Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa
File:                     3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa (raw, json)
Hash identifier:          9GBohUgk/RVWw/ixXJpyQOr+kCD+xAooJWlW3YYD1GY=
Subject key identifier:   C0:B9:2E:42:29:F8:05:7C:D2:45:BA:AA:8D:88:29:08:91:A1:18:4F
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       5F726F0E4C4117C051CB78E6B3A36D41711A3BDC
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa
Signing time:             Tue 04 Feb 2025 20:02:01 +0000
ROA not before:           Tue 04 Feb 2025 19:57:01 +0000
ROA not after:            Tue 03 Feb 2026 20:02:01 +0000
asID:                     58349
IP address blocks:        181.233.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:72:6f:0e:4c:41:17:c0:51:cb:78:e6:b3:a3:6d:41:71:1a:3b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Feb  4 19:57:01 2025 GMT
            Not After : Feb  3 20:02:01 2026 GMT
        Subject: CN=C0B92E4229F8057CD245BAAA8D88290891A1184F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:ca:f6:12:d0:44:7d:b5:cc:c2:29:3a:fc:
                    60:24:0e:a2:23:76:0c:fe:8e:17:3a:7b:35:0d:ec:
                    e1:d0:cc:bb:17:f3:70:94:a0:8e:8f:55:c0:e3:1f:
                    1a:30:af:86:d7:19:41:85:63:3e:50:11:6a:90:02:
                    4b:82:66:d8:2d:92:59:f8:12:fb:80:69:b9:10:1c:
                    f4:9d:67:89:8a:c5:a4:fc:1f:d7:2c:2e:07:e9:87:
                    5f:2b:6c:ac:ec:d7:62:84:f2:bd:39:05:44:aa:35:
                    7a:42:96:c1:36:71:c4:df:16:e8:5a:02:b0:d6:eb:
                    ff:dc:6d:7b:c6:6c:85:f6:19:70:df:a9:39:ff:35:
                    b6:e5:56:74:bd:c3:2b:e6:4a:e4:98:0a:32:c9:ee:
                    4f:a3:78:d5:7c:19:9f:f4:90:73:42:43:34:c0:68:
                    5d:28:9f:07:82:b6:ee:7a:02:22:7a:56:bb:a0:a0:
                    0d:e4:78:a7:e7:5c:fe:e5:46:4b:8f:42:3d:21:80:
                    b2:12:b3:a4:e1:ed:4f:2f:14:9e:6e:fa:07:ed:6d:
                    5f:45:8f:9f:ef:a6:c8:1c:d4:41:d8:78:0e:6d:eb:
                    de:b5:2e:fc:e0:ca:21:93:c0:8e:2a:1d:62:0a:5b:
                    85:b5:b5:01:ae:a2:ec:6e:94:2f:29:e9:76:2b:28:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:2E:42:29:F8:05:7C:D2:45:BA:AA:8D:88:29:08:91:A1:18:4F
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:d8:ba:bc:5a:41:ac:ce:0a:c5:8a:a6:63:2c:c4:8e:64:
         4d:8f:a6:a5:35:71:b5:46:85:fd:11:6a:12:94:7e:7c:12:4b:
         8f:71:01:3e:3b:4b:2e:c7:9f:2d:a7:66:b6:03:6b:10:fd:03:
