Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
File:                     3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          2Ky6iwQfV5mPvcf4RctV4LSVwKQWYw+IKW9xGs9Fjj8=
Subject key identifier:   A4:E3:5D:CE:2A:66:CC:B3:C9:FD:C2:07:C8:73:CA:D4:34:A3:81:5D
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       48462220F17BE78AE96F1D11F6F61D0DCBB0DE30
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
Signing time:             Mon 10 Feb 2025 19:09:25 +0000
ROA not before:           Mon 10 Feb 2025 19:04:25 +0000
ROA not after:            Mon 09 Feb 2026 19:09:25 +0000
asID:                     265524
IP address blocks:        181.191.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:46:22:20:f1:7b:e7:8a:e9:6f:1d:11:f6:f6:1d:0d:cb:b0:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Feb 10 19:04:25 2025 GMT
            Not After : Feb  9 19:09:25 2026 GMT
        Subject: CN=A4E35DCE2A66CCB3C9FDC207C873CAD434A3815D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:8f:d1:ae:3c:f2:3f:3d:dc:e8:e7:7c:f6:
                    79:f6:6e:5f:41:ae:b4:f0:05:67:d0:2e:a5:82:e7:
                    ad:8a:04:3c:c8:97:a0:c1:b3:0e:99:37:7f:87:13:
                    ea:fc:be:b2:9b:a5:26:ae:75:c6:bc:18:d9:f2:38:
                    d0:e0:5c:67:e4:4e:da:83:9a:2a:f8:b1:f1:38:1d:
                    23:32:43:84:1a:e0:59:6e:b9:00:38:83:85:e4:7d:
                    d7:82:5c:9c:02:1f:83:5f:18:74:c7:54:6e:48:26:
                    54:80:3b:b9:ca:c4:24:1f:f1:74:92:e1:a7:f2:bc:
                    b9:2c:8b:e3:b8:42:96:d0:79:dd:d1:e4:62:ab:db:
                    e5:d7:ea:83:fe:dd:ac:cf:5d:33:7e:e4:e8:3a:b9:
                    5f:62:66:83:8c:b6:53:90:b6:16:65:6f:45:b3:8f:
                    e9:b0:8b:5b:d5:37:b7:77:62:93:64:af:03:44:c6:
                    18:b2:7c:61:fb:c3:36:b2:1a:6b:3c:70:fd:62:e1:
                    ca:61:36:de:5c:06:a5:da:b5:04:1c:32:89:b1:75:
                    6f:3c:fd:bd:d6:a4:84:e0:6e:eb:b7:75:1e:2d:22:
                    32:78:60:58:18:9b:aa:93:15:6d:c0:e4:66:8b:a7:
                    e1:92:8d:95:d7:9b:b1:7b:7e:d8:9f:8f:e7:f6:2b:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:5D:CE:2A:66:CC:B3:C9:FD:C2:07:C8:73:CA:D4:34:A3:81:5D
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:d0:3f:07:c8:0f:b8:83:b0:b4:64:77:30:45:c4:f4:d5:
         7d:ab:b1:8b:95:21:57:c2:d6:5f:a8:3e:f7:12:c1:24:be:fc:
         d9:4b:eb:f9:6e:21:79:dd:f0:20:06:94:c6:be:1a:ad:2f:15:
         bf:22:29:86:27:38:ea:d1:13:54:bc:74:37:88:eb:2d:aa:66:
         95:0f:06:6c:8a:60:05:6e:4f:8b:d5:23:44:d5:a8:b3:d3:62:
         ea:b2:3d:00:57:29:aa:9f:31:0c:0e:e5:57:8d:d6:72:e7:c6:
         b4:a5:2b:f2:83:e8:a0:66:14:38:6b:80:71:61:49:17:f6:3e:
         81:02:75:63:14:6e:2d:99:9d:39:dd:f2:e8:79:6a:b9:f9:ee:
         13:22:d9:c2:5c:4c:e8:d1:f1:78:4e:34:92:ec:eb:43:5d:79:
         6f:1e:72:7b:74:db:6e:98:1a:ca:7a:0e:40:87:bb:99:ba:e9:
         e6:8b:f5:62:c3:09:40:5d:b0:0f:64:31:b0:5e:aa:07:15:5a:
         5e:21:df:72:79:84:4d:d0:16:61:0b:fc:ea:1d:1b:c0:3a:89:
         97:65:4b:82:40:22:0d:4d:63:06:50:61:5f:85:ca:f6:59:bb:
         40:38:54:c3:3b:f9:90:a0:3c:7b:33:b5:fa:24:ad:34:9e:d9:
         84:47:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:32 2025 by rpki-client on console.sobornost.net