Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e302e302f31362d3234203d3e203237393437.roa
File:                     3138312e3139382e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          YCuhR8tVRP3maUkNJFf3NKpmuJnOLRycTHNlWE4Iecg=
Subject key identifier:   82:24:8B:D0:37:37:0A:82:B2:F4:5F:FE:B9:42:7D:84:B7:0C:F8:EC
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       6C0DB08DB466291F568A47495E7AC90F2F52F273
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:20 +0000
ROA not before:           Tue 04 Feb 2025 18:06:20 +0000
ROA not after:            Tue 03 Feb 2026 18:11:20 +0000
asID:                     27947
IP address blocks:        181.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:b0:8d:b4:66:29:1f:56:8a:47:49:5e:7a:c9:0f:2f:52:f2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:20 2025 GMT
            Not After : Feb  3 18:11:20 2026 GMT
        Subject: CN=82248BD037370A82B2F45FFEB9427D84B70CF8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:85:37:aa:13:3a:33:34:00:34:a8:f7:b9:
                    2a:9d:aa:f6:1c:1f:5f:7d:3a:74:26:6f:c1:c1:61:
                    5a:3a:5a:07:ae:1c:fc:13:c7:3e:49:2b:56:47:58:
                    4f:9a:1a:d7:dc:90:3d:ab:f2:00:0e:8d:8e:a4:f5:
                    f3:85:77:47:c1:c0:fb:64:c5:2e:9e:63:b2:ba:6b:
                    db:c9:20:e2:5b:8d:2a:5e:8b:e2:ae:6e:df:7a:7e:
                    bc:fe:47:c4:bd:d0:58:dc:e8:7c:2b:37:9d:18:c2:
                    d2:d8:95:59:68:ed:52:cd:c7:d4:1f:28:5a:35:3d:
                    b8:0b:d9:3d:16:ae:30:ce:d7:ad:fa:36:82:09:7e:
                    89:a9:43:d1:2d:b8:cc:2f:1e:b2:f0:f9:50:bc:0c:
                    dd:e0:6a:7e:12:02:6e:5a:f2:85:3f:4a:ac:b3:63:
                    64:1c:64:33:d0:24:31:35:41:32:10:95:7a:ee:6c:
                    a8:f7:c9:f0:3e:6f:06:56:0b:25:99:e8:fc:cb:7b:
                    ee:8e:61:02:eb:af:99:d0:40:97:a6:b6:d7:60:a0:
                    83:14:1b:2f:fc:06:df:c1:67:ab:1f:1c:99:6d:de:
                    36:ee:3f:d8:3d:9a:e0:a1:23:31:d0:16:68:0d:34:
                    9d:9d:50:f0:c4:3e:2a:e4:29:c7:62:e3:2a:ba:78:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:24:8B:D0:37:37:0A:82:B2:F4:5F:FE:B9:42:7D:84:B7:0C:F8:EC
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:75:0c:4c:a7:86:99:d1:c5:32:39:97:0b:0f:9e:39:f7:
         8e:51:1b:64:07:f7:3c:e5:5c:a6:ad:2d:01:46:66:7c:62:37:
         e2:3b:98:1f:33:69:d6:1d:9b:13:0e:48:e5:6b:6a:bb:57:c5:
         49:f9:00:f1:3a:2f:77:25:1d:4b:a6:1e:c1:92:65:cd:df:19:
         a0:8e:ac:85:c7:68:81:df:49:43:99:cb:fe:10:4c:b8:d7:4b:
         16:36:0d:95:21:bd:ab:e2:08:4c:17:fb:3d:ea:c9:55:ba:c4:
         a9:14:48:14:99:7d:7b:8e:5c:c7:b5:5a:5c:1e:3c:23:71:b4:
         87:1f:ce:0e:99:9e:36:5c:31:a3:c0:4c:5b:1f:31:a8:64:44:
         1b:fe:17:5a:ca:56:23:b9:e7:18:29:29:de:f2:1d:96:89:b9:
         ea:13:80:60:6f:0a:47:55:68:db:35:83:39:65:6f:03:46:4c:
         4c:15:7c:90:30:57:b2:ab:c0:14:ad:94:b9:fa:39:cf:f7:05:
         cb:3c:7f:e2:7e:d8:5c:ab:fc:59:8c:e7:51:f2:2f:65:21:6f:
         bb:56:e1:0a:48:03:5f:2f:e1:6e:2f:a9:29:42:83:1c:f9:1d:
         31:f5:33:26:cd:2f:d3:5b:ff:92:5d:d5:02:5c:9f:ae:c9:2c:
         91:7c:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:19 2025 by rpki-client