Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e33322e302f31392d3234203d3e2038303533.roa
File:                     3138312e3232352e33322e302f31392d3234203d3e2038303533.roa (raw, json)
Hash identifier:          pMZUsXdyWPdOPzdefsRD6WfFOCqgC6EoQ/mu1vfxILg=
Subject key identifier:   DB:D6:D3:A7:AF:39:42:CC:16:AA:2C:2A:90:C5:30:D5:DC:AD:51:F1
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       44F5F6D954C0C1C30D669D7A7DD44042D47E5068
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e33322e302f31392d3234203d3e2038303533.roa
Signing time:             Tue 04 Feb 2025 18:46:25 +0000
ROA not before:           Tue 04 Feb 2025 18:41:25 +0000
ROA not after:            Tue 03 Feb 2026 18:46:25 +0000
asID:                     8053
IP address blocks:        181.225.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:f6:d9:54:c0:c1:c3:0d:66:9d:7a:7d:d4:40:42:d4:7e:50:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Feb  4 18:41:25 2025 GMT
            Not After : Feb  3 18:46:25 2026 GMT
        Subject: CN=DBD6D3A7AF3942CC16AA2C2A90C530D5DCAD51F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:0b:0e:3d:6b:5d:d3:dd:bb:2a:9b:9a:19:
                    99:85:d5:3c:a5:be:e7:5e:a7:cb:0f:4d:fb:f6:16:
                    1c:b3:80:b0:a9:80:2b:d6:f9:df:2e:14:78:57:50:
                    57:54:00:8c:53:d3:e6:78:5f:11:90:c5:03:8b:fb:
                    c0:4c:29:16:60:23:de:8c:b8:1d:79:95:eb:eb:57:
                    60:db:12:0d:97:0e:ea:a5:5b:cf:22:89:ff:fa:49:
                    86:e8:94:07:45:1e:f9:86:3c:47:a7:9d:ff:6c:0a:
                    10:4a:65:df:7c:45:c9:62:1a:97:be:ec:a6:c4:7d:
                    4b:13:b0:bd:09:e1:ef:76:99:9b:00:45:82:98:b9:
                    fb:07:a4:9b:a8:5a:96:4d:5b:dc:6d:14:b4:bb:cb:
                    23:62:26:a7:7f:7f:ca:5c:29:5d:a4:bf:cc:0f:e8:
                    87:38:b6:5e:c9:c7:6f:ba:2e:18:bb:54:7f:df:23:
                    1d:3d:aa:db:91:96:37:1b:3c:a5:72:07:d7:a2:53:
                    ff:52:1e:6b:b7:74:2a:3a:5b:e4:b2:0e:e8:45:21:
                    71:83:9c:f0:75:88:9d:37:d6:21:95:f1:c1:24:64:
                    4e:cd:c9:27:3f:4b:00:d9:a8:e0:4b:37:d0:8b:43:
                    3a:30:05:52:31:3b:e3:a8:01:9a:54:8e:3d:1c:a4:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D6:D3:A7:AF:39:42:CC:16:AA:2C:2A:90:C5:30:D5:DC:AD:51:F1
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e33322e302f31392d3234203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:1d:f7:47:fe:14:02:da:e1:89:03:a7:4e:72:d5:7f:91:
         fa:fb:fc:92:35:57:14:33:c1:b3:fc:ac:a0:f4:27:14:4c:1b:
         03:fe:33:35:8a:ed:76:00:1e:a4:b9:9e:20:1c:55:d5:06:2e:
         8b:f9:f3:d0:f8:7b:1b:1f:5a:b4:72:05:fd:f2:c3:94:7b:cf:
         29:52:2b:bc:da:20:1c:2f:9b:92:b2:fe:4f:f3:f7:5c:5b:33:
         95:05:ba:d3:ac:71:3c:1b:74:e3:10:c3:7a:80:5c:ab:52:26:
         89:66:80:ce:74:e9:f6:00:8b:8e:da:87:e2:1c:43:ca:a3:a6:
         f7:3b:46:44:16:42:f0:ed:1b:51:f2:90:75:6a:0d:3c:8b:df:
         e5:f3:99:cf:4d:27:07:61:4d:3d:90:29:65:fe:5e:d1:a7:5d:
         fb:fd:a8:96:1f:7c:ee:fd:ac:b2:f3:a6:ef:7f:e0:e3:5f:e1:
         10:62:e5:9b:6b:b7:6f:2d:34:3e:f3:ec:20:71:e1:55:9f:23:
         c5:d4:6a:0f:51:3e:0e:e9:ef:9c:5b:28:13:ea:39:59:8c:80:
         90:1b:82:24:b7:92:c4:29:f4:68:85:b0:1e:29:df:69:37:c3:
         25:6a:8a:0a:6d:85:fc:a8:ee:13:73:ee:9e:ed:5b:ea:1d:05:
         7f:84:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:53 2025 by rpki-client