Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38302e302f32332d3234203d3e203233323433.roa
File:                     3138312e3137342e38302e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          mu+5jjfmIDwuNgLxO4uPAt/w/KkJ+aVs2BJu1j9Cmd4=
Subject key identifier:   C1:30:32:8F:D0:66:60:9E:99:A5:CF:69:A2:66:FB:9D:0F:8A:12:E8
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       42C5CCC9DF477E09B8C0C7D217BE17582F447280
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38302e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:49 +0000
ROA not before:           Tue 04 Feb 2025 18:20:49 +0000
ROA not after:            Tue 03 Feb 2026 18:25:49 +0000
asID:                     23243
IP address blocks:        181.174.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c5:cc:c9:df:47:7e:09:b8:c0:c7:d2:17:be:17:58:2f:44:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:49 2025 GMT
            Not After : Feb  3 18:25:49 2026 GMT
        Subject: CN=C130328FD066609E99A5CF69A266FB9D0F8A12E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:14:4d:db:c8:27:b6:14:0e:a8:97:ea:5b:
                    20:f8:a1:19:82:83:30:6f:8a:b5:8e:68:9a:73:63:
                    64:0d:ca:61:9a:a9:78:de:72:3c:2f:de:25:92:ed:
                    8b:b3:ab:fe:b3:ff:06:eb:78:73:bd:d5:30:1f:04:
                    ef:ec:a3:40:dd:b9:e2:47:6e:53:84:45:cb:ff:e8:
                    68:86:9e:70:bc:67:79:54:ff:18:7a:c3:c3:f2:b3:
                    a8:32:89:62:6b:8a:61:e0:a1:43:4a:6b:d2:14:d1:
                    5f:70:fa:c7:7e:a9:af:82:7e:58:44:2c:ea:9d:1c:
                    02:f9:2f:b5:1a:4d:22:d4:c1:8d:a3:a2:c4:04:47:
                    4f:1a:4f:33:ad:a7:24:dd:30:1a:a8:fa:ba:a9:b2:
                    ce:9a:2d:d3:a7:58:44:c4:9c:56:b1:df:0d:8d:2f:
                    41:57:fa:a9:3b:ac:a5:fc:56:6a:3f:90:e9:00:89:
                    fb:c5:69:00:4c:7c:0e:bf:c4:8b:3f:6a:e6:f5:6f:
                    04:e4:80:fd:2f:26:ac:fa:81:41:77:ce:38:8f:42:
                    ba:05:dc:ee:1e:da:80:83:80:84:ac:cf:da:6a:db:
                    1a:a6:cc:cd:ad:6c:75:11:24:73:18:4d:dc:1f:2a:
                    12:8c:71:be:6e:d1:fc:a6:ef:b3:ad:f6:91:1d:a4:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:30:32:8F:D0:66:60:9E:99:A5:CF:69:A2:66:FB:9D:0F:8A:12:E8
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38302e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:7a:fd:bf:72:2c:e7:16:11:80:ba:c5:3d:fe:6c:6f:cf:
         1c:9c:d8:d7:14:87:7e:b5:69:4a:69:b7:e1:46:10:ff:c1:3f:
         46:32:51:7c:35:9d:85:91:e0:a0:3f:01:45:44:af:d4:3e:1b:
         7c:9d:50:2e:d9:58:57:67:0d:91:fd:b2:ca:83:2c:da:5f:02:
         ed:0e:f6:35:58:81:63:50:7d:88:09:bf:6a:2f:7a:84:d0:01:
         88:4f:ec:01:e5:0c:ec:7f:ec:2c:e0:10:0a:30:67:38:08:9b:
         20:61:b3:54:98:1b:a3:7c:ad:d1:33:b5:d9:fa:80:bd:61:29:
         12:35:87:58:3b:2c:a7:33:c0:2d:c2:e9:b5:23:a8:53:dd:85:
         52:78:79:c4:db:0f:16:3a:b6:f6:22:81:8b:c9:0d:ae:60:53:
         51:26:c4:ae:3b:02:fc:79:66:cf:10:bd:b6:48:ff:35:21:79:
         95:3f:0a:c0:d3:3f:31:09:5b:4c:eb:18:eb:ba:ce:18:f5:04:
         25:e1:5d:c0:7b:3a:0e:a2:f9:08:fc:c8:c1:4a:6d:8f:00:85:
         04:c3:3c:b7:6c:87:5e:9d:6f:35:b6:ae:56:bb:fd:49:80:a8:
         ed:2a:f7:81:4d:f9:45:0f:85:ca:a9:f2:62:65:92:91:aa:f3:
         16:df:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:32 2025 by rpki-client