Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233362e302f32342d3234203d3e20323731393434.roa
File:                     3138312e3233322e3233362e302f32342d3234203d3e20323731393434.roa (raw, json)
Hash identifier:          FmEUDgTQqT6hF9w21Ok950sGeyozXobZn8qb/cu3njk=
Subject key identifier:   5F:87:2A:EF:2F:0D:A7:B9:C5:9B:60:12:49:C2:39:12:01:8D:9F:F2
Certificate issuer:       /CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Certificate serial:       3CC9F834350F6FD9E5A4606AA355D61B710DE090
Authority key identifier: E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233362e302f32342d3234203d3e20323731393434.roa
Signing time:             Mon 19 May 2025 14:55:00 +0000
ROA not before:           Mon 19 May 2025 14:50:00 +0000
ROA not after:            Mon 18 May 2026 14:55:00 +0000
asID:                     271944
IP address blocks:        181.232.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c9:f8:34:35:0f:6f:d9:e5:a4:60:6a:a3:55:d6:1b:71:0d:e0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
        Validity
            Not Before: May 19 14:50:00 2025 GMT
            Not After : May 18 14:55:00 2026 GMT
        Subject: CN=5F872AEF2F0DA7B9C59B601249C23912018D9FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:f4:5d:fe:be:a2:1f:12:a1:bf:86:c9:bf:
                    3b:96:2d:58:30:39:69:a4:68:a7:26:9a:23:30:23:
                    7b:49:29:3c:d3:bc:3a:4b:0f:40:f8:18:a6:4e:c6:
                    f0:85:99:1c:fd:b2:b7:3e:28:7b:f8:50:e0:d6:db:
                    29:a7:c4:e1:b7:2f:6b:34:f3:9d:b1:35:af:4d:8c:
                    7c:a5:d2:b8:0e:a4:3b:fb:8e:88:a9:da:37:98:1d:
                    d3:de:b0:c6:e1:c4:9f:9a:34:ab:0f:6b:5d:b8:07:
                    f1:b4:78:7f:f1:a0:15:14:4b:88:34:4e:0f:8c:6b:
                    72:ad:0f:13:1d:71:14:46:54:82:2b:f1:3a:53:33:
                    e4:b4:56:84:2c:aa:df:ec:87:70:a0:2f:8f:b7:a2:
                    d7:9f:3c:81:94:e5:52:ed:88:8e:32:e1:63:6f:5e:
                    c3:c1:e2:1a:70:2b:1d:20:92:e1:de:49:14:c6:4d:
                    74:a1:ac:2d:51:a5:29:6b:bc:8f:05:f7:2a:aa:71:
                    fe:9c:d0:89:70:bf:a7:fd:ba:a1:81:38:c5:96:cc:
                    0b:6b:b6:30:e8:f9:79:23:b6:1d:37:eb:c5:25:f5:
                    67:52:b9:44:2b:39:fc:31:05:08:26:d5:d3:20:fc:
                    34:ba:f0:c7:6f:b3:aa:ef:ed:1a:6f:d8:82:7c:51:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:2A:EF:2F:0D:A7:B9:C5:9B:60:12:49:C2:39:12:01:8D:9F:F2
            X509v3 Authority Key Identifier:
                keyid:E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233362e302f32342d3234203d3e20323731393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:53:d6:e7:b0:a2:fc:ea:b1:0b:e1:d7:86:ea:51:be:c8:
         5c:57:48:76:22:04:c4:cd:83:1d:24:50:a0:39:1f:6a:b1:eb:
         ab:cb:d4:97:82:ea:d4:66:a7:fa:b4:39:cf:15:f2:6e:64:66:
         ab:a1:73:54:f7:f4:16:48:7f:7a:bd:2e:61:bb:ea:82:81:2e:
         07:33:8f:c7:99:a5:28:17:b3:b7:fa:2d:2f:75:6f:27:b8:9b:
         bc:5a:24:bb:db:30:bd:02:eb:12:66:38:0f:b6:28:da:36:b4:
         10:66:b0:1d:ea:75:9e:cb:b7:85:1c:0b:46:56:ae:b0:4e:64:
         2c:ac:c6:7f:b9:b7:fc:3a:18:82:04:3d:6a:8e:6f:06:a2:5e:
         54:b9:79:77:4c:59:67:f2:d8:c8:29:0d:79:78:e1:8c:4a:5a:
         92:82:7c:37:5c:fb:fa:c6:a0:eb:c1:66:8a:10:10:a9:7e:63:
         6d:47:ae:df:ef:27:cf:ad:ae:3d:77:ef:57:31:3d:37:bc:fb:
         91:56:b3:ea:90:e5:db:4e:74:97:8f:7e:a0:91:a2:aa:8f:ef:
         61:c9:c0:7f:24:a2:96:1a:ba:29:01:f4:f8:25:89:00:07:b0:
         c3:02:b2:c8:5f:3d:b2:06:f6:51:14:c9:74:0f:14:b9:89:56:
         f8:d3:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:44:19 2025 by rpki-client