Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa
File:                     3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          iRJbi0yjSxdfBQzKI3WIxgzFX+fezx7oIAXPWtT5ufo=
Subject key identifier:   3F:0D:B8:82:16:05:7C:2F:C2:DA:2A:85:C6:AA:47:A5:48:5A:E0:E1
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       4D034FF1B0977E29600FEC5245B4EF0121C0518E
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 04 Feb 2025 18:37:03 +0000
ROA not before:           Tue 04 Feb 2025 18:32:03 +0000
ROA not after:            Tue 03 Feb 2026 18:37:03 +0000
asID:                     263809
IP address blocks:        181.191.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:03:4f:f1:b0:97:7e:29:60:0f:ec:52:45:b4:ef:01:21:c0:51:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Feb  4 18:32:03 2025 GMT
            Not After : Feb  3 18:37:03 2026 GMT
        Subject: CN=3F0DB88216057C2FC2DA2A85C6AA47A5485AE0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:1f:4d:c0:7a:1f:fd:31:31:41:ab:87:36:
                    74:6c:6d:b5:12:3f:a7:18:66:91:25:a4:04:3d:04:
                    5c:21:86:15:0b:e3:40:1c:e2:fe:62:0c:b0:61:c6:
                    5d:b8:c4:0b:4d:04:bd:c5:b6:4c:3b:b6:6e:e7:44:
                    2d:f1:20:52:54:b4:5d:5d:86:48:9f:b9:5d:c4:e7:
                    83:02:54:57:2e:1a:3c:e8:42:e2:c8:de:51:cf:dc:
                    66:3c:ff:93:3b:bb:12:7e:ec:ad:ff:0e:03:0f:fc:
                    21:30:0a:da:b1:8c:ad:ea:6f:41:49:ac:03:d2:ee:
                    99:81:a3:2a:9a:3a:ad:c4:e6:54:1b:8f:7d:2c:bd:
                    5d:bc:c0:f5:25:09:57:3f:ed:5a:6a:84:22:09:d7:
                    03:21:59:e2:8b:f7:23:1d:66:df:c0:b6:fa:b0:ac:
                    ae:4e:bd:5d:5c:07:21:af:cc:43:01:89:dc:a9:69:
                    3a:c0:d6:59:cb:00:26:f7:b1:bc:e5:31:04:b5:71:
                    28:f1:02:09:bd:52:02:14:20:d4:9a:36:d8:37:32:
                    ce:b6:b3:a3:14:9b:bb:ce:21:21:29:bf:bc:3a:8d:
                    66:e3:10:2d:b0:4f:49:b4:43:66:cf:5e:03:31:2c:
                    09:17:e4:47:1f:0b:9f:08:38:4c:e4:54:d2:52:89:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0D:B8:82:16:05:7C:2F:C2:DA:2A:85:C6:AA:47:A5:48:5A:E0:E1
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:71:98:b5:d4:d6:e6:af:79:94:0b:29:27:6d:96:94:dd:
         25:cc:d1:b6:16:30:3d:20:40:86:26:a1:d5:9c:67:eb:1d:72:
         00:f0:65:64:74:ce:92:5a:b2:91:3e:42:de:9a:33:8d:da:05:
         59:41:a9:f7:01:a8:87:e3:3f:54:f0:f8:73:0c:18:59:f0:13:
         74:f1:4b:9c:20:8a:65:d1:40:8e:6c:15:d4:38:f0:a3:6b:c9:
         c2:6f:a2:c0:97:c5:36:a9:ae:89:07:72:28:6f:48:2c:e2:28:
         44:94:58:b4:1f:aa:5c:c8:17:7c:72:24:8b:f5:96:41:d5:ae:
         dd:4d:75:e9:3e:56:b4:91:a6:33:66:9e:45:fa:1e:6b:b0:49:
         31:7f:d1:d3:09:41:ed:11:ec:32:75:24:d9:4a:33:3e:56:29:
         55:6e:37:d9:3a:49:bd:ab:27:6f:72:23:df:ce:ec:79:da:cb:
         3b:e2:53:01:6d:2c:6b:3b:67:ab:b3:fc:7a:ed:8d:b4:36:07:
         9b:99:df:a5:16:47:ab:19:53:14:10:c3:0f:9a:df:4d:3d:9e:
         e0:09:87:c8:a3:ab:c2:c0:ce:07:53:fa:5e:4a:ce:9a:3a:66:
         dd:f5:cc:28:92:74:3f:02:40:f3:e0:12:a7:21:86:06:4a:38:
         54:fc:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:13 2025 by rpki-client