Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          4Ih0KtvcC7jdnGUglPm2pVs04n6xlSa5YvP+irT2nSE=
Subject key identifier:   31:42:44:11:4A:94:E2:8F:F9:DF:09:C9:16:68:2D:03:0E:F6:86:BF
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       214C45F15BF3A8B9E0E11A4F668F288604A0A674
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 04 Feb 2025 18:49:03 +0000
ROA not before:           Tue 04 Feb 2025 18:44:03 +0000
ROA not after:            Tue 03 Feb 2026 18:49:03 +0000
asID:                     264831
IP address blocks:        181.114.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4c:45:f1:5b:f3:a8:b9:e0:e1:1a:4f:66:8f:28:86:04:a0:a6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Feb  4 18:44:03 2025 GMT
            Not After : Feb  3 18:49:03 2026 GMT
        Subject: CN=314244114A94E28FF9DF09C916682D030EF686BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:dc:55:ad:06:9b:bb:a5:c9:60:ff:8e:24:
                    91:b3:0e:83:7f:74:0c:d1:45:78:f3:44:13:f4:10:
                    ed:67:61:aa:3b:ea:8b:73:66:98:45:81:de:c4:33:
                    0a:d9:72:85:8f:2e:0b:5d:17:b6:32:3a:4b:77:f7:
                    38:e7:74:a5:67:3a:e5:b6:30:d8:6b:93:61:28:30:
                    0a:c8:b7:75:2f:bf:ca:59:ea:88:08:9b:4a:ef:4c:
                    d2:ef:a7:ee:bc:a2:4e:98:e8:1d:f2:49:35:93:e6:
                    22:7b:c4:84:cd:70:82:0f:a7:d2:d6:6b:42:ea:98:
                    cc:2d:3b:66:d0:39:1f:e8:38:1a:ce:5f:44:d4:66:
                    04:e4:ef:a8:27:19:44:f8:11:e0:a8:1c:e9:94:63:
                    91:16:d0:0b:bb:4f:a3:8d:f2:17:32:e4:32:49:ac:
                    e1:8b:ea:4f:bf:e5:6d:bc:e2:c0:b7:41:2c:e9:ca:
                    93:c7:c5:72:a4:cf:37:78:e4:f8:ab:91:9b:dd:42:
                    1e:b6:a2:e2:55:e7:fd:2b:5f:51:fe:f1:81:4a:0f:
                    7a:78:30:c3:f5:ca:3a:ab:35:dd:16:dd:47:00:0d:
                    db:1e:f7:7a:69:99:88:e6:4e:37:26:a4:fe:52:84:
                    e6:4d:2a:88:92:59:c8:d6:90:15:ac:e7:3c:17:d2:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:42:44:11:4A:94:E2:8F:F9:DF:09:C9:16:68:2D:03:0E:F6:86:BF
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:36:b3:c6:d8:8d:3f:cf:b9:47:e8:8a:c3:0a:ac:ad:49:8f:
         57:74:30:65:23:08:80:67:d4:ad:c8:96:f5:60:fa:12:6e:59:
         63:93:3b:47:37:e4:b0:4e:38:f5:e4:ac:11:7e:21:d4:0b:34:
         fe:d6:e0:fa:2e:aa:3d:c3:cd:a1:a9:03:57:5a:13:47:2c:4c:
         b5:0e:31:08:4a:b9:62:f8:5d:5a:6f:bb:f3:06:c9:7b:14:79:
         ac:c5:a6:f2:a0:b9:20:a9:8b:9f:61:bb:a2:25:b2:14:bc:6e:
         9d:1f:48:09:2d:04:83:aa:18:58:0d:f6:2c:d0:a1:81:64:f6:
         71:d1:48:15:0a:55:10:be:a2:2a:ef:9d:ea:42:3d:c7:e5:5c:
         66:db:51:cf:ef:44:10:a3:d9:8d:bc:29:b7:8b:b4:48:62:79:
         91:0b:38:59:c6:43:c7:08:2c:83:90:00:5d:4c:0c:a3:7f:c3:
         8b:82:23:17:61:fb:02:3a:7a:0b:3d:b1:f9:1e:e9:b6:5a:f5:
         97:02:c2:0f:f9:0b:b9:16:d1:e4:ba:b0:c0:08:ae:b0:12:73:
         c6:c0:25:15:59:74:6f:dc:b1:6f:de:07:bb:3d:35:64:fa:51:
         c7:60:c1:fa:0d:4f:04:5c:a4:4d:d8:94:4f:5f:05:e1:ad:5a:
         31:a3:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:45 2025 by rpki-client