Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa
File:                     3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          qRstqgLsu/Jllacsn+kka6C7TIijYDd5rumy+VEaeiM=
Subject key identifier:   22:92:E2:03:0E:E7:8C:4D:39:D4:05:82:D8:83:98:11:0F:07:26:7F
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       65ECEB71CFD0D90FA909281CDFFDED3EF2D7C446
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:37 +0000
ROA not before:           Tue 04 Feb 2025 18:20:37 +0000
ROA not after:            Tue 03 Feb 2026 18:25:37 +0000
asID:                     23243
IP address blocks:        181.174.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ec:eb:71:cf:d0:d9:0f:a9:09:28:1c:df:fd:ed:3e:f2:d7:c4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:37 2025 GMT
            Not After : Feb  3 18:25:37 2026 GMT
        Subject: CN=2292E2030EE78C4D39D40582D88398110F07267F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:cb:b8:54:23:45:2b:94:8f:ab:79:26:28:
                    04:39:02:41:88:58:29:58:89:eb:50:19:f8:35:97:
                    59:1d:41:3e:51:ed:3c:18:94:2e:5c:10:4a:78:eb:
                    03:94:86:85:87:e9:34:7d:ad:79:aa:00:c8:2e:40:
                    4c:d9:ef:34:8a:1b:3f:49:53:15:e6:8c:56:6c:4c:
                    5f:d0:14:20:2e:54:ee:0b:98:2c:be:ce:db:b9:e5:
                    9f:4b:5b:46:2f:45:ca:1c:3a:7d:b7:1a:1e:56:7b:
                    0b:84:2c:a5:d0:8a:94:c6:ee:9d:09:a3:37:b6:1b:
                    b9:cb:98:9e:bd:1f:47:ca:31:b8:35:8d:22:6c:a6:
                    96:b9:ee:72:ad:5c:18:95:b0:61:7a:37:f8:8b:26:
                    82:3c:19:16:d4:5f:bb:a1:99:58:d8:c9:1d:65:5c:
                    d2:da:a5:4c:86:ac:41:17:44:c7:60:44:cf:75:a3:
                    2a:11:0e:5d:0d:dc:da:96:c9:8d:cf:2d:c0:17:b5:
                    ab:0a:14:8e:d1:90:5b:9e:e5:74:f2:47:b0:c7:e8:
                    b9:a6:aa:57:10:dd:a9:8b:90:bb:f7:4a:07:ce:10:
                    ec:7d:3d:fb:35:dd:56:0f:9f:e8:1e:94:05:0f:bc:
                    b9:64:95:af:48:01:99:f2:48:ce:c7:9b:f6:74:4b:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:E2:03:0E:E7:8C:4D:39:D4:05:82:D8:83:98:11:0F:07:26:7F
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:36:3f:fe:ac:45:d4:75:25:b0:ef:fe:11:aa:69:7f:50:
         18:47:b5:5b:44:5c:7d:55:a8:f9:28:fd:b2:76:cf:81:85:08:
         bb:1a:db:dd:bf:3e:a5:7c:e1:c4:c7:1a:cc:a7:eb:f1:c3:99:
         e9:7c:3b:59:45:25:0a:be:c5:db:44:bc:16:66:77:98:5a:c9:
         ea:46:82:c1:a4:01:78:a3:00:b5:8f:d7:70:55:f1:7a:70:af:
         ed:64:ff:d4:7c:d7:85:54:dc:16:73:d4:19:54:4f:b0:03:cb:
         95:7f:f8:60:a3:82:c9:a8:4f:ce:f3:e9:9f:da:78:f8:38:5e:
         ff:9c:0e:3c:54:53:11:24:37:74:5a:11:e0:79:71:34:8b:c5:
         31:d1:3f:46:ad:10:a2:71:bb:be:ed:61:9d:c5:91:e1:4d:fe:
         db:c5:e0:0d:c7:1e:b9:1a:af:b6:5a:0d:1c:d0:b9:0c:86:28:
         ea:66:15:10:00:cd:8f:2c:80:08:7c:08:ab:c5:7e:23:a6:38:
         1a:99:93:5a:3f:93:bf:98:fe:6b:02:83:87:74:8d:86:5d:a5:
         44:45:39:55:e8:a1:c0:d5:71:49:b7:82:75:c5:2d:09:35:c5:
         b3:cb:7f:e2:a0:41:76:7c:66:78:bb:4d:fb:6e:83:85:11:16:
         9b:2b:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:04 2025 by rpki-client