Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa
File:                     3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa (raw, json)
Hash identifier:          bxXp+krD2K69Rro2P1t4u5w1fuJkRNgd7O4c0dXwP70=
Subject key identifier:   84:BA:65:8B:E4:1C:BD:74:8F:00:C2:B7:DD:05:DD:54:7B:07:7C:3A
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       3878633EC49619F8DB849BCA074DF3DDF4353043
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa
Signing time:             Tue 04 Feb 2025 18:34:02 +0000
ROA not before:           Tue 04 Feb 2025 18:29:02 +0000
ROA not after:            Tue 03 Feb 2026 18:34:02 +0000
asID:                     263735
IP address blocks:        181.177.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:78:63:3e:c4:96:19:f8:db:84:9b:ca:07:4d:f3:dd:f4:35:30:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Feb  4 18:29:02 2025 GMT
            Not After : Feb  3 18:34:02 2026 GMT
        Subject: CN=84BA658BE41CBD748F00C2B7DD05DD547B077C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:69:1b:c3:db:fd:b1:41:c3:31:53:b0:d5:
                    13:e0:47:72:85:32:fe:8b:f7:40:1c:5c:73:d0:3d:
                    07:37:02:db:24:7f:87:54:67:1f:4e:9b:17:c3:ee:
                    ff:95:77:4b:20:50:7d:ae:b1:00:a0:8d:9f:8c:59:
                    16:4f:9e:7d:c2:d8:15:5d:3c:a5:c5:0b:16:fb:18:
                    6c:09:2d:97:80:3a:62:49:dd:39:36:d1:f8:c0:59:
                    66:70:3e:07:e7:8c:3f:0f:f4:86:b2:b9:5d:cc:d3:
                    19:14:12:67:8f:b3:4f:b4:bc:c7:e1:92:eb:a8:5c:
                    2c:57:d9:08:f9:3f:0d:5a:32:c9:3f:d5:03:d2:31:
                    4e:57:58:3f:69:f0:21:d4:46:a1:b1:37:13:f6:e2:
                    63:86:1c:e6:4d:b4:ef:fa:8e:dc:0f:14:f6:b8:4c:
                    52:67:fd:7c:d2:40:85:3e:77:e4:53:76:eb:d2:81:
                    2e:f1:ad:c2:06:59:ed:f6:01:89:22:ac:5e:ed:7c:
                    6c:d4:c5:74:af:aa:ac:76:16:df:44:ee:8e:12:d2:
                    9d:69:42:00:94:f8:7e:14:49:2d:4c:11:84:e6:36:
                    cc:4a:ba:e8:0b:ac:92:5c:e1:50:5f:b3:c1:c3:5b:
                    bc:39:cb:84:0e:28:c7:5d:82:c0:0f:b5:66:f8:ef:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:65:8B:E4:1C:BD:74:8F:00:C2:B7:DD:05:DD:54:7B:07:7C:3A
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:7c:5d:45:29:82:ed:ea:5b:f4:26:92:9c:fa:cd:c9:48:
         7f:c8:2d:c7:95:00:52:6a:a9:07:0b:99:97:9e:6f:76:54:2c:
         99:c9:f0:4c:7c:af:e5:3c:af:39:e8:16:92:b1:0c:9e:51:08:
         bc:af:48:7b:37:47:a3:49:fb:65:08:2a:65:f9:6f:4b:64:91:
         34:c6:95:aa:f5:b4:fa:e7:f9:e8:13:3e:6e:61:85:ba:4a:32:
         ec:56:64:61:53:c9:76:b2:9b:e0:96:db:5e:95:d9:c1:10:b6:
         be:7b:a9:fb:2b:24:45:30:30:ff:61:ec:4f:97:fd:bc:24:73:
         48:d5:70:9e:4c:8c:40:a5:e4:81:5c:de:59:f3:4b:08:50:76:
         1f:77:40:64:5c:54:3d:f6:d3:75:00:9b:5a:d3:22:f4:19:b3:
         0e:38:b8:8b:7a:df:9e:ff:cd:70:27:19:c3:6e:e4:01:b8:8f:
         8e:40:76:51:e9:45:fc:b9:a5:cf:4b:77:35:20:6b:fc:d1:76:
         f8:67:a6:9f:91:1d:58:a5:2b:aa:44:8a:15:90:1e:10:14:a9:
         82:2d:75:05:d7:6e:8f:f8:7b:e9:69:e0:2a:54:b7:f5:20:f4:
         44:37:d0:c4:7e:bc:05:97:b8:cc:52:bb:2c:cb:de:a1:8e:5b:
         0f:08:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:08 2025 by rpki-client