Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa
File:                     3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa (raw, json)
Hash identifier:          rvgNQ5ONNhdLtU7SWS40g0SKsEdW5wM6fVoV2ObBBs0=
Subject key identifier:   34:12:25:58:39:5B:4C:17:F1:E3:9F:1E:DA:90:11:C0:A4:A3:FE:12
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       5DD2AB44A70573AA73F9A05FBE4E6068517AEEEB
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa
Signing time:             Tue 04 Feb 2025 18:46:26 +0000
ROA not before:           Tue 04 Feb 2025 18:41:26 +0000
ROA not after:            Tue 03 Feb 2026 18:46:26 +0000
asID:                     263182
IP address blocks:        181.225.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:ab:44:a7:05:73:aa:73:f9:a0:5f:be:4e:60:68:51:7a:ee:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Feb  4 18:41:26 2025 GMT
            Not After : Feb  3 18:46:26 2026 GMT
        Subject: CN=34122558395B4C17F1E39F1EDA9011C0A4A3FE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:77:e8:f2:92:81:c1:45:bc:d7:3a:3a:3b:
                    fc:a3:b8:5e:23:7f:0a:06:02:69:b1:aa:ac:29:7c:
                    a0:58:0a:ae:21:0f:59:78:37:88:24:a8:36:5f:1d:
                    22:d6:d9:4a:78:c2:d3:6f:47:a2:33:a0:b2:9a:78:
                    6c:b2:d4:fd:26:77:50:4e:f2:8d:d2:8b:cb:da:46:
                    54:94:66:fd:1c:3f:62:15:f4:a1:4d:4c:f3:07:b3:
                    91:0b:b2:3d:46:47:e4:c6:41:5c:72:51:31:fb:da:
                    97:85:d0:f0:d0:80:77:53:18:7f:1f:71:f6:63:d3:
                    27:31:91:41:72:b0:4d:88:9e:8a:17:02:9d:19:91:
                    8f:14:00:8a:62:35:6d:5b:58:ca:46:c9:15:de:7a:
                    da:a4:49:9d:80:38:c3:7e:3f:a6:c3:ae:c8:e2:e6:
                    fd:3b:2b:8c:e0:21:cb:be:10:b6:e8:2b:ec:8b:54:
                    33:9b:ac:6a:e6:73:b6:db:e0:d2:68:7a:48:b3:5d:
                    83:2a:df:0c:88:09:3d:7b:6d:3f:39:64:71:8a:a3:
                    24:3b:5b:92:72:76:e7:f4:3b:49:ad:0d:d6:3a:88:
                    54:fb:36:6e:ce:5a:06:d0:f1:8b:32:82:5d:ee:29:
                    16:e8:e5:ff:90:2c:12:17:68:9f:a8:48:82:e3:80:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:25:58:39:5B:4C:17:F1:E3:9F:1E:DA:90:11:C0:A4:A3:FE:12
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:ec:8d:b3:e5:f9:b2:64:f1:d7:de:1e:59:d8:73:f8:e0:
         73:8d:57:38:11:7d:e6:89:a9:bc:70:32:55:d6:55:da:ee:62:
         e5:f8:14:c4:12:a6:b5:32:4f:cd:25:de:94:59:95:49:8a:40:
         8b:a9:78:40:91:b7:a8:bd:b0:4c:38:b3:6b:ce:3d:4e:b4:d7:
         7b:26:d0:a7:8f:5d:4d:a7:8f:e6:c6:29:01:1c:c8:be:8b:20:
         fb:a2:5d:ed:4e:12:f4:a9:d9:07:02:96:c6:a1:b5:d0:58:94:
         da:e4:c8:16:e6:2e:ae:0c:f2:41:d0:25:ec:f0:32:dd:1c:fe:
         3e:65:8d:64:ec:f0:96:0e:81:01:ea:13:e6:98:ee:27:ba:b0:
         61:ba:cf:bb:e9:71:ab:f4:4f:5c:47:41:ae:21:4f:d0:73:00:
         c5:77:9c:26:63:f0:62:46:2c:d2:1f:eb:22:4a:61:c4:38:07:
         10:de:6c:38:20:83:f1:fb:12:5e:2a:f4:62:ca:2f:83:46:dc:
         01:68:d4:88:1e:23:c4:94:d1:e5:7a:71:b1:be:fb:cc:9b:cf:
         15:13:39:d8:2b:20:d6:7b:a8:10:ea:1a:66:f9:0e:87:a6:3c:
         62:31:1d:0b:48:02:e5:36:ff:52:68:c7:1e:d1:90:95:6d:19:
         b9:63:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:37 2025 by rpki-client