Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa
File:                     3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          dglqvjfwwBXMCpxn08YYMsGYTuL0ooHgLhZn3dSbx60=
Subject key identifier:   A4:78:01:8A:F9:0C:2C:BC:A8:F6:6D:02:F2:A4:EB:02:B5:8D:A0:05
Certificate issuer:       /CN=211623745083F5BD547E7869C6748AF8F2418ECF
Certificate serial:       09E80D06E77BCF5A1C3184C9C579980D2EED8643
Authority key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa
Signing time:             Tue 04 Feb 2025 18:55:33 +0000
ROA not before:           Tue 04 Feb 2025 18:50:33 +0000
ROA not after:            Tue 03 Feb 2026 18:55:33 +0000
asID:                     263170
IP address blocks:        181.114.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e8:0d:06:e7:7b:cf:5a:1c:31:84:c9:c5:79:98:0d:2e:ed:86:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211623745083F5BD547E7869C6748AF8F2418ECF
        Validity
            Not Before: Feb  4 18:50:33 2025 GMT
            Not After : Feb  3 18:55:33 2026 GMT
        Subject: CN=A478018AF90C2CBCA8F66D02F2A4EB02B58DA005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:5e:aa:30:e0:b8:6f:a8:fc:15:fd:29:26:
                    2b:43:c9:92:3a:bf:1d:df:2b:9b:fd:94:d1:42:4f:
                    2a:b8:47:a5:a7:31:2f:c7:e7:1a:2f:00:88:9c:a7:
                    36:a2:61:fe:9c:5b:6e:0f:1d:78:b2:76:71:99:1a:
                    13:34:97:39:46:09:bc:1c:9c:83:52:23:7e:2f:c2:
                    72:fc:de:e0:43:d4:73:4c:e6:0e:10:3c:70:55:40:
                    39:69:48:26:1d:89:01:2e:3f:d6:4d:16:50:a1:39:
                    ed:54:d3:92:70:39:7d:08:29:89:99:26:92:a3:53:
                    01:a7:71:e0:1d:a2:27:21:8e:ad:a4:a2:2a:ae:68:
                    35:b2:2d:1f:54:e1:24:ea:a8:69:c8:a7:fa:97:dd:
                    a0:75:df:28:d8:e9:16:cb:9e:59:03:c0:ea:ac:ac:
                    71:e2:d1:29:b3:d6:e8:9e:fb:e7:f8:b6:21:b6:fa:
                    60:ad:52:37:46:96:0d:56:16:14:77:57:b5:90:c8:
                    a4:37:83:e7:82:e3:af:2a:06:46:e2:e3:03:99:3d:
                    3d:17:f0:56:4a:be:4b:af:5d:f7:d0:4a:fc:7a:2b:
                    74:57:44:af:e2:1b:09:42:b6:22:26:72:7e:29:f4:
                    fb:ac:a2:00:89:76:af:45:84:f9:65:35:d7:0e:2e:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:01:8A:F9:0C:2C:BC:A8:F6:6D:02:F2:A4:EB:02:B5:8D:A0:05
            X509v3 Authority Key Identifier:
                keyid:21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:ed:70:fe:bc:ae:c4:00:f6:09:dc:22:06:1e:de:21:e4:
         71:84:e6:75:6c:b7:6b:63:ee:03:2c:07:e6:36:f6:9d:52:6d:
