Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130382e302f32322d3234203d3e203233323433.roa
File:                     3138312e3137342e3130382e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          lv7o+Z3l2GbWDXnbviSzdWNtD4c0GO3UkJ0CkXQe5as=
Subject key identifier:   43:D5:50:18:24:07:D1:5F:EF:D5:97:F8:41:3B:79:14:05:84:8D:2B
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       7CF6405BE838702475C471A2EB9B81164B5BAC58
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130382e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:41 +0000
ROA not before:           Tue 04 Feb 2025 18:20:41 +0000
ROA not after:            Tue 03 Feb 2026 18:25:41 +0000
asID:                     23243
IP address blocks:        181.174.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f6:40:5b:e8:38:70:24:75:c4:71:a2:eb:9b:81:16:4b:5b:ac:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:41 2025 GMT
            Not After : Feb  3 18:25:41 2026 GMT
        Subject: CN=43D550182407D15FEFD597F8413B791405848D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:3a:5e:98:cb:b2:77:6e:5c:44:38:e3:33:
                    77:fc:03:df:d6:78:50:d3:cb:8f:58:9d:17:d2:0d:
                    e7:7b:58:69:1c:59:99:dd:79:e4:99:42:10:9a:42:
                    2b:cc:83:65:b8:ac:91:86:ff:aa:1e:07:b8:9c:39:
                    eb:23:fd:60:06:08:e2:ae:cc:04:a8:94:d4:73:bc:
                    df:d8:c9:50:64:97:c9:e8:41:39:a0:87:d4:b2:f6:
                    9d:e6:71:34:af:67:40:e6:96:67:f5:99:30:30:b1:
                    cf:b1:ce:53:f8:c7:1a:0e:e6:85:18:85:b3:2d:bf:
                    c8:97:b8:1b:e4:cf:dc:07:9c:33:3c:20:f7:ad:63:
                    e1:dc:a6:af:c0:ae:da:90:c3:4f:32:48:60:09:ed:
                    d2:27:0e:82:b4:07:ed:4b:86:81:c6:71:31:3d:ae:
                    55:25:d8:bd:b1:d3:c3:2f:0e:ee:8d:32:b4:0b:cf:
                    07:88:50:42:34:80:2e:28:bd:08:d8:86:e0:e2:c8:
                    38:c5:de:bf:91:05:6d:ba:d5:c6:30:04:15:28:55:
                    9f:38:f7:bd:27:30:64:45:2f:82:64:87:7d:39:eb:
                    ab:9b:32:28:cf:cc:af:58:62:2c:b7:aa:c9:d8:0d:
                    c1:50:d6:4e:73:b9:44:f7:28:3a:50:30:02:44:65:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D5:50:18:24:07:D1:5F:EF:D5:97:F8:41:3B:79:14:05:84:8D:2B
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130382e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:56:d5:18:1f:71:8f:3b:7f:a3:0b:15:05:91:3a:5b:98:
         54:57:82:ee:25:c0:47:18:b3:3b:24:0d:d7:d1:93:32:5b:e1:
         e5:a0:24:55:c3:ed:fd:d4:72:ff:6f:70:60:a8:52:0e:4f:de:
         f4:56:54:e6:a6:8f:4d:e6:61:0f:0c:9f:5e:b7:c1:99:d2:5c:
         44:9b:9d:79:5f:2b:1f:ab:28:3b:26:33:2a:67:b3:35:5f:2f:
         4a:ab:82:e3:f4:bd:29:dd:42:6b:c5:e9:d6:a1:23:e0:ac:aa:
         ea:b9:83:0e:b2:9a:64:ac:d7:e5:00:06:73:d6:75:82:d4:ca:
         d6:bf:b9:57:33:35:d3:77:93:cc:8c:b5:c4:ba:13:53:96:bf:
         3e:66:94:72:42:fb:44:03:64:a4:e4:97:a0:55:77:52:75:9a:
         24:3d:41:83:95:00:a9:31:47:29:dc:c4:fd:f2:48:67:ac:e6:
         05:4d:3a:9d:c2:43:a7:e1:73:c0:ca:59:79:ef:1d:1c:18:4f:
         b4:3d:74:3b:73:be:62:d4:6f:30:9d:81:5f:94:64:15:3a:64:
         91:4d:0a:b4:f7:25:fe:e3:93:47:03:bf:2c:ca:a5:43:fa:7f:
         ae:91:52:d4:0a:2e:a8:56:d4:5e:33:7d:cd:70:67:e3:6e:af:
         b9:c1:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:57 2025 by rpki-client