Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa
File:                     3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa (raw, json)
Hash identifier:          /TF2OWTZ4h/5tC2yKBWv+Arq+A7KWQeTdPbPYn5GHhw=
Subject key identifier:   C7:24:B8:3B:34:7C:3C:D3:53:C1:03:96:CE:DA:0C:C0:76:EC:20:84
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       3F96397BD5DFCF70718C34A819D4B2B9552C54C9
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa
Signing time:             Tue 05 Mar 2024 18:22:44 +0000
ROA not before:           Tue 05 Mar 2024 18:17:44 +0000
ROA not after:            Tue 04 Mar 2025 18:22:44 +0000
asID:                     263182
IP address blocks:        181.225.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:96:39:7b:d5:df:cf:70:71:8c:34:a8:19:d4:b2:b9:55:2c:54:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Mar  5 18:17:44 2024 GMT
            Not After : Mar  4 18:22:44 2025 GMT
        Subject: CN=C724B83B347C3CD353C10396CEDA0CC076EC2084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:2e:79:d3:94:c7:c0:51:e5:7f:16:4e:dd:
                    6a:a0:67:ed:bf:92:b7:4a:2c:cc:8e:a8:bc:24:01:
                    ab:63:16:23:ca:b9:c9:4f:a9:df:9c:1c:40:be:f2:
                    9f:7a:f9:61:39:0a:01:6c:a1:64:17:b0:86:b9:62:
                    1f:5e:89:1d:0c:48:f9:f9:8a:35:19:9f:e4:20:20:
                    e7:7c:c2:ba:48:ff:6f:09:41:37:29:a2:96:5a:16:
                    00:b9:0f:a9:2d:15:fc:20:d4:17:00:6b:72:f4:c1:
                    11:32:3c:41:c9:4a:73:eb:6c:fa:f0:2d:35:9b:3e:
                    16:18:2f:4f:82:15:91:bf:e6:46:e0:2b:dd:c2:8a:
                    9e:a5:9f:8b:7c:4a:94:07:78:91:a7:4c:79:13:1b:
                    51:a5:e2:23:a7:1b:d5:8f:ec:bf:77:c9:9d:bf:e7:
                    6a:b2:2c:df:02:09:47:10:e0:40:24:44:36:3e:7c:
                    2b:f0:95:5f:0f:86:bc:3c:53:27:38:f5:79:2a:9e:
                    28:5f:9a:9f:41:90:ea:66:60:db:9b:0c:b0:af:a6:
                    09:b9:20:13:24:0e:43:1a:fc:94:d6:24:13:f2:96:
                    c4:28:a4:07:42:cc:19:0c:18:3e:75:d7:b9:e8:6b:
                    ff:7f:dc:b7:ef:18:31:e2:69:99:9d:12:5c:a6:c2:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:24:B8:3B:34:7C:3C:D3:53:C1:03:96:CE:DA:0C:C0:76:EC:20:84
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:8f:ca:62:87:b1:6e:89:d5:62:9f:53:c6:d1:f9:f7:24:
         16:7a:c0:2a:e6:2d:20:75:b7:b6:55:78:32:ec:7d:4a:fe:87:
         cb:77:d9:f9:2e:fe:30:21:4d:22:33:60:d6:aa:83:00:e8:a6:
         b4:e2:b5:f7:05:1c:ea:33:43:98:54:d2:cc:61:c3:90:3a:49:
         96:4c:f1:6f:7e:2d:dc:2a:d5:6d:54:16:dc:ca:91:74:3a:e9:
         4d:16:8d:d9:b6:a2:5e:4f:40:42:7b:5e:33:41:b7:2d:a0:29:
         c7:ac:4f:99:8b:ef:7a:01:64:75:94:4c:eb:33:ee:0b:07:fb:
         74:0d:31:7f:2e:9c:ae:99:9b:62:54:1c:52:ec:fd:df:35:eb:
         e2:8d:16:cb:8b:e4:28:0f:6d:08:28:46:4b:9c:a3:aa:04:c4:
         eb:ad:ee:33:07:5e:69:50:c5:78:78:b1:56:fc:7e:aa:61:ba:
         2d:0f:ec:3f:56:f7:d2:6c:2f:e0:df:5e:36:19:e4:94:4d:d3:
         56:fd:75:9b:7b:55:35:49:5e:45:4f:ad:e8:e3:c5:c5:d6:8b:
         24:3a:49:4b:bd:16:ae:21:36:f1:03:37:f3:a2:5f:80:cc:87:
         cb:16:b1:d4:49:28:89:0e:8c:13:a9:b8:bb:63:03:1e:f5:cb:
         23:65:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:24 2024 by rpki-client on console-ams.rpki-client.org