Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e20323632323237.roa
File:                     3138312e33382e302e302f31362d3234203d3e20323632323237.roa (raw, json)
Hash identifier:          ZOxAkQhGO7Zl+FOUFCi1f3MB0C33BmJY/PMdrAOu/j0=
Subject key identifier:   1A:34:C2:31:7E:A8:84:3F:EA:AA:9F:FC:2A:D0:BC:23:F1:76:80:84
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       0DC629BDBCF0DA4AF3F295C7543122066E6680C0
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e20323632323237.roa
Signing time:             Fri 14 Mar 2025 14:20:00 +0000
ROA not before:           Fri 14 Mar 2025 14:15:00 +0000
ROA not after:            Fri 13 Mar 2026 14:20:00 +0000
asID:                     262227
IP address blocks:        181.38.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:29:bd:bc:f0:da:4a:f3:f2:95:c7:54:31:22:06:6e:66:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:15:00 2025 GMT
            Not After : Mar 13 14:20:00 2026 GMT
        Subject: CN=1A34C2317EA8843FEAAA9FFC2AD0BC23F1768084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:87:07:76:85:5b:a6:fd:15:17:ea:4f:45:
                    90:eb:7b:c3:a6:fc:52:6b:db:39:39:8d:99:a3:39:
                    37:93:9a:df:7b:f3:f1:0f:c4:f7:c2:6e:d8:b8:e7:
                    a2:09:5e:78:fa:17:91:49:2d:25:96:13:b7:1a:37:
                    b2:a3:0a:4b:4d:43:ba:60:9c:09:8f:47:b7:a9:31:
                    8a:84:d8:1d:c2:07:62:f8:ec:e3:3a:d5:b3:c7:90:
                    80:d0:fd:16:74:e0:cc:ef:a3:64:44:51:12:b5:a6:
                    c8:03:35:8e:3a:8f:f8:f9:60:4b:85:ce:7b:db:2e:
                    56:06:da:2e:8f:72:d9:56:9a:42:33:be:ed:4a:cf:
                    ff:9b:74:1a:5a:33:01:4f:f9:4e:eb:6d:fc:60:53:
                    3e:4b:73:d7:e8:db:fc:21:c1:30:31:d2:7f:3e:d2:
                    72:55:ae:98:3a:7b:32:cf:fe:8b:6f:fb:76:ea:cb:
                    77:36:70:a8:94:ea:5a:6f:43:62:96:73:b6:0a:07:
                    e7:36:15:cc:13:a0:26:e6:6e:88:0c:79:e8:47:62:
                    b0:62:23:7c:38:9f:28:3c:39:53:25:0f:ef:88:2a:
                    9a:8f:04:8c:e3:5f:c1:68:f4:07:95:b6:e6:39:13:
                    3e:63:85:3d:77:04:37:06:81:96:b3:53:9e:8c:7e:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:34:C2:31:7E:A8:84:3F:EA:AA:9F:FC:2A:D0:BC:23:F1:76:80:84
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e20323632323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:b8:9b:e0:03:ba:06:0d:80:c9:4c:d3:31:9c:80:85:56:
         37:92:70:34:20:a7:e3:69:7a:41:f4:80:2e:49:e0:1f:d3:6b:
         77:e6:a5:fb:31:cf:9b:42:58:15:89:43:7f:1f:36:f1:f3:13:
         9a:3e:fe:63:4f:68:d9:7d:64:b4:63:1e:e7:85:e2:d3:ef:32:
         c2:35:a8:ff:56:ab:64:57:3f:77:b1:24:4c:04:8a:d6:ac:2a:
         ca:e8:4c:23:7c:2d:5e:4d:32:e9:4d:36:55:01:2f:e3:9c:ca:
         26:44:6d:64:09:a1:d6:cb:10:eb:cf:99:ad:f6:e9:40:5c:88:
         62:be:46:57:3b:d6:76:6f:b7:7d:67:87:85:3e:01:ca:95:f2:
         e7:a8:f9:29:b5:ce:52:06:5a:05:1d:36:bf:2f:50:23:4d:ff:
         d5:99:5d:8f:ce:1e:27:61:ec:81:f0:65:b1:85:4f:9e:3b:15:
         4d:58:c1:49:ce:82:fd:6a:57:d8:8c:e0:58:c8:49:7c:45:b7:
         20:a6:ec:5f:00:0b:d3:2e:78:54:73:c3:78:cb:15:00:7b:ea:
         f8:07:f3:f6:d7:6e:69:8e:6a:e3:a7:f5:31:f7:55:b9:16:8a:
         08:ca:9b:b2:e5:cc:3c:9b:f5:3b:b2:bf:5f:01:ad:37:97:04:
         15:60:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:44 2025 by rpki-client