Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa
File:                     3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa (raw, json)
Hash identifier:          y8RjqaR1+jlD/CLpe7yUilcrJe6OadhXzrRNJKQDmFs=
Subject key identifier:   4B:48:DC:1D:65:34:6F:7F:1F:32:5B:A0:1E:65:8A:27:82:9F:9F:63
Certificate issuer:       /CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7
Certificate serial:       57616F44FA99E5106E2D0EBECCA072D139938E87
Authority key identifier: BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa
Signing time:             Tue 04 Feb 2025 18:51:12 +0000
ROA not before:           Tue 04 Feb 2025 18:46:12 +0000
ROA not after:            Tue 03 Feb 2026 18:51:12 +0000
asID:                     272068
IP address blocks:        181.224.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:61:6f:44:fa:99:e5:10:6e:2d:0e:be:cc:a0:72:d1:39:93:8e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7
        Validity
            Not Before: Feb  4 18:46:12 2025 GMT
            Not After : Feb  3 18:51:12 2026 GMT
        Subject: CN=4B48DC1D65346F7F1F325BA01E658A27829F9F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:f6:2e:d0:8a:b9:5e:50:cc:b5:c5:f3:35:
                    ff:34:fc:eb:93:e6:7b:5a:6f:89:ca:90:25:5b:94:
                    21:22:f3:1f:77:60:6d:7c:f4:ae:b9:5a:31:b4:50:
                    18:cf:a7:cb:7d:e5:cf:af:f7:4d:0d:92:2d:b5:f9:
                    5d:99:c8:e0:80:f3:5f:34:d4:5d:4d:73:3b:b4:42:
                    59:52:95:25:9e:21:3b:84:e4:a6:86:db:c2:cb:ba:
                    92:36:da:e5:72:e7:ca:95:db:5e:7e:e9:48:6a:b5:
                    16:e7:7d:00:cd:25:48:4b:ad:79:ac:cc:23:d3:ae:
                    a1:55:63:15:57:d7:00:a9:a5:ab:5f:80:aa:26:34:
                    08:74:0b:b7:f3:0e:41:05:fa:25:ea:c3:a5:35:25:
                    1c:62:34:fc:a9:32:5c:06:0d:20:13:5f:4d:94:61:
                    ab:04:6d:46:a5:0e:66:b3:a0:f6:e7:65:f0:96:3d:
                    19:3d:06:11:d5:7f:49:43:f5:7c:55:16:8f:8e:8e:
                    c4:b4:77:d8:db:be:8a:bf:b3:da:4d:26:10:85:df:
                    e6:51:35:a0:0d:fc:5e:a5:ac:43:7b:7d:89:81:fd:
                    f3:6b:ea:a0:0c:80:26:e2:a1:d8:1e:c8:63:1c:5c:
                    1e:bf:fb:c1:26:6c:cc:76:11:89:98:9b:16:ee:d5:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:48:DC:1D:65:34:6F:7F:1F:32:5B:A0:1E:65:8A:27:82:9F:9F:63
            X509v3 Authority Key Identifier:
                keyid:BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:26:26:5d:1c:f5:e7:0b:a6:c5:31:50:51:ef:04:1f:12:
         7b:62:48:43:a2:d3:39:66:b7:17:61:75:b7:4b:31:5e:79:6c:
         e6:5e:d7:27:a4:47:38:df:72:93:60:a9:71:d7:c9:b3:c6:f5:
         7a:7d:05:4f:44:61:69:08:96:ce:1e:15:3f:81:e7:85:ef:17:
         bd:e4:16:79:b9:f8:df:c3:e8:21:96:de:8a:25:6f:84:78:a8:
         83:20:53:89:46:3c:d5:9c:68:86:5f:12:6d:73:05:39:89:e1:
         17:2d:13:74:30:1b:e6:d3:cd:1b:34:9d:88:e8:3f:72:ee:95:
         04:f9:f8:69:51:e0:02:4d:ac:73:fb:22:6e:14:a2:6b:b8:c6:
         b4:87:54:82:12:53:ca:e2:f3:d2:a6:28:ec:03:77:41:46:1f:
         d7:fa:70:b7:87:f8:25:5c:39:9f:ab:43:7a:98:99:70:ac:09:
         0c:f1:c9:48:c1:70:6f:b1:56:5b:cd:4d:0f:6f:3d:49:01:ad:
         9b:d7:a5:c0:e5:d1:65:27:31:2d:0f:db:22:b1:6b:88:52:00:
         ba:38:c7:f0:97:da:9e:ec:00:7b:6c:f5:6c:e2:72:9e:5b:00:
         7b:48:29:6d:69:28:3f:ce:82:2f:09:a4:fb:91:d2:40:3a:2f:
         7d:a4:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:32:34 2025 by rpki-client