Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e203532343638.roa
File:                     3138312e3137342e3136302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          epkKetI5dXzxUuAbkghuVJTBk5uJni8ZA8eYqrsmOzM=
Subject key identifier:   71:31:C5:D3:C3:1A:5D:2C:42:0C:02:96:94:81:2F:0C:67:8C:D3:13
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       2451B3E2B7E9CBD96209878472EFEE275A7D0F85
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 03 Apr 2025 16:55:04 +0000
ROA not before:           Thu 03 Apr 2025 16:50:04 +0000
ROA not after:            Thu 02 Apr 2026 16:55:04 +0000
asID:                     52468
IP address blocks:        181.174.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:51:b3:e2:b7:e9:cb:d9:62:09:87:84:72:ef:ee:27:5a:7d:0f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Apr  3 16:50:04 2025 GMT
            Not After : Apr  2 16:55:04 2026 GMT
        Subject: CN=7131C5D3C31A5D2C420C029694812F0C678CD313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:6e:a7:38:31:99:88:fc:4c:5d:dc:bb:ea:
                    a6:54:f1:5f:71:84:2f:be:d9:f8:46:b9:24:ec:8f:
                    99:19:ac:94:49:1e:ef:bb:3d:16:19:fa:46:9e:4e:
                    64:82:ba:ed:0b:82:dd:7a:08:55:7b:f0:51:4d:db:
                    1c:d8:21:c6:c5:e6:8c:27:bc:ce:04:42:f2:a6:ac:
                    30:c4:6b:13:18:05:b4:5a:8d:92:f6:23:02:17:18:
                    18:01:f7:41:0d:e8:0c:2c:24:b1:1c:0d:8b:66:29:
                    5c:af:89:6d:d8:37:fe:7d:38:74:92:c2:70:5c:dd:
                    63:ab:93:3f:df:81:9e:21:bc:ee:fb:88:22:f8:3b:
                    86:87:11:28:45:68:a6:3c:25:f3:48:11:12:ec:2a:
                    a9:e3:9a:57:b5:1c:84:6b:cd:34:8a:0b:12:7d:5a:
                    15:25:dc:58:5b:4b:dd:0a:ed:76:c2:b8:b2:53:ba:
                    7f:f2:04:d6:18:6f:b7:af:97:51:46:b5:e9:22:07:
                    2f:91:c7:e4:ee:e5:15:72:39:aa:af:f8:3b:08:a3:
                    b0:f5:a1:33:cf:4e:62:e9:b7:88:c8:3f:53:f7:9c:
                    d3:9f:f0:e6:f8:68:27:f2:1c:0b:85:d6:4c:5a:7c:
                    f9:57:53:36:b2:bc:22:fc:99:7c:f1:c9:94:44:b0:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:C5:D3:C3:1A:5D:2C:42:0C:02:96:94:81:2F:0C:67:8C:D3:13
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:11:50:81:f6:46:89:f6:19:83:2a:44:86:be:d3:dd:c0:
         bc:05:a3:00:6c:94:49:a2:ec:2c:44:38:28:e9:51:77:25:a2:
         7f:74:3c:11:63:b6:d4:8a:eb:3a:fe:91:4d:54:3a:fb:8b:f8:
         36:3c:1e:79:83:45:36:a7:52:e9:9e:5a:e6:91:99:b1:1a:da:
         7f:d1:6e:cc:1b:bb:87:fc:b4:2e:e6:62:56:c5:32:94:bd:b4:
         77:21:ce:2e:3c:7b:a5:8b:1c:d9:2f:b5:53:9a:83:68:cd:4b:
         b1:04:57:5a:13:c4:6d:da:75:67:61:d7:54:d6:16:8c:a0:9d:
         b0:83:50:4d:66:34:7c:b6:f1:51:29:66:26:f4:eb:68:42:b4:
         78:c9:71:9c:1c:00:ec:89:28:51:3c:f3:3b:3d:26:67:c7:de:
         6e:15:f7:5b:80:74:6c:bf:57:f9:fd:8f:fa:e4:98:01:a6:80:
         6b:37:75:32:d2:b3:98:60:d9:96:b1:d5:4d:af:62:5a:9e:51:
         cd:39:f1:2a:0a:68:ac:7f:b9:28:ba:8b:3f:51:be:75:52:f2:
         5c:10:ce:22:54:f7:7d:09:76:de:a5:9f:e8:00:44:d4:15:62:
         cb:19:48:a9:ee:2e:67:c0:69:ff:80:56:4a:ef:a1:0f:78:6c:
         1b:a1:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:39 2025 by rpki-client