Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa
File:                     3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          XmaoSKR3D+3Dyw9nrydJ1eP3xm5v/Q571cvJYq8KKZE=
Subject key identifier:   AB:DA:12:73:E9:8A:D9:AA:91:93:C9:18:56:1B:83:67:6D:E2:99:EB
Certificate issuer:       /CN=211623745083F5BD547E7869C6748AF8F2418ECF
Certificate serial:       7080899DCBC3D5F58E1E1139DB7105BE96FAB36B
Authority key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa
Signing time:             Tue 04 Feb 2025 18:55:31 +0000
ROA not before:           Tue 04 Feb 2025 18:50:31 +0000
ROA not after:            Tue 03 Feb 2026 18:55:31 +0000
asID:                     263170
IP address blocks:        181.114.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:80:89:9d:cb:c3:d5:f5:8e:1e:11:39:db:71:05:be:96:fa:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211623745083F5BD547E7869C6748AF8F2418ECF
        Validity
            Not Before: Feb  4 18:50:31 2025 GMT
            Not After : Feb  3 18:55:31 2026 GMT
        Subject: CN=ABDA1273E98AD9AA9193C918561B83676DE299EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:93:3e:34:81:90:34:53:c7:aa:f6:3c:3e:
                    ef:8f:ab:32:bb:8b:94:de:d9:6f:c8:3e:bb:1e:74:
                    07:37:ea:bb:5b:4b:e0:22:a3:d3:45:ef:c4:46:c3:
                    c7:09:5f:cd:9d:4c:a3:9f:e3:38:13:8e:82:2c:1e:
                    02:e9:a4:4a:e7:76:0a:df:5b:a2:92:0c:be:d7:58:
                    61:b0:bd:9d:3a:95:ca:e6:35:27:27:25:44:fa:fa:
                    e3:54:c4:4b:4d:da:c1:f8:41:89:ac:95:94:47:e3:
                    6c:6e:d1:af:43:f5:93:09:1e:4b:f6:db:11:ed:9b:
                    73:1d:c0:a5:ce:4d:e5:3d:02:6e:c2:f3:1c:49:f9:
                    14:27:9d:d8:4c:80:a4:77:fe:8a:99:bc:d8:b6:2e:
                    99:fb:db:68:a0:39:bd:21:f8:6a:7b:f7:5d:4d:7f:
                    73:c8:e1:9e:34:50:85:ed:4e:61:51:20:2b:72:3d:
                    25:27:dc:e3:24:5b:18:12:f8:33:84:61:a0:0e:60:
                    f3:34:c1:cf:e7:76:03:1b:0d:95:ed:48:68:b3:c2:
                    b6:e2:6d:f3:26:b7:f8:79:dd:7b:bc:2c:26:8e:98:
                    88:05:ba:79:eb:74:45:55:28:30:9e:47:c0:39:e0:
                    ad:41:2e:20:fe:7d:de:f6:a0:d8:dc:09:67:b5:0a:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DA:12:73:E9:8A:D9:AA:91:93:C9:18:56:1B:83:67:6D:E2:99:EB
            X509v3 Authority Key Identifier:
                keyid:21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ca:7e:96:c0:40:14:90:31:c3:8b:5a:12:89:cc:99:c9:86:
         c2:81:37:d9:83:d1:03:78:3c:dc:a6:90:31:38:9c:06:05:e3:
         5b:c6:35:e8:ab:c3:2c:d7:da:c9:31:d7:03:0a:4e:55:fc:9f:
         1f:a6:f0:0e:ec:bb:b8:9b:ee:70:b9:6a:62:cc:b1:14:db:8a:
         11:fd:97:7e:2e:81:56:f5:93:10:c9:f0:f3:83:45:8b:dd:df:
         58:bd:71:6b:e7:5c:f4:1f:65:5e:2e:2c:94:e7:a6:d0:62:f6:
         6a:9f:c2:f4:42:51:83:c8:c0:05:87:9b:a9:ec:ee:f9:55:ce:
         56:82:66:0d:ec:ac:d0:ab:c9:83:ef:67:81:1d:d0:ea:26:f8:
         32:65:2f:d4:d2:38:83:45:a7:33:04:b1:ec:21:b4:a3:5c:43:
         d7:8c:44:dc:bd:e8:e6:16:36:e0:24:66:a7:6a:fe:94:2b:09:
         ee:63:f6:2b:9e:3a:4a:a0:f5:ae:5c:3f:2e:1e:da:74:47:22:
         1d:ca:c4:e5:42:5d:7a:18:62:99:4c:88:81:dd:f6:81:c7:14:
         2e:0c:31:62:f6:ac:32:52:a9:e6:f3:80:ab:e0:8a:b3:f2:2c:
         65:4b:35:77:b3:f1:58:90:0e:75:42:48:b0:d8:a4:a5:cc:98:
         2c:dc:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:03:35 2025 by rpki-client