Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32322d3234203d3e203532343132.roa
File:                     3138312e3232342e3230342e302f32322d3234203d3e203532343132.roa (raw, json)
Hash identifier:          aRYl82Rv8JKEkKlq/9V9WSeOsyxorzWkTJy5GgjvJvA=
Subject key identifier:   5A:18:CF:6A:CE:0D:C4:B7:06:F3:7C:23:03:F8:33:E4:2D:EA:2A:05
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       628E958DEB1CB29B95A8D5527FC4EAFFC16A2EE7
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32322d3234203d3e203532343132.roa
Signing time:             Tue 04 Feb 2025 18:42:46 +0000
ROA not before:           Tue 04 Feb 2025 18:37:46 +0000
ROA not after:            Tue 03 Feb 2026 18:42:46 +0000
asID:                     52412
IP address blocks:        181.224.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:95:8d:eb:1c:b2:9b:95:a8:d5:52:7f:c4:ea:ff:c1:6a:2e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Feb  4 18:37:46 2025 GMT
            Not After : Feb  3 18:42:46 2026 GMT
        Subject: CN=5A18CF6ACE0DC4B706F37C2303F833E42DEA2A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:32:30:f3:95:b2:fe:a7:6d:80:cd:14:ea:
                    c7:54:c9:85:fb:ba:c0:fe:dc:88:60:e8:cd:78:04:
                    f6:b4:4d:03:3e:2c:24:53:a6:48:ab:55:d9:93:14:
                    94:b6:49:59:6e:24:8c:ae:e3:b9:59:bb:53:f2:53:
                    f7:82:ea:4c:fa:99:71:e2:78:2c:13:84:93:ac:d6:
                    ab:6d:50:83:fc:5f:b9:b2:36:32:27:70:62:39:72:
                    1e:ea:19:26:36:0b:85:75:18:04:f6:40:d8:15:56:
                    d7:ba:ce:22:07:b1:86:0e:00:96:69:7f:2f:a4:1a:
                    ef:dd:72:8c:1c:39:de:8c:d4:b8:23:20:01:6b:a3:
                    e9:18:0d:e8:e7:d4:23:b6:e7:82:ca:ad:e3:90:f2:
                    23:11:ef:6b:57:03:cb:c0:b6:ef:87:72:2e:7b:85:
                    80:92:10:46:55:d8:c6:2c:74:49:cd:85:84:12:b0:
                    3a:fe:87:43:c9:0d:d0:2d:39:88:85:27:66:aa:ea:
                    fa:2c:46:fb:56:3c:45:0e:1f:c6:3c:13:d2:e8:2b:
                    ec:c4:e8:03:cb:74:ae:f0:69:c5:66:36:93:19:77:
                    bc:e1:a9:34:51:8e:c3:e5:d7:6c:89:41:f6:02:c7:
                    d2:62:1d:89:dc:b4:67:9a:df:41:bd:0b:4d:94:bf:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:18:CF:6A:CE:0D:C4:B7:06:F3:7C:23:03:F8:33:E4:2D:EA:2A:05
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32322d3234203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:73:e1:5f:06:db:fb:2a:48:56:92:2f:0c:6b:83:ec:bc:9d:
         9d:39:3c:30:27:7d:bf:a0:ea:e5:66:8a:9b:0e:3e:d6:03:29:
         e0:d6:b2:e5:4c:b1:6c:d4:f7:a9:40:42:85:a0:6d:d8:df:a4:
         ea:04:d2:e2:0d:61:e1:10:32:f3:97:26:94:fe:b1:f6:4b:cb:
         4f:9a:4f:4b:2e:14:00:c0:46:24:47:fc:6b:03:3c:ce:ff:41:
         3c:f6:a7:83:72:d1:8b:a4:9e:46:ea:5d:22:7b:62:ca:5d:6b:
         98:c0:1f:e3:77:6a:8f:c9:eb:c0:83:c5:a4:73:17:46:19:62:
         30:71:7a:4f:28:b5:cf:0b:1d:d1:32:4c:f9:e9:3b:ff:37:47:
         46:32:6c:b9:76:4c:ed:10:ec:78:70:27:ce:e2:35:88:bb:1f:
         85:4f:fe:fe:ed:06:44:44:4e:1f:8e:fe:1a:b3:21:a8:69:84:
         d8:c2:4a:50:07:3e:7e:92:58:f6:2a:75:a4:82:1b:0f:a0:06:
         41:af:a6:61:d2:c6:c4:ab:2d:36:49:82:d4:20:aa:05:dd:d5:
         e1:9e:31:52:1a:fc:f3:1c:87:59:01:29:43:c2:84:ac:8b:97:
         a1:09:d4:88:18:8f:07:41:09:a1:5e:24:84:df:ef:bd:66:cf:
         ec:2b:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:55:56 2025 by rpki-client