Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa
File:                     3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa (raw, json)
Hash identifier:          ZKAZfE2UC5RN+sWhw8tCo8JL1oR+oNwf7odFACk6Zf4=
Subject key identifier:   A1:4E:AA:E7:7A:AC:DE:71:2B:EB:F7:1E:50:DF:02:D7:A8:FC:17:FB
Certificate issuer:       /CN=366C86A35982162DA62035B192A9F9C2AC96FF52
Certificate serial:       0E5074E6AC4197BFF5049DB0AB53E7C59BD0441C
Authority key identifier: 36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa
Signing time:             Tue 04 Feb 2025 18:19:12 +0000
ROA not before:           Tue 04 Feb 2025 18:14:12 +0000
ROA not after:            Tue 03 Feb 2026 18:19:12 +0000
asID:                     52433
IP address blocks:        181.177.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:50:74:e6:ac:41:97:bf:f5:04:9d:b0:ab:53:e7:c5:9b:d0:44:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366C86A35982162DA62035B192A9F9C2AC96FF52
        Validity
            Not Before: Feb  4 18:14:12 2025 GMT
            Not After : Feb  3 18:19:12 2026 GMT
        Subject: CN=A14EAAE77AACDE712BEBF71E50DF02D7A8FC17FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:56:5e:2a:4d:96:2c:6d:34:80:55:42:4a:
                    66:d5:8f:ba:41:33:15:7d:1c:b4:e7:10:2d:ad:55:
                    a1:87:54:98:12:72:79:a2:53:82:8c:9b:39:5f:3f:
                    4f:12:e4:55:5c:48:aa:07:9c:cd:3e:11:66:94:fc:
                    df:53:d7:4e:83:02:6f:a8:db:30:cf:6f:d0:fd:e0:
                    8a:08:61:94:ed:05:ac:86:8a:ee:1f:7c:3d:1d:cd:
                    9d:9c:ea:85:1f:f7:df:c8:b3:bc:5f:a1:a2:84:aa:
                    82:28:e2:ad:d6:22:00:18:10:f3:ef:4c:17:66:45:
                    a5:01:c1:64:cd:66:36:01:ca:e5:0e:c0:91:e9:bf:
                    a1:00:b0:08:97:f6:97:46:fc:a0:9d:87:53:bb:68:
                    a5:1f:7a:6c:22:ed:af:47:f7:bc:59:cb:d7:cf:05:
                    b4:33:41:cd:b1:67:49:43:97:b2:b4:ab:77:e7:54:
                    1a:b9:0e:f6:a0:46:82:59:bb:53:ba:92:fe:05:1f:
                    44:7d:a3:64:1e:94:ce:06:31:61:84:38:82:73:20:
                    48:1c:6f:20:2a:e8:83:41:0f:25:d1:b4:13:f7:45:
                    ab:70:10:e8:5e:20:7c:ba:fb:63:01:1c:5a:c6:ad:
                    10:fe:2e:64:db:fa:05:1b:54:9c:f8:7e:f1:fa:92:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:AA:E7:7A:AC:DE:71:2B:EB:F7:1E:50:DF:02:D7:A8:FC:17:FB
            X509v3 Authority Key Identifier:
                keyid:36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:68:f8:b9:ef:6f:c3:9a:4c:07:10:63:e3:d8:74:08:df:
         72:25:33:d3:d0:53:5d:a6:dd:1e:5f:05:29:91:64:01:af:fb:
         75:68:1f:c6:6e:bc:56:b6:6a:35:3a:92:3c:df:42:a0:85:43:
         01:b5:23:2a:40:79:b1:0c:0b:26:3f:3c:77:98:9b:fe:60:54:
         02:04:de:02:e5:53:33:ed:e6:e0:ff:48:b0:87:04:75:63:36:
         7a:7f:dd:aa:ae:fc:c2:f9:ba:b3:a2:b9:0b:43:a8:db:3c:f8:
         10:4d:f2:cf:53:c9:07:d5:2f:4e:c6:7b:1c:dd:2e:96:9a:a7:
         42:92:4d:cf:91:48:5e:e8:1e:a6:24:27:a0:f3:ef:b9:cf:8f:
         29:bf:14:54:ef:18:c0:c6:4e:7a:30:c8:5d:38:97:5e:53:57:
         77:1a:28:bd:ee:03:9e:30:e1:ec:e3:31:8f:7f:2a:35:3f:80:
         cc:a7:33:44:df:c0:b7:95:96:7d:d2:f1:54:87:8b:d3:a2:82:
         9c:c3:54:8d:2e:c6:93:29:b4:a5:f9:1e:c4:04:28:05:91:23:
         c1:0b:d3:36:75:ac:8d:98:bb:96:e4:6e:e7:a7:a1:7b:97:d3:
         3f:8b:a1:f0:13:5f:c1:d1:48:bb:dd:12:13:51:3b:49:ac:3a:
         c3:4c:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:54 2025 by rpki-client