Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203237393437.roa
File:                     3138312e3139392e302e302f31372d3234203d3e203237393437.roa (raw, json)
Hash identifier:          Cmnz7XUC4mHwOROWNDdQAjFvSz+GhohhxEm1Qpf/FWU=
Subject key identifier:   51:EE:E1:31:D3:84:4F:29:91:72:74:4B:1A:60:3F:AB:40:FC:DC:7B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       58782253357A9B4CA16B1B8BAD36D2159C046908
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:17 +0000
ROA not before:           Tue 04 Feb 2025 18:06:17 +0000
ROA not after:            Tue 03 Feb 2026 18:11:17 +0000
asID:                     27947
IP address blocks:        181.199.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:78:22:53:35:7a:9b:4c:a1:6b:1b:8b:ad:36:d2:15:9c:04:69:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:17 2025 GMT
            Not After : Feb  3 18:11:17 2026 GMT
        Subject: CN=51EEE131D3844F299172744B1A603FAB40FCDC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:16:79:64:39:ad:0a:e4:e1:5a:ab:24:4e:
                    67:e3:88:4b:d0:18:29:99:c6:8e:0c:8d:e0:07:a1:
                    82:9e:16:e0:c1:04:98:98:cf:a3:89:6c:8b:b7:a1:
                    3a:0b:cf:6e:0a:c6:bf:61:df:a7:4a:0d:d1:ca:2b:
                    12:36:d9:b2:28:26:ff:f5:4a:4a:13:0c:92:1e:be:
                    80:fc:ba:af:fe:86:c4:64:1b:57:4a:33:16:d4:86:
                    e8:37:dc:53:e3:73:5f:7e:d2:f4:05:ce:4c:80:c5:
                    59:b3:fc:39:f9:0f:37:a8:ab:3b:53:55:fb:7e:f9:
                    28:b2:7e:d6:37:a7:2e:ba:e8:86:5b:e0:7a:7a:b9:
                    96:31:3a:47:fb:d5:3c:50:63:f1:09:a6:63:a6:16:
                    c0:d2:52:5a:9d:ce:9f:68:c8:10:04:ca:ea:c7:84:
                    7a:92:b3:b5:12:70:3a:f2:d8:57:01:d5:ce:19:51:
                    e9:20:05:bb:75:1b:18:59:0a:55:c9:ce:62:8d:cf:
                    d3:98:96:cf:dd:4b:90:e9:d5:fa:c5:b0:7b:d8:c4:
                    ce:ab:f1:a2:a6:d2:8c:a3:a5:12:9e:c5:f0:90:e9:
                    03:4f:17:ed:e0:fc:3c:97:d9:18:cd:a1:e0:80:3e:
                    2d:18:3b:50:6c:30:94:17:b5:79:98:71:d2:87:fb:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:E1:31:D3:84:4F:29:91:72:74:4B:1A:60:3F:AB:40:FC:DC:7B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         57:38:47:56:a1:51:43:f1:31:b3:c5:38:6a:7f:67:59:9d:4f:
         55:ec:e1:ee:b3:df:5f:0c:3a:33:30:fb:41:3c:fb:73:b0:e2:
         a0:eb:3f:bf:bd:04:a1:2e:c3:ea:40:79:58:09:be:ab:f6:76:
         14:9c:5c:0d:96:40:ed:76:f4:2e:8a:b1:13:27:c6:f9:bb:8f:
         03:ed:3b:0c:a5:15:15:19:4b:c3:64:f1:ac:cf:ac:4a:de:66:
         69:a2:d3:a1:e1:ad:f0:9c:74:db:6a:de:92:ba:44:88:e0:38:
         b4:48:ad:63:94:76:fe:8e:ec:4a:09:1a:ec:dc:ab:42:2f:aa:
         36:d6:4f:e6:51:20:ec:fa:f5:f3:d6:e0:09:ae:df:47:0f:b7:
         88:95:f7:de:91:80:cc:29:cf:99:ea:54:22:60:08:23:e7:81:
         67:49:92:0c:61:11:e9:97:b9:cb:2c:8a:8c:69:86:c3:a1:4e:
         3d:b5:be:9f:18:31:92:98:ba:83:02:4b:9a:13:9f:dc:e9:79:
         b7:91:e9:9d:71:dc:5f:bf:75:e4:19:47:d8:a3:a6:f9:35:dd:
         03:e6:de:45:1f:ad:54:6b:63:36:8a:0b:a7:c3:15:26:50:11:
         6e:68:a0:33:42:19:74:5d:6b:13:27:50:94:ef:ef:13:ae:f3:
         a7:22:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:52 2025 by rpki-client