         2c:a2:fc:ae:3e:c9:5a:8a:d0:00:5c:f8:c8:b2:4f:6c:be:3c:
         09:02:eb:e5:bc:e7:1c:6c:d4:bc:fe:f2:e0:0a:07:1f:30:4a:
         14:61:78:1e:99:4e:99:b0:97:54:dc:dd:48:e2:9c:5f:c0:8b:
         fd:9d:58:88:14:90:ed:ae:84:47:9a:d2:d4:72:97:e8:1a:08:
         d1:e6:97:ce:7a:5d:b9:97:e8:a7:1a:63:60:f2:39:97:b8:d5:
         18:5b:b7:cc:12:8e:2c:04:35:c1:45:23:c1:d3:f8:08:50:dd:
         b0:0e:a8:cd:10:1f:af:29:e8:f4:82:43:b9:51:42:07:22:39:
         0e:dd:00:c7:1e:37:d0:a4:18:f1:f7:93:42:b9:9f:fb:78:ad:
         33:3d:40:05:92:68:fa:73:90:ac:4a:ef:4c:f3:02:2f:b0:dd:
         48:76:b5:b9:03:bf:1d:f7:7b:f2:a1:65:02:0c:50:9a:32:c0:
         5d:c5:72:e7:e7:01:09:b7:38:5d:86:01:ec:67:06:78:dc:6c:
         dd:0e:dc:49
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX3JvDkxBF8BRy3jms6NtQXEaO9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFMzI3MjI1MDI3Mjk3RTUyRjREM0RBMEZDMjgyRDBD
NEJEMzUzQjAeFw0yNTAyMDQxOTU3MDFaFw0yNjAyMDMyMDAyMDFaMDMxMTAvBgNV
BAMTKEMwQjkyRTQyMjlGODA1N0NEMjQ1QkFBQThEODgyOTA4OTFBMTE4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuE8r2EtBEfbXMwik6/GAkDqIj
dgz+jhc6ezUN7OHQzLsX83CUoI6PVcDjHxowr4bXGUGFYz5QEWqQAkuCZtgtkln4
EvuAabkQHPSdZ4mKxaT8H9csLgfph18rbKzs12KE8r05BUSqNXpClsE2ccTfFuha
ArDW6//cbXvGbIX2GXDfqTn/NbblVnS9wyvmSuSYCjLJ7k+jeNV8GZ/0kHNCQzTA
aF0onweCtu56AiJ6VrugoA3keKfnXP7lRkuPQj0hgLISs6Th7U8vFJ5u+gftbV9F
j5/vpsgc1EHYeA5t6961LvzgyiGTwI4qHWIKW4W1tQGuouxulC8p6XYrKCfDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwLkuQin4BXzSRbqqjYgpCJGhGE8wHwYDVR0j
BBgwFoAUoeMnIlAnKX5S9NPaD8KC0MS9NTswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMEM3NTM4RUU1NzZDRTFDQzlCQzRGMDdGNDg4OTc2RTg3
RDcyQUJBOTZGNkUzQTU3QTlFRkQyRUVENDQ1NUZDLzAvQTFFMzI3MjI1MDI3Mjk3
RTUyRjREM0RBMEZDMjgyRDBDNEJEMzUzQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUUzMjcyMjUwMjcyOTdFNTJG
NEQzREEwRkMyODJEMEM0QkQzNTNCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTBDNzUzOEVFNTc2Q0UxQ0M5QkM0RjA3RjQ4ODk3NkU4N0Q3MkFCQTk2
RjZFM0E1N0E5RUZEMkVFRDQ0NTVGQy8wLzMxMzgzMTJlMzIzMzMzMmUzMTMyMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtel9
MA0GCSqGSIb3DQEBCwUAA4IBAQBsd9i6vFpBrM4KxYqmYyzEjmRNj6alNXG1RoX9
EWoSlH58EkuPcQE+O0sux58tp2a2A2sQ/QMsovyuPslaitAAXPjIsk9svjwJAuvl
vOccbNS8/vLgCgcfMEoUYXgemU6ZsJdU3N1I4pxfwIv9nViIFJDtroRHmtLUcpfo
GgjR5pfOel25l+inGmNg8jmXuNUYW7fMEo4sBDXBRSPB0/gIUN2wDqjNEB+vKej0
gkO5UUIHIjkO3QDHHjfQpBjx95NCuZ/7eK0zPUAFkmj6c5CsSu9M8wIvsN1IdrW5
A78d93vyoWUCDFCaMsBdxXLn5wEJtzhdhgHsZwZ43GzdDtxJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:24:41 2025 by rpki-client