Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36332e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36332e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          MuoQTknOtWKjQJ27Xe+Y2uroAoFg7qYtv2dTBdihkIY=
Subject key identifier:   E6:F0:79:94:8F:CF:7F:E7:AF:37:DA:11:2E:5C:DB:4D:09:3A:FF:41
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       3C5298B5A6A32623BF3845C63895FDCBE4DD73A2
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36332e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 04 Feb 2025 18:49:02 +0000
ROA not before:           Tue 04 Feb 2025 18:44:02 +0000
ROA not after:            Tue 03 Feb 2026 18:49:02 +0000
asID:                     264831
IP address blocks:        181.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:52:98:b5:a6:a3:26:23:bf:38:45:c6:38:95:fd:cb:e4:dd:73:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Feb  4 18:44:02 2025 GMT
            Not After : Feb  3 18:49:02 2026 GMT
        Subject: CN=E6F079948FCF7FE7AF37DA112E5CDB4D093AFF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:3c:a1:12:b5:2a:18:46:6b:0c:11:0f:7d:
                    c4:3c:37:b6:ab:a0:ea:40:06:c4:86:89:1c:a3:11:
                    70:81:fc:c7:04:30:6e:41:83:a5:6d:f6:c5:1c:0b:
                    fb:1e:94:f6:ae:37:29:df:97:78:dd:07:e2:cf:3b:
                    85:78:d5:63:e3:32:13:59:57:17:39:9a:99:7e:7d:
                    e8:e0:30:48:47:33:52:6d:bf:32:56:cd:58:56:ff:
                    b8:f0:d8:f1:c8:49:8c:aa:99:b8:67:ec:5d:24:2e:
                    c4:76:57:a2:d8:6f:da:a7:ab:97:74:53:b3:44:c3:
                    c8:7b:15:02:0a:05:3e:85:fc:40:06:57:5d:dd:45:
                    c2:ca:81:d3:23:be:69:b2:7e:50:d4:8d:b1:af:21:
                    f1:c4:ab:d8:b3:9a:0d:52:72:1b:c0:fb:90:93:6c:
                    64:f5:50:1a:a7:29:6a:c3:c0:83:ee:cf:aa:6e:63:
                    32:ea:e8:66:12:60:76:ee:26:31:1f:77:f8:9c:33:
                    66:39:93:9d:c1:08:28:93:03:74:df:f4:0d:a3:1c:
                    0f:1d:bb:52:ae:a3:6a:5d:03:c0:df:0e:1d:77:16:
                    7b:5d:80:17:d4:2c:c8:8b:27:8f:b7:59:aa:b4:7b:
                    20:a5:7a:ed:d3:bb:88:bd:17:47:75:89:99:ce:90:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F0:79:94:8F:CF:7F:E7:AF:37:DA:11:2E:5C:DB:4D:09:3A:FF:41
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36332e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:34:53:dd:bd:c3:91:c2:94:95:a8:ab:1e:82:95:11:4b:f5:
         d0:a6:ad:d0:73:f0:97:a4:9c:f1:79:ee:54:a1:39:e1:24:a9:
         1c:5a:54:4b:f9:4f:81:75:e9:76:0c:62:ec:96:20:cd:52:42:
         ca:ba:a6:ed:12:cd:82:7b:1e:1f:7e:20:29:25:ec:35:8f:b6:
         60:08:0a:8d:6b:fc:04:9f:8e:ed:6d:56:64:ff:95:62:d6:dd:
         82:90:fe:d2:38:da:28:c1:1f:05:d6:a2:26:e4:30:16:98:6d:
         79:7f:5b:a7:f2:cf:65:bb:8c:18:03:22:22:a6:11:92:5a:e0:
         3e:b5:d2:22:a7:5d:6e:81:29:bd:77:a9:a0:71:f2:61:b2:d7:
         15:5a:94:65:c7:e7:42:4a:0f:b8:ce:81:01:aa:68:8e:59:a1:
         c4:3b:a4:ad:15:2b:74:f6:45:18:0f:b6:7e:b5:c0:dd:43:43:
         a9:16:65:6a:b5:30:7e:6f:9d:01:24:88:fc:dd:bb:08:e8:d0:
         19:80:53:88:db:53:29:9a:44:5d:71:4b:27:ce:b2:fc:9c:8f:
         0e:a6:3a:75:67:71:0f:06:b9:b5:c8:22:35:b6:47:74:60:2d:
         a8:85:ae:54:f5:2e:f0:73:f8:29:e2:b7:45:bc:aa:a7:96:72:
         af:8f:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:55:00 2025 by rpki-client