Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa
File:                     3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa (raw, json)
Hash identifier:          qXR9tG5N2b0PYA6jrecu9COpTC/f/CzCrYSvrhNjc4g=
Subject key identifier:   B9:4D:54:AE:95:C6:5E:97:1E:6B:E8:F6:18:60:D5:96:03:EE:6E:9D
Certificate issuer:       /CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Certificate serial:       34354A7B1A0FA030DB50AFF8953D9C6D2F4BD573
Authority key identifier: E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa
Signing time:             Mon 19 May 2025 14:55:00 +0000
ROA not before:           Mon 19 May 2025 14:50:00 +0000
ROA not after:            Mon 18 May 2026 14:55:00 +0000
asID:                     271944
IP address blocks:        181.232.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 13:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:4a:7b:1a:0f:a0:30:db:50:af:f8:95:3d:9c:6d:2f:4b:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
        Validity
            Not Before: May 19 14:50:00 2025 GMT
            Not After : May 18 14:55:00 2026 GMT
        Subject: CN=B94D54AE95C65E971E6BE8F61860D59603EE6E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:fa:e8:e0:70:d0:0d:fb:ab:da:99:d6:70:
                    b9:d4:ca:fa:92:8b:14:8e:d5:40:da:39:60:54:9d:
                    42:7c:6c:02:01:b0:64:36:f4:bb:9f:52:17:fe:0d:
                    65:da:a9:bc:4a:4d:f3:56:68:4d:f0:51:37:25:d6:
                    e3:f8:cd:49:ef:fa:72:62:36:b6:17:7f:66:66:ea:
                    3c:58:19:eb:81:a1:ee:9e:3b:34:51:bb:23:20:98:
                    34:c4:13:48:83:26:60:fa:40:a4:33:f6:82:b2:3e:
                    d1:85:46:42:bd:27:d9:68:47:dc:30:0a:17:00:e3:
                    22:5a:10:a3:91:72:ff:d6:d8:33:c0:bd:7c:7d:95:
                    46:20:ac:1c:43:d2:06:46:b3:fd:47:6b:b6:91:ca:
                    5a:dd:cd:7e:a2:93:ef:4f:34:89:b2:1e:1a:0a:a1:
                    1c:af:53:1c:84:6c:0f:8b:1c:5b:5c:3f:60:d1:e4:
                    0e:5e:82:1a:77:28:4e:ae:cf:9c:0a:23:9d:46:2a:
                    3d:02:91:43:93:db:fc:21:a5:44:39:92:b5:5d:7e:
                    83:0e:77:c2:b1:81:e2:19:91:95:32:28:b1:a0:d9:
                    42:9b:de:d9:97:bb:57:06:28:a0:29:c1:97:35:79:
                    73:0e:8f:0d:d9:b8:55:36:f6:cd:41:cb:13:f4:e3:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:54:AE:95:C6:5E:97:1E:6B:E8:F6:18:60:D5:96:03:EE:6E:9D
            X509v3 Authority Key Identifier:
                keyid:E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:49:45:97:2b:c0:a7:37:2d:63:3b:72:b1:bf:be:f5:25:5f:
         64:9f:23:02:bb:b0:32:a6:db:cb:d2:72:f9:b0:5b:d0:34:21:
         c0:df:fe:dd:cb:77:aa:ed:01:b5:2c:ab:0f:1d:da:c2:09:a7:
         f2:45:1b:93:15:33:d1:d4:61:58:d1:33:8b:a9:0e:90:32:7b:
         e6:86:e7:3a:68:88:ac:0f:28:a3:a3:68:25:8a:9b:90:6c:f3:
         53:1a:cf:a0:4c:8e:18:f6:35:49:e7:e6:b1:b7:0c:8e:06:ff:
         8e:31:1e:9d:bb:ff:5f:8c:99:e3:74:33:f2:2d:d3:53:43:54:
         d2:f4:84:f8:31:b2:fd:02:bb:69:f9:47:ab:f5:7d:ef:14:fe:
         0b:b9:3c:bb:73:86:2c:2b:a5:e5:d1:5e:8f:04:ca:03:53:48:
         45:0b:87:0f:2f:d7:05:67:dd:5c:52:e8:f3:81:b4:48:92:4a:
         b6:6e:1a:81:0f:a9:6f:20:b4:6c:b3:6e:03:b4:ab:20:e6:12:
         ed:19:5e:f2:6a:64:9e:82:c3:85:d4:b3:ce:d4:6e:f7:4d:59:
         e9:a2:8d:86:5e:23:9c:74:59:3b:b2:47:53:ea:19:ac:05:d1:
         2b:11:36:f6:e2:ea:95:7a:d4:58:49:5d:1c:06:88:42:22:26:
         c7:03:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:45:33 2025 by rpki-client