Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3233302e302f32332d3233203d3e20323635363838.roa
File:                     3138312e3137342e3233302e302f32332d3233203d3e20323635363838.roa (raw, json)
Hash identifier:          opXWd1CpyO3SnSukbLPVVFi5cUN6GQ47ADoDi3Twu2c=
Subject key identifier:   67:C1:77:00:5D:27:B4:31:44:47:F7:BA:5C:3D:8E:18:6C:74:3C:34
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       11A0A74772B11BFDFAFEEAE69939CD3F0287F888
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3233302e302f32332d3233203d3e20323635363838.roa
Signing time:             Fri 07 Mar 2025 16:11:27 +0000
ROA not before:           Fri 07 Mar 2025 16:06:27 +0000
ROA not after:            Fri 06 Mar 2026 16:11:27 +0000
asID:                     265688
IP address blocks:        181.174.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:a7:47:72:b1:1b:fd:fa:fe:ea:e6:99:39:cd:3f:02:87:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Mar  7 16:06:27 2025 GMT
            Not After : Mar  6 16:11:27 2026 GMT
        Subject: CN=67C177005D27B4314447F7BA5C3D8E186C743C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:55:05:a5:10:bf:ba:03:aa:72:1b:a6:e8:
                    3c:f9:26:8f:78:c2:d9:8e:67:04:c5:96:8e:4c:4b:
                    a2:ea:bc:1b:cd:00:ae:79:99:05:27:e6:aa:47:6a:
                    c1:d4:25:30:ba:24:ae:c9:13:02:33:f1:eb:88:99:
                    ae:8a:3d:17:99:9c:1e:22:fd:c3:11:b3:4d:36:ff:
                    39:a5:a1:bb:65:49:e7:06:a7:3c:8f:6d:1d:65:af:
                    a6:1b:ad:a8:b1:a1:71:45:c2:64:16:c4:2e:e5:79:
                    d7:9d:d7:15:a5:e0:06:d4:7c:52:36:51:ef:9b:6c:
                    7e:a2:85:f8:c7:4c:03:71:ff:ce:90:0c:f3:d7:89:
                    2d:17:ee:8c:95:21:36:a5:07:e7:53:5b:34:45:b7:
                    f6:ec:04:5d:52:c6:24:3e:5b:a5:b4:07:61:0d:12:
                    39:35:5e:4d:f5:a4:ca:56:d6:d0:86:1c:66:5f:45:
                    0a:53:54:e9:98:6a:a1:86:52:e1:6d:1e:d9:ea:c4:
                    9d:af:e8:41:a7:4a:c6:b7:c1:27:a8:b2:66:db:9a:
                    ac:67:a6:b4:c5:ec:ef:8e:b5:3a:20:75:33:20:34:
                    98:48:09:32:bc:74:53:7b:31:9c:1c:09:14:3a:70:
                    54:7d:be:af:01:cb:a4:5f:b7:33:0e:1d:11:e4:32:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:77:00:5D:27:B4:31:44:47:F7:BA:5C:3D:8E:18:6C:74:3C:34
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3233302e302f32332d3233203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:9d:70:8e:1d:93:7c:5d:c5:db:dd:e7:08:64:ce:77:2f:
         2b:43:13:7f:f1:af:66:c2:12:95:11:7c:b8:c3:a2:54:6a:d4:
         c8:41:e1:c9:e1:75:b7:4b:5a:c2:a0:2b:4e:d0:83:7f:d4:65:
         ec:e6:e6:65:47:08:a5:1e:69:4f:84:22:56:ba:b4:3b:28:ec:
         8e:16:46:7c:29:44:b4:ed:a1:59:03:e9:57:42:b5:a1:3f:ad:
         23:ec:9b:89:34:68:58:0e:03:cf:78:d1:6f:97:07:6b:ad:aa:
         e3:00:cd:e1:01:41:32:55:96:26:98:07:6b:db:23:2a:c0:93:
         2f:ec:22:50:f7:ba:ab:d1:d6:d3:0b:71:85:53:52:26:6c:05:
         75:c9:f8:76:4d:bb:70:9c:bb:5a:04:c2:cc:51:e5:4b:53:bf:
         ed:19:19:57:11:d6:c7:e4:5f:74:d4:8b:f6:20:7f:63:88:40:
         39:0e:20:0f:0b:47:51:7f:e2:16:28:8f:c3:53:78:d3:27:dc:
         15:f4:8a:50:a1:f2:82:80:8b:d0:73:b9:df:07:85:e4:89:a1:
         15:f3:1c:23:55:41:b1:25:12:cc:5e:00:62:bb:a6:75:ce:e2:
         c3:3b:26:a9:c3:e0:49:6e:af:0a:bc:b8:34:83:f9:8a:e7:69:
         3b:bc:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:50:38 2025 by rpki-client