Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa
File:                     3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa (raw, json)
Hash identifier:          nnMki9GxWFy0ZTdvOgwwe8XoUJIpHr6iMzHk5rzgwl0=
Subject key identifier:   E7:73:C7:3F:F2:7D:A2:BB:8A:B7:93:57:D4:44:68:CB:15:A7:AA:0A
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       6D48D50E562858169DA4DA7C4A1B2A1B94A5C221
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa
Signing time:             Tue 04 Feb 2025 18:30:16 +0000
ROA not before:           Tue 04 Feb 2025 18:25:16 +0000
ROA not after:            Tue 03 Feb 2026 18:30:16 +0000
asID:                     28088
IP address blocks:        181.199.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:48:d5:0e:56:28:58:16:9d:a4:da:7c:4a:1b:2a:1b:94:a5:c2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Feb  4 18:25:16 2025 GMT
            Not After : Feb  3 18:30:16 2026 GMT
        Subject: CN=E773C73FF27DA2BB8AB79357D44468CB15A7AA0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:2e:9d:39:01:b2:f3:fe:e1:ab:0f:ab:33:
                    12:d9:2d:f0:61:fe:b2:8b:97:62:7a:71:c6:30:55:
                    31:81:a4:22:f6:8a:35:8c:8a:7e:9f:7d:06:5f:85:
                    49:93:f8:4d:7e:ac:5a:d0:54:42:28:3a:22:4f:75:
                    30:65:24:e4:e1:31:d5:25:78:ba:ce:e7:92:3c:0c:
                    35:b1:c0:11:c2:c9:b8:a2:fe:74:f9:2d:4d:a2:8f:
                    df:46:71:12:14:91:c9:a8:b6:df:e6:50:9a:9d:b8:
                    f4:b6:22:80:fa:d9:3f:80:76:59:e3:17:4c:d5:7e:
                    8f:85:a8:0d:6a:c2:b4:62:64:6e:e2:46:d1:e6:c8:
                    1d:23:e1:ba:16:b1:47:93:c4:68:9c:e6:73:8c:70:
                    3a:de:19:b1:2b:ca:c2:b7:01:93:37:68:fc:d8:41:
                    e5:54:0d:39:8b:83:bf:fb:b9:cc:39:87:a1:c8:7f:
                    00:bf:4e:e8:a4:5a:af:2e:46:28:fe:6b:64:4c:f8:
                    f7:0b:bf:0f:81:e4:bc:89:0d:a8:a3:08:58:bf:1d:
                    0c:14:4a:60:9f:c2:6a:62:9c:b1:a5:cb:e1:e0:ee:
                    de:f4:60:9c:ee:37:3a:81:cd:a5:dc:d5:34:b9:21:
                    6c:ee:a5:cf:64:52:b1:b9:79:8a:a0:e4:b9:e1:e0:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:C7:3F:F2:7D:A2:BB:8A:B7:93:57:D4:44:68:CB:15:A7:AA:0A
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:12:06:a3:3c:b9:1f:93:76:cb:08:69:8f:08:74:c7:b9:
         bd:47:20:88:27:a6:a8:8a:f9:93:68:49:6e:5b:a3:95:78:36:
         ef:01:8f:12:d5:28:a6:c2:e3:7e:56:bf:a3:75:be:55:33:14:
         a4:bd:72:cd:18:62:68:8f:c4:5d:bb:7f:52:f8:d5:aa:d0:92:
         19:90:de:e7:b6:15:cb:a6:30:8b:24:eb:94:3c:54:9a:2d:0b:
         f9:9f:3a:9a:c7:22:99:2e:8f:a4:1f:df:09:0c:c7:62:37:e9:
         8f:17:a5:ac:ee:70:33:cd:26:b8:21:bc:7c:9b:f8:75:ba:8b:
         e4:e7:25:17:97:13:8b:ba:e7:88:c6:71:3a:7c:57:7d:c8:a9:
         ed:18:20:32:f5:77:89:53:a1:d0:ca:08:57:40:1c:7d:7b:c2:
         a7:87:65:dd:1a:06:53:e4:ac:20:ea:4c:65:79:61:b3:df:89:
         26:4e:72:85:71:3f:04:75:2c:14:ba:4f:ed:81:fd:76:2e:b1:
         97:75:d3:78:1d:25:81:d3:fa:b0:8b:56:96:d8:86:89:80:15:
         79:60:c4:dc:13:5e:60:3d:0c:3a:86:a9:3c:36:e0:6c:22:b3:
         d4:71:96:77:ac:05:ad:c2:be:b4:7a:04:8b:38:9b:93:e0:4e:
         01:7c:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:44:36 2025 by rpki-client