         dc:d8:93:bf:e8:3d:c0:bf:5c:46:2c:47:f6:53:b1:12:c3:1b:
         c4:67:60:7f:48:0b:22:58:46:84:14:24:11:d4:c7:f4:20:4d:
         22:8c:31:e7:3c:4c:cb:34:3c:71:95:ce:e3:0e:1d:32:2d:e0:
         ab:7f:19:e4:95:37:f6:39:fa:39:e1:f5:1e:84:00:a2:93:f0:
         d4:55:9a:0c:d0:3c:4e:d5:85:8a:37:21:de:c5:05:c5:4b:29:
         df:ff:f7:d4:4f:90:0f:f3:ae:a3:e5:23:be:ca:cf:b1:56:14:
         04:7c:2c:73:d6:0d:fe:dd:bb:b3:7a:8c:d3:15:8a:b2:ac:91:
         29:c2:34:10:ad:9e:bd:0b:72:2e:85:e0:c0:f6:d5:88:db:50:
         08:d4:4f:07:ee:c2:82:de:f9:16:e5:cf:15:8c:c9:96:0a:4b:
         3f:43:6e:bc:08:be:97:2e:97:47:30:f3:0a:e9:3f:53:60:7f:
         76:e2:ff:be:61:de:0d:a6:d6:c7:91:d4:d7:45:1a:18:62:d2:
         eb:6f:b8:f8:9c:61:6c:10:e2:46:b7:be:ac:12:73:ff:43:63:
         b0:26:a0:d6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCegNBud7z1ocMYTJxXmYDS7thkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExNjIzNzQ1MDgzRjVCRDU0N0U3ODY5QzY3NDhBRjhG
MjQxOEVDRjAeFw0yNTAyMDQxODUwMzNaFw0yNjAyMDMxODU1MzNaMDMxMTAvBgNV
BAMTKEE0NzgwMThBRjkwQzJDQkNBOEY2NkQwMkYyQTRFQjAyQjU4REEwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPl6qMOC4b6j8Ff0pJitDyZI6
vx3fK5v9lNFCTyq4R6WnMS/H5xovAIicpzaiYf6cW24PHXiydnGZGhM0lzlGCbwc
nINSI34vwnL83uBD1HNM5g4QPHBVQDlpSCYdiQEuP9ZNFlChOe1U05JwOX0IKYmZ
JpKjUwGnceAdoichjq2koiquaDWyLR9U4STqqGnIp/qX3aB13yjY6RbLnlkDwOqs
rHHi0Smz1uie++f4tiG2+mCtUjdGlg1WFhR3V7WQyKQ3g+eC468qBkbi4wOZPT0X
8FZKvkuvXffQSvx6K3RXRK/iGwlCtiImcn4p9PusogCJdq9FhPllNdcOLsWHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpHgBivkMLLyo9m0C8qTrArWNoAUwHwYDVR0j
BBgwFoAUIRYjdFCD9b1UfnhpxnSK+PJBjs8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0FEMTZFQ0Y0Q0Q5NDU1RDBFMzk1ODA5MDBCOTc5NTdF
MDU2QjA0RDNFRUZFQTU0RjdFOEQxQzI3NjgyRDAwLzAvMjExNjIzNzQ1MDgzRjVC
RDU0N0U3ODY5QzY3NDhBRjhGMjQxOEVDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTE2MjM3NDUwODNGNUJENTQ3
RTc4NjlDNjc0OEFGOEYyNDE4RUNGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNBRDE2RUNGNENEOTQ1NUQwRTM5NTgwOTAwQjk3OTU3RTA1NkIwNEQz
RUVGRUE1NEY3RThEMUMyNzY4MkQwMC8wLzMxMzgzMTJlMzEzMTM0MmUzNTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXI5
MA0GCSqGSIb3DQEBCwUAA4IBAQApuu1w/ryuxAD2CdwiBh7eIeRxhOZ1bLdrY+4D
LAfmNvadUm3c2JO/6D3Av1xGLEf2U7ESwxvEZ2B/SAsiWEaEFCQR1Mf0IE0ijDHn
PEzLNDxxlc7jDh0yLeCrfxnklTf2Ofo54fUehACik/DUVZoM0DxO1YWKNyHexQXF
Synf//fUT5AP866j5SO+ys+xVhQEfCxz1g3+3buzeozTFYqyrJEpwjQQrZ69C3Iu
heDA9tWI21AI1E8H7sKC3vkW5c8VjMmWCks/Q268CL6XLpdHMPMK6T9TYH924v++
Yd4NptbHkdTXRRoYYtLrb7j4nGFsEOJGt76sEnP/Q2OwJqDW
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:40 2025 by rpki-client