Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e32332e302f32342d3234203d3e203139313134.roa
File:                     3138312e3139382e32332e302f32342d3234203d3e203139313134.roa (raw, json)
Hash identifier:          Mr8YM6ZIIjGSNe0U1BwFwCNCCkYRSjeLo1dOt56vBbo=
Subject key identifier:   3F:E4:A8:BF:1B:69:77:28:47:37:F6:13:29:25:12:B1:0B:47:42:78
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       2A4B1BAA388E280A197BAA573943BD4106EAA820
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e32332e302f32342d3234203d3e203139313134.roa
Signing time:             Tue 04 Feb 2025 18:11:14 +0000
ROA not before:           Tue 04 Feb 2025 18:06:14 +0000
ROA not after:            Tue 03 Feb 2026 18:11:14 +0000
asID:                     19114
IP address blocks:        181.198.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:1b:aa:38:8e:28:0a:19:7b:aa:57:39:43:bd:41:06:ea:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:14 2025 GMT
            Not After : Feb  3 18:11:14 2026 GMT
        Subject: CN=3FE4A8BF1B6977284737F613292512B10B474278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:f4:1c:39:62:8e:5c:9d:d7:21:1b:9a:db:
                    18:2d:ca:d5:3b:2e:32:92:42:89:54:42:c5:8d:ae:
                    7d:d3:54:cb:de:f1:f9:d0:34:8e:ef:32:55:f8:2f:
                    10:64:eb:8c:fa:55:18:53:9b:53:6f:6e:42:5e:ee:
                    01:a2:49:c6:6d:52:e5:5d:c4:55:7a:46:fd:10:09:
                    57:fb:cd:73:09:97:bd:53:d3:b2:70:08:9f:8a:4a:
                    ec:c1:a4:e4:d1:13:63:c2:7b:7a:e0:f0:80:38:1d:
                    40:07:50:7d:04:6a:05:62:bb:aa:44:98:52:74:7e:
                    98:19:a3:e3:8a:dd:f0:83:38:df:cb:a2:b1:c0:3e:
                    e5:11:a1:a6:37:4e:25:19:64:cf:d4:df:b3:ac:d4:
                    0d:61:b3:74:90:af:88:0a:a3:43:c4:bc:77:b2:76:
                    d5:d2:41:8e:61:c0:f1:70:bb:a0:a1:74:12:72:52:
                    ea:b0:1b:7e:46:5d:c4:10:f9:6c:ef:d8:65:fa:8b:
                    da:e2:bc:a9:b6:36:41:08:9e:1a:3e:98:09:54:96:
                    dd:91:38:be:d5:3d:d6:9b:1b:f5:6f:f1:62:a7:78:
                    bd:d6:cd:d4:9a:88:c2:21:ec:2f:8b:41:e7:49:36:
                    2b:5e:64:0a:64:1a:dd:af:1c:5b:f4:93:41:13:16:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:A8:BF:1B:69:77:28:47:37:F6:13:29:25:12:B1:0B:47:42:78
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e32332e302f32342d3234203d3e203139313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:d2:81:59:6e:28:03:7d:ec:62:4c:78:30:ec:e3:4a:6a:
         e2:5d:3d:46:ef:cf:98:4c:83:45:cd:43:82:5f:10:85:34:30:
         2b:03:09:1f:44:df:c4:0e:a7:e1:ba:e6:cc:df:11:22:e7:bf:
         d1:07:d5:76:2a:55:63:fa:71:51:5f:13:81:f3:7b:db:3b:4a:
         86:ac:3c:b7:cd:9c:73:06:42:7c:fb:ba:65:93:6c:b3:cc:c0:
         4d:6a:0c:74:95:be:8f:d3:8d:3b:6f:bd:a7:1d:8a:e0:b0:63:
         5f:bf:42:6a:8f:7f:24:20:3d:52:f2:d7:3a:70:a9:ea:88:34:
         84:ea:f4:46:87:91:99:3e:96:1e:04:b6:5c:5e:91:e5:d3:bf:
         f7:9f:6a:c5:43:95:97:1e:24:34:ff:da:5e:03:05:a8:03:1a:
         b8:a4:a3:a5:3f:67:47:71:05:bc:c8:cf:d3:d0:70:02:83:54:
         43:3e:9a:73:55:9b:a9:51:e9:cb:ff:a4:53:1a:05:f4:24:b9:
         d5:02:ec:21:4b:0b:60:e2:21:dd:65:69:c0:ab:f1:67:36:1b:
         79:cb:d0:ed:d1:7c:09:7a:b1:9e:17:68:0b:11:9c:43:1d:3c:
         3a:e6:d6:6f:77:ad:d7:da:e9:93:c7:91:c3:f8:d5:fe:50:4a:
         4a:3e:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:17:01 2025 by rpki-client