Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa
File:                     3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa (raw, json)
Hash identifier:          lTB1RwbbktpiQT9ZCJvOrrv6TiBwCwZylM86gl4sMyQ=
Subject key identifier:   2B:B3:B3:B3:00:FD:44:AD:73:40:C4:DC:08:CE:0F:B8:FE:B4:F5:33
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       7A46B75C9DC5F9CC0D293B911CC7C5BA4CDB5E67
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa
Signing time:             Thu 08 May 2025 16:18:05 +0000
ROA not before:           Thu 08 May 2025 16:13:05 +0000
ROA not after:            Thu 07 May 2026 16:18:05 +0000
asID:                     40311
IP address blocks:        181.199.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:b7:5c:9d:c5:f9:cc:0d:29:3b:91:1c:c7:c5:ba:4c:db:5e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: May  8 16:13:05 2025 GMT
            Not After : May  7 16:18:05 2026 GMT
        Subject: CN=2BB3B3B300FD44AD7340C4DC08CE0FB8FEB4F533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:a0:00:7a:18:32:de:56:82:c0:b9:e0:e1:
                    b0:f0:fa:3a:88:bd:f5:2f:42:08:f1:c3:d6:63:bf:
                    08:5c:bb:d9:56:8e:b4:c4:4f:2d:67:4f:a1:67:8e:
                    19:19:a5:67:cb:1b:12:42:61:ff:38:b3:64:eb:26:
                    e8:01:e3:fb:19:8d:dc:83:64:f1:28:a8:6a:05:60:
                    b7:19:87:07:eb:2c:8e:de:49:42:19:85:97:4a:32:
                    41:e4:a5:d6:2b:8e:0f:62:ae:7b:f2:e8:57:dc:f0:
                    6e:2a:80:b6:f9:ec:1e:8d:83:f3:05:1a:33:70:28:
                    aa:90:ee:37:9e:67:6c:2e:22:19:a0:93:44:15:29:
                    98:87:19:f8:e8:bd:f4:8d:6d:a2:63:4e:b3:f6:f3:
                    06:25:a3:20:46:54:7f:08:68:91:d9:e0:f6:8e:8b:
                    b4:ad:bb:24:bb:ac:8e:df:8b:10:b6:be:51:ac:dd:
                    33:25:ab:b5:2c:e8:ac:ef:37:fb:e2:fd:34:37:5e:
                    9b:50:32:38:00:73:eb:1b:f8:7c:21:46:41:bf:ae:
                    3a:1a:a4:c5:2f:81:fd:25:b7:db:b9:29:0f:29:20:
                    4c:a5:42:12:39:0a:f0:18:99:88:2b:9c:52:39:50:
                    3b:6c:23:2e:42:80:e0:87:ef:1f:54:9f:69:49:f6:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:B3:B3:00:FD:44:AD:73:40:C4:DC:08:CE:0F:B8:FE:B4:F5:33
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:91:95:7e:fd:70:0d:f4:b3:3d:23:1e:66:0c:84:ca:2f:c7:
         f0:6a:cd:1e:bf:01:ea:80:07:e7:cc:4f:4e:f3:d9:08:d9:24:
         b0:e1:02:c2:78:a4:16:57:1f:e3:5b:c6:fc:89:cb:39:9f:ac:
         76:0b:60:4b:4f:27:8a:93:39:9c:d9:7e:53:dc:0e:29:d4:b8:
         70:79:55:17:4b:c6:03:0f:d0:e1:a0:05:16:00:d2:7e:d5:fd:
         6e:e0:14:d4:59:4e:b7:77:f7:1b:cf:6f:81:57:be:b0:70:f3:
         9a:e2:8a:b7:2e:88:0b:af:8e:1c:58:4f:b7:e7:ad:c5:f7:64:
         15:3d:bf:98:7f:7b:fd:2b:31:db:88:d5:ef:d3:c5:ed:9e:73:
         aa:00:c3:79:44:88:16:55:72:ed:f2:36:6a:f8:a0:b9:37:ab:
         ef:3f:78:91:9e:d1:97:34:de:49:db:55:35:90:1d:b8:40:f1:
         cd:27:6a:48:be:93:55:08:83:a9:3d:88:f2:da:4d:d6:4d:7a:
         55:7f:35:e5:8b:0b:25:19:3f:1f:30:3a:68:17:c8:48:a1:8e:
         81:d3:7c:f9:76:0b:0a:59:ab:cb:10:d5:db:71:6f:90:65:1e:
         1b:f2:a5:68:4d:c2:fa:89:88:24:96:f6:b1:49:52:1c:56:42:
         2c:f0:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:31:37 2025 by rpki-client