Validity
            Not Before: Feb  4 18:40:31 2025 GMT
            Not After : Feb  3 18:45:31 2026 GMT
        Subject: CN=8EB491F6A0397A84E079AEC224E49DB0010937AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:5e:27:13:55:86:31:17:2f:c4:97:92:7f:
                    27:37:88:bb:e3:cd:81:7b:d9:3b:d6:1c:e2:76:c7:
                    65:8c:4b:8b:d3:e9:ad:dc:0e:f9:98:49:3a:a4:a4:
                    7b:9b:89:f7:7b:38:6f:1c:81:0a:f8:37:17:58:f1:
                    ac:88:33:1a:46:f4:cf:ac:9a:4f:3f:88:79:de:86:
                    7c:c4:38:0e:c9:c7:1d:40:78:3a:c2:9e:1a:4e:ba:
                    af:c3:d9:85:45:91:f6:bf:d5:45:9e:35:7a:78:1e:
                    85:eb:80:8b:22:33:aa:a7:02:0e:d5:5d:cf:63:ee:
                    ba:89:eb:48:bf:80:7f:96:ab:cc:27:c1:36:4c:73:
                    bf:e0:71:1d:38:c5:9c:3c:3d:83:0a:05:b8:f1:62:
                    38:6c:ec:12:3c:f3:62:a0:b4:4a:ed:ce:f9:b2:8f:
                    b8:68:94:6b:ff:c7:90:4e:e8:e7:6e:1f:b2:db:ff:
                    a8:08:fb:47:ab:f0:d8:96:f4:77:65:10:8b:b3:51:
                    97:dc:8f:e1:cc:22:e6:66:f2:f9:65:6b:3f:75:83:
                    01:f6:42:36:17:3b:d6:56:c5:f1:60:53:a3:37:b4:
                    68:91:3d:d6:6f:68:7d:28:01:8b:96:c4:ce:ef:2e:
                    be:e3:26:50:07:70:4e:2e:be:8d:ad:56:e2:c4:e7:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:91:F6:A0:39:7A:84:E0:79:AE:C2:24:E4:9D:B0:01:09:37:AB
            X509v3 Authority Key Identifier:
                keyid:FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:c7:13:7f:86:37:1e:60:fb:3f:23:be:fb:34:cd:82:64:
         ab:4d:d1:02:ca:e7:08:65:3f:96:37:76:39:60:8b:6a:d7:c8:
         0b:71:fb:d0:3e:a5:e8:25:71:65:bc:69:cf:fc:a7:47:c3:f6:
         da:31:56:cd:ba:99:ba:3c:06:ce:03:18:67:5e:69:7d:fc:31:
         11:76:04:d8:52:7d:2b:8f:d5:ae:9b:6f:19:67:3d:71:45:12:
         a2:23:27:90:e1:b7:b6:22:e6:c5:ff:81:7c:97:4d:1b:42:95:
         a1:49:a7:0f:c6:53:a6:73:1f:9d:29:3c:fb:01:4c:d3:b7:24:
         7a:8f:a8:a4:ef:e1:35:d9:8f:64:61:04:06:82:f0:a2:54:0b:
         e3:c6:50:41:ff:29:23:9f:92:10:fd:2e:31:42:f6:9c:fd:ee:
         ca:55:76:dc:45:0a:3b:28:9c:d7:ab:14:68:65:a7:7c:3d:7a:
         a5:97:58:78:1e:c3:09:73:0d:a7:cd:32:44:84:32:d3:01:58:
         6d:f5:9f:dc:36:44:a5:81:98:6e:c7:67:a0:da:65:ee:6a:44:
         4b:e3:5d:03:05:b4:c7:c5:47:11:82:55:e6:0c:c3:3b:b2:32:
         97:84:ac:3c:3d:1f:93:37:a0:8c:5c:b8:d7:ea:57:44:7d:02:
         25:83:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:52:25 2025 by rpki-client