Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e38302e302f32302d3234203d3e20323733383534.roa
File:                     3138312e3130332e38302e302f32302d3234203d3e20323733383534.roa (raw, json)
Hash identifier:          IUpimjvqH2dYMAL1eIXFjM8TTaKYutlKAv30VA0PWmg=
Subject key identifier:   B7:52:AF:85:BB:89:03:C8:1C:71:A2:7C:60:0B:38:82:5E:FA:3F:0D
Certificate issuer:       /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial:       522CA66679CF2D3A5AC9960D77C09C4DFCC9A4BD
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e38302e302f32302d3234203d3e20323733383534.roa
Signing time:             Thu 18 Sep 2025 19:50:00 +0000
ROA not before:           Thu 18 Sep 2025 19:45:00 +0000
ROA not after:            Thu 17 Sep 2026 19:50:00 +0000
asID:                     273854
IP address blocks:        181.103.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2c:a6:66:79:cf:2d:3a:5a:c9:96:0d:77:c0:9c:4d:fc:c9:a4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
        Validity
            Not Before: Sep 18 19:45:00 2025 GMT
            Not After : Sep 17 19:50:00 2026 GMT
        Subject: CN=B752AF85BB8903C81C71A27C600B38825EFA3F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:73:a9:3b:93:25:c9:2d:51:db:42:fd:8e:
                    8e:ff:a4:92:2f:98:1b:a5:12:5b:c9:d8:95:ef:6e:
                    d8:04:65:71:4a:70:e4:53:60:f1:6b:74:23:bf:1e:
                    74:25:8d:9a:5c:5b:e2:19:8c:fe:f1:45:0a:9c:41:
                    97:ef:c9:2b:54:75:da:62:4d:ef:b8:0c:5a:fc:2f:
                    b0:12:92:d6:43:01:be:ac:fb:d5:6d:1e:29:bf:fc:
                    88:e8:a9:be:57:2b:cd:4d:b3:24:3e:85:a5:11:26:
                    0a:56:ee:fc:78:b1:ae:b8:2a:48:59:b1:75:ab:3f:
                    fd:a4:37:e4:3e:83:e3:c1:d4:50:95:ba:b8:4a:a4:
                    ad:22:e1:9d:25:b9:96:67:21:78:03:48:65:15:94:
                    db:51:b1:35:b7:14:2f:99:54:ea:5b:9e:31:07:0f:
                    41:91:a4:20:56:d6:e9:61:77:aa:5d:ed:9d:e3:7c:
                    63:6f:5e:af:64:5a:78:94:75:d4:c0:44:06:1b:b9:
                    d6:89:03:57:c6:b4:de:76:b1:1c:24:f2:52:52:81:
                    b1:4d:4a:2c:3c:58:37:92:3f:a5:90:79:69:ec:d6:
                    e7:e1:2d:6f:9a:26:6a:4b:29:22:ca:e8:a2:b7:a8:
                    5e:60:b4:1c:a2:44:bd:89:3b:71:84:a6:a3:33:43:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:AF:85:BB:89:03:C8:1C:71:A2:7C:60:0B:38:82:5E:FA:3F:0D
            X509v3 Authority Key Identifier:
                keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e38302e302f32302d3234203d3e20323733383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.103.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:5a:c1:5b:9b:13:bc:5a:f8:6e:14:52:66:c6:b2:f3:d3:
         04:d3:b7:bf:c5:0c:b7:e1:34:97:24:5c:22:a6:59:4c:3e:c8:
         80:fa:94:84:bd:94:3b:43:6d:c5:89:33:06:9d:cb:c0:59:88:
         f6:57:79:5c:ba:92:a1:a0:33:9e:d3:3c:51:f2:06:ae:7b:57:
         27:00:72:7e:77:5a:59:5a:66:c8:f5:f8:e6:b1:fe:43:fa:54:
         83:99:58:4f:14:a8:ef:35:37:8a:94:5e:92:f1:fa:4d:85:57:
         2e:1d:71:34:5d:19:58:77:72:9b:0c:61:b6:61:e6:31:39:e8:
         dd:aa:63:28:b4:be:9c:d4:fb:f2:b2:44:82:f3:c3:02:94:cc:
         af:34:35:7e:75:cd:11:ac:e7:88:ef:17:79:2a:d2:fc:e8:34:
         c0:da:46:fe:fe:7c:56:45:d4:f5:59:c3:7d:47:1d:68:c8:d6:
         b9:09:fc:da:c6:13:38:8e:81:99:3a:17:13:42:8e:01:34:f1:
         7f:65:0e:b6:6e:4a:90:1d:05:15:00:b5:98:d2:fc:63:34:b2:
         94:ec:dc:37:df:9c:8c:bf:40:ea:fa:1f:c9:5b:df:93:c9:44:
         df:44:4a:ac:65:f6:93:73:2a:4b:79:d7:8c:cf:df:f4:a5:32:
         a8:a1:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:14:23 2025 by rpki-client