Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa
File:                     3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa (raw, json)
Hash identifier:          RCJHP8GOT55aJS6rA8Li2ueX129MsQ6j0M68HZTNaco=
Subject key identifier:   86:8E:E4:4A:04:8B:81:8B:35:EE:68:9A:05:3A:88:EC:C3:0D:45:4D
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       5C6D9108CCF7BAFF665223F7134B069458AA3273
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa
Signing time:             Tue 04 Feb 2025 18:26:35 +0000
ROA not before:           Tue 04 Feb 2025 18:21:35 +0000
ROA not after:            Tue 03 Feb 2026 18:26:35 +0000
asID:                     52308
IP address blocks:        181.174.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:91:08:cc:f7:ba:ff:66:52:23:f7:13:4b:06:94:58:aa:32:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Feb  4 18:21:35 2025 GMT
            Not After : Feb  3 18:26:35 2026 GMT
        Subject: CN=868EE44A048B818B35EE689A053A88ECC30D454D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:2c:d7:6c:1d:26:80:74:43:dd:2a:11:24:
                    fb:81:1c:13:5b:1f:20:a1:f5:22:07:34:3a:e7:bf:
                    5c:ff:df:75:78:01:83:e4:0b:77:c9:06:07:65:e6:
                    15:c7:eb:b2:91:1f:d7:52:4b:bd:6a:99:54:ba:be:
                    f5:89:e6:bb:7b:42:1e:03:93:b0:b6:4f:22:e0:80:
                    e8:85:f0:43:0c:8d:b8:c5:88:1d:0f:d8:c1:32:f2:
                    3a:da:a6:9c:9a:87:3c:9b:26:22:f3:72:0c:2a:70:
                    dd:e8:d9:71:14:36:f8:24:14:d9:53:ee:aa:3f:2e:
                    3f:5e:9a:0c:99:3a:02:12:95:5e:43:2e:25:8d:32:
                    e7:76:19:36:b7:c5:d0:ea:1c:81:d9:ad:57:40:b5:
                    53:c0:6c:58:14:99:1b:e7:3b:a0:a3:45:5d:b4:7a:
                    f2:1f:cc:26:2a:13:aa:e5:56:f1:fa:0a:a4:55:17:
                    5a:0c:48:6f:37:aa:88:a6:47:6c:7e:3a:fc:fa:73:
                    34:57:b8:c3:3c:32:6b:1e:1a:c9:1b:d7:5d:4e:e1:
                    49:0a:c8:5a:30:19:39:64:54:3b:57:81:7f:a5:cc:
                    da:f4:7e:80:b5:b3:84:6c:8e:a7:7c:90:73:68:1b:
                    68:56:63:f9:50:99:db:72:73:30:d1:2e:a9:df:75:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:E4:4A:04:8B:81:8B:35:EE:68:9A:05:3A:88:EC:C3:0D:45:4D
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:7f:aa:c2:08:3e:aa:ee:40:ce:5f:76:c9:72:36:48:e5:01:
         20:86:c7:da:af:2c:9a:a5:bf:5e:eb:8a:6b:6d:d9:b0:ee:bf:
         63:0a:c3:d4:ac:b4:17:e3:71:67:c6:48:75:c4:92:00:ba:1f:
         b6:de:97:c5:f0:82:28:c8:31:07:9d:7b:d2:78:32:1f:8f:48:
         28:34:f3:33:78:d6:46:b6:4f:55:38:7f:d1:38:3a:f7:e1:a0:
         c1:46:da:94:a5:dd:d4:79:f7:15:3b:88:4e:e4:1e:08:24:97:
         d4:a3:72:60:73:7a:8c:78:d5:3b:f7:76:0c:06:b4:47:4b:04:
         f4:02:e8:43:0c:e0:e1:86:4d:96:60:62:31:a0:a5:bc:b7:0a:
         aa:1e:63:11:5f:42:e3:6c:2c:2a:a7:ad:9a:85:eb:55:6f:a9:
         36:6f:52:9b:ac:a4:c1:42:67:77:a2:a9:1d:48:6e:02:c8:c4:
         4a:50:8c:54:a5:bb:55:12:95:f2:52:5a:b3:46:c8:3c:2b:0b:
         5d:48:ba:13:6e:91:11:b2:40:db:37:0f:bb:4e:22:47:88:52:
         a4:af:f9:66:20:6d:10:a7:02:b7:6f:90:8c:f5:f6:5a:df:54:
         4e:a0:c7:cf:3c:6a:7d:9a:7a:0e:75:6d:8a:3b:a7:09:47:ee:
         64:f4:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:13 2025 by rpki-client