Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa
File:                     3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa (raw, json)
Hash identifier:          FnGRhMtUJTTelWSEDvIqdzAlaGrFnhke6957SVwtVUo=
Subject key identifier:   D7:BA:E7:C7:46:02:72:FF:E4:D9:74:88:3A:45:C1:EB:C4:19:17:CA
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       34CD505082BB13198B2213F1483D66F5F3573F62
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa
Signing time:             Fri 05 Sep 2025 17:20:00 +0000
ROA not before:           Fri 05 Sep 2025 17:15:00 +0000
ROA not after:            Fri 04 Sep 2026 17:20:00 +0000
asID:                     267701
IP address blocks:        181.225.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 01:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cd:50:50:82:bb:13:19:8b:22:13:f1:48:3d:66:f5:f3:57:3f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Sep  5 17:15:00 2025 GMT
            Not After : Sep  4 17:20:00 2026 GMT
        Subject: CN=D7BAE7C7460272FFE4D974883A45C1EBC41917CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:42:29:42:a2:2e:70:9c:c8:dc:7b:91:45:
                    f4:7d:4b:7d:38:47:77:8e:5b:b9:e2:cf:2d:82:f6:
                    f4:a9:96:4a:0f:86:25:10:05:f4:8c:b2:2d:78:ce:
                    73:d0:61:25:69:36:be:84:15:1a:38:2b:d1:21:db:
                    da:95:7b:54:9b:d6:0a:51:5f:ed:66:65:96:a6:d1:
                    1c:87:ff:9f:bd:56:b3:98:71:23:47:2a:49:83:5f:
                    59:98:65:31:ac:57:30:4f:f4:2a:b0:96:8a:ab:60:
                    ed:17:9c:2a:74:90:da:05:73:87:55:28:fb:68:f4:
                    61:09:59:39:b4:7c:b2:8f:79:e5:15:42:46:9d:f8:
                    a5:6b:bb:64:6f:d3:89:17:b4:65:0f:db:9f:92:b4:
                    79:dc:d4:44:f7:4e:1f:45:eb:ef:08:21:da:7f:18:
                    31:23:2f:10:d2:e2:69:f8:fe:53:e3:2d:ed:35:d1:
                    40:fe:3c:53:bf:92:79:a3:b3:be:da:a0:05:2a:24:
                    31:df:51:fd:1c:56:85:7a:a0:85:8b:64:10:3e:37:
                    f8:89:f6:f9:e0:64:3c:a9:d8:d8:11:8d:aa:ac:f4:
                    2d:db:88:d0:9b:e3:f6:97:1d:e6:de:35:ae:c0:12:
                    ee:eb:9a:ad:5f:c5:3b:44:5a:f6:51:de:0c:9d:92:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:E7:C7:46:02:72:FF:E4:D9:74:88:3A:45:C1:EB:C4:19:17:CA
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:a7:ff:b5:34:b1:24:aa:6a:28:4a:41:5b:be:4e:7b:42:
         49:e2:63:40:8b:a3:56:51:64:b3:0b:52:fd:d1:da:c3:0e:1a:
         83:8e:6e:a7:b2:5b:f3:ba:54:47:80:27:04:7c:d3:3d:4a:fe:
         64:d4:b1:f3:7f:d6:eb:1e:e0:f1:63:6e:77:06:16:8a:3c:44:
         6b:d9:97:e5:fe:8f:3c:37:d9:3f:87:e7:d1:29:70:39:7c:e8:
         80:63:7c:de:f2:ef:1e:de:f8:cc:88:a0:8d:90:0e:c9:4d:86:
         d5:83:08:5d:8d:76:21:84:5d:f4:04:9d:a3:b6:52:dd:bf:78:
         2a:0c:6b:de:85:79:d3:3f:12:47:65:7d:f0:5a:2a:e5:e9:60:
         fd:5d:07:2d:1c:51:e8:ce:94:bc:5d:d6:1d:e4:50:f6:ee:e9:
         e3:8b:62:06:7d:f1:fc:eb:bf:a6:6c:5e:97:df:95:53:ff:35:
         1e:9e:62:a0:08:6d:2f:de:ac:28:43:5c:ef:4f:c8:60:ea:7d:
         e6:58:07:c4:fa:40:b5:d3:25:75:51:89:e4:55:91:b2:60:54:
         57:ab:31:79:c1:87:cb:4a:44:5c:46:98:b0:16:69:b9:d6:13:
         32:d8:99:0f:97:81:a3:17:2b:d5:cc:26:76:bc:7d:f4:b1:5d:
         cf:91:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:41:51 2025 by rpki-client