Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3138312e3139392e3134342e302f32302d3234203d3e203237383133.roa
File:                     3138312e3139392e3134342e302f32302d3234203d3e203237383133.roa (raw, json)
Hash identifier:          CsA8MB3jlSJs/Cn7zDHSN9deoDZLBqtNwRyeS1l2oaY=
Subject key identifier:   48:FC:F0:69:AE:4C:9E:50:1A:55:70:A3:57:D9:48:6C:B8:1E:05:EB
Certificate issuer:       /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial:       699F7D56563D12E677058BD2D43F593CAF951104
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3138312e3139392e3134342e302f32302d3234203d3e203237383133.roa
Signing time:             Tue 04 Feb 2025 20:04:22 +0000
ROA not before:           Tue 04 Feb 2025 19:59:22 +0000
ROA not after:            Tue 03 Feb 2026 20:04:22 +0000
asID:                     27813
IP address blocks:        181.199.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9f:7d:56:56:3d:12:e6:77:05:8b:d2:d4:3f:59:3c:af:95:11:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
        Validity
            Not Before: Feb  4 19:59:22 2025 GMT
            Not After : Feb  3 20:04:22 2026 GMT
        Subject: CN=48FCF069AE4C9E501A5570A357D9486CB81E05EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:77:76:80:a5:eb:f1:a1:cd:35:0e:17:f9:
                    aa:c8:e9:1e:a0:5c:f9:c6:01:2c:a5:b2:f9:b2:ee:
                    e1:cc:95:3c:72:f2:14:50:65:3c:f0:99:bd:a6:8b:
                    8f:e3:e0:54:d9:08:98:78:67:df:f8:d2:be:11:c7:
                    24:92:df:58:77:3e:92:50:99:12:c2:bf:41:0f:38:
                    d7:c1:a2:53:44:60:86:92:11:80:e7:b1:12:ab:9e:
                    9e:45:fb:3a:d6:3b:a7:42:ff:38:73:95:89:2c:91:
                    db:16:a0:6b:15:3a:1d:d8:0b:44:1c:3b:5e:9f:a8:
                    cc:b2:9a:ff:57:d5:05:9a:86:4c:5a:83:b5:8b:2e:
                    5d:ca:74:e2:f1:9d:75:6a:7e:c9:90:e6:f7:af:fe:
                    a7:5c:56:0b:d8:a3:9a:fe:f7:bc:17:5b:a5:0d:03:
                    fc:03:23:41:6c:22:2f:d6:d8:2b:da:ce:bf:c1:30:
                    35:f2:7b:ae:4e:8c:02:4f:46:1d:85:a8:34:f7:c0:
                    0c:56:96:59:02:3d:a2:fb:e1:3d:6f:7f:12:e1:18:
                    a2:ef:ee:42:22:c7:ce:81:5d:19:b1:70:fa:48:39:
                    e2:84:6a:25:16:cb:12:ca:e3:8c:c7:39:12:c0:d1:
                    da:ab:a6:34:46:a6:c0:7e:e3:a8:84:16:b9:b2:f2:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FC:F0:69:AE:4C:9E:50:1A:55:70:A3:57:D9:48:6C:B8:1E:05:EB
            X509v3 Authority Key Identifier:
                keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3138312e3139392e3134342e302f32302d3234203d3e203237383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:10:38:c1:97:5f:e0:ea:3c:0d:b6:1d:0f:d5:92:3f:80:
         ae:80:51:dc:65:5f:7f:f8:cc:73:2a:df:e1:48:06:a7:b9:17:
         79:28:c2:73:f3:04:72:24:03:81:35:f0:f9:7b:04:2c:f6:98:
         e7:c1:81:cf:01:a1:6c:9d:de:49:3b:b4:86:af:4d:53:09:6a:
         4c:d4:0a:17:28:ce:8f:f1:51:3b:d2:f2:60:e2:68:a6:f3:ac:
         4b:38:ba:ed:c2:25:e8:c5:5f:f6:b2:56:e0:d1:5c:82:66:21:
         a2:9a:4f:4b:f1:62:92:61:4c:5d:54:b6:15:96:26:88:63:d0:
         2d:61:d5:25:ea:dc:4b:a4:ad:49:ce:14:36:4f:3d:59:7d:47:
         f0:83:a9:bf:7e:cd:fd:e4:91:f2:e9:62:f2:a9:ae:b1:ff:fb:
         e3:72:8f:c5:95:82:2e:88:68:92:1c:c2:96:8b:90:90:ad:dd:
         fe:e1:7d:d2:7d:0a:c1:e9:fc:e4:1e:4a:93:9f:92:9a:75:97:
         2d:74:62:45:6b:4d:50:03:23:33:c8:cc:1c:f9:c6:7a:68:61:
         ab:98:2c:5d:0f:a1:80:0d:d1:d5:19:8c:e5:57:0e:27:10:fa:
         0e:e3:4a:da:41:f8:11:51:78:77:eb:69:fa:db:5c:d8:11:77:
         ce:2e:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:45:29 2025 by rpki-client