Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e33322e302f31392d3234203d3e2038303533.roa
File:                     3138312e3232352e33322e302f31392d3234203d3e2038303533.roa (raw, json)
Hash identifier:          XTrYpSNpjLRbiDj29Bao6KHarTheDhs/lrYoSSTROZQ=
Subject key identifier:   B1:40:2E:43:FF:A7:59:AD:7A:27:D6:22:5F:A6:A9:5C:43:7D:EF:03
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       4D6AC7E95E5D57E75AADEC5D1D80B5DDEB589AA3
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e33322e302f31392d3234203d3e2038303533.roa
Signing time:             Tue 05 Mar 2024 18:22:43 +0000
ROA not before:           Tue 05 Mar 2024 18:17:43 +0000
ROA not after:            Tue 04 Mar 2025 18:22:43 +0000
asID:                     8053
IP address blocks:        181.225.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6a:c7:e9:5e:5d:57:e7:5a:ad:ec:5d:1d:80:b5:dd:eb:58:9a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Mar  5 18:17:43 2024 GMT
            Not After : Mar  4 18:22:43 2025 GMT
        Subject: CN=B1402E43FFA759AD7A27D6225FA6A95C437DEF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:1c:04:61:10:5b:be:11:b8:67:5d:07:c4:
                    e0:a5:81:88:87:9f:f1:eb:69:c5:c2:ef:93:e8:95:
                    d7:79:f4:c6:4e:9d:07:fc:26:27:9d:cb:f8:3d:cd:
                    30:6e:d7:bd:4a:ae:93:e4:92:30:3a:da:af:90:5f:
                    03:ca:dc:4b:f8:20:d6:5b:f8:06:a4:c5:93:2f:c1:
                    c8:07:71:65:7b:bf:8a:fc:93:a3:56:b2:97:4e:75:
                    98:6c:d3:80:40:11:df:36:f6:0a:c0:1b:04:58:0a:
                    56:03:09:64:df:e7:e3:e1:b9:aa:5d:70:f0:9e:c0:
                    b3:1a:63:75:83:c2:b5:c0:5a:7d:8c:70:11:a0:40:
                    ab:95:b7:e9:87:e2:c9:74:e1:b8:8e:49:22:65:2f:
                    54:29:e1:aa:86:34:c7:2b:12:df:6d:2e:0d:9a:66:
                    37:2f:2f:d2:05:77:00:8d:0f:1b:3c:46:b0:62:87:
                    3c:5a:ac:7b:07:f3:82:c4:f0:e0:98:f9:1d:a3:30:
                    7f:3d:4f:44:90:ee:db:53:ba:d3:b9:96:ac:ad:7b:
                    85:74:d5:e8:25:dc:eb:f4:af:63:7d:f5:b9:bd:a9:
                    69:ed:25:73:f6:89:ba:dc:6c:7d:34:dc:f1:17:70:
                    83:4c:ad:c5:91:ef:a8:0a:a8:6d:11:18:df:14:56:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:2E:43:FF:A7:59:AD:7A:27:D6:22:5F:A6:A9:5C:43:7D:EF:03
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e33322e302f31392d3234203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:b0:c9:fe:dc:31:3f:5b:dc:7c:a3:0a:94:e3:c6:a2:9d:94:
         a7:db:76:98:8a:6b:92:f6:38:72:b2:bb:7d:f6:08:14:c7:34:
         0a:99:15:5c:6f:8c:5c:58:64:c6:f3:64:55:b6:33:2b:3d:9c:
         dc:25:5f:1a:d4:cd:69:77:eb:03:7f:95:0d:74:35:4d:1d:3b:
         3e:0d:fe:ef:1e:ff:84:4f:90:7b:50:fb:9e:7e:79:c4:af:ad:
         72:d0:90:3d:31:bb:88:cb:16:35:ae:48:54:7c:aa:0b:16:26:
         5a:b6:6c:b0:6f:69:dc:66:b7:08:5e:d0:d1:91:33:d5:65:31:
         5f:1c:2b:52:73:37:a5:71:da:50:60:5f:bb:4d:bc:46:76:3f:
         91:95:f2:3b:8f:a6:7d:ee:be:00:4f:85:5c:66:a2:f3:b7:f3:
         4d:62:a8:78:3b:27:e5:c0:e9:fe:ee:74:ef:ad:8e:1c:c7:e2:
         e8:0b:56:2b:df:cf:25:64:71:28:25:d4:99:40:5c:77:f0:3c:
         22:7f:f5:b7:90:c2:d3:0b:95:40:33:96:01:94:a9:d8:3a:49:
         e3:28:2b:01:6e:ac:bb:c7:f2:f0:84:cb:83:b4:d1:97:b7:64:
         eb:e2:e8:58:8d:6c:5e:7f:0a:35:34:f7:ab:42:e7:bb:b4:19:
         02:a2:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org