Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38342e302f32322d3234203d3e203233323433.roa
File:                     3138312e3137342e38342e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          yH3meSriATc+NQWY4XRDFFKBHgA7jgWxu0ZD6ANNG7U=
Subject key identifier:   B9:7B:11:4A:27:87:CE:61:7E:89:D9:A9:01:08:86:89:61:37:05:05
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       4C5E8F620A3C7ACA88CA0F3AF71D445D01540A36
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38342e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:46 +0000
ROA not before:           Tue 04 Feb 2025 18:20:46 +0000
ROA not after:            Tue 03 Feb 2026 18:25:46 +0000
asID:                     23243
IP address blocks:        181.174.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 02:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5e:8f:62:0a:3c:7a:ca:88:ca:0f:3a:f7:1d:44:5d:01:54:0a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:46 2025 GMT
            Not After : Feb  3 18:25:46 2026 GMT
        Subject: CN=B97B114A2787CE617E89D9A90108868961370505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:9b:23:d3:13:6b:33:93:46:65:e0:e2:1a:
                    ed:54:ee:1d:51:ad:a4:0f:aa:1b:c3:e6:c3:16:8a:
                    c0:0c:b6:53:d6:a1:aa:c5:fa:6b:fc:44:d3:cc:e0:
                    d4:5a:da:6c:44:dc:45:d1:c4:ad:fb:66:c9:77:75:
                    1b:98:d1:30:e4:c0:48:41:af:bd:f2:90:da:30:ef:
                    c8:7a:f9:23:75:65:fe:98:b5:57:fb:63:39:26:11:
                    e9:39:c6:06:3d:87:3f:5a:36:b8:d7:5e:1e:40:60:
                    ff:7f:a0:31:cf:78:ae:ef:5e:ca:5d:3a:2b:96:2b:
                    91:a9:4e:46:5e:6b:e7:8e:ad:bd:39:58:f4:86:24:
                    e8:4a:6a:65:9e:8d:af:b5:d5:b8:09:25:fd:95:fe:
                    00:47:3b:e4:eb:d8:65:ea:8d:65:ba:43:d5:3c:a4:
                    df:47:bb:c6:d6:e1:a4:10:99:c1:77:78:ce:b4:13:
                    b5:8d:84:f4:ea:fc:5c:e8:a7:ba:d2:36:6d:a9:c6:
                    e7:3c:f3:c5:7b:06:8c:97:0c:de:42:02:f9:6b:83:
                    be:fa:20:3c:85:6e:dc:11:86:54:b5:0d:9f:0a:5e:
                    5f:45:97:34:46:c0:23:03:fa:3a:74:c3:55:83:09:
                    40:6d:d6:be:9b:6a:1a:f8:be:10:f7:ee:c6:9d:3b:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:11:4A:27:87:CE:61:7E:89:D9:A9:01:08:86:89:61:37:05:05
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38342e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:0a:6f:11:24:f9:51:43:9d:cd:98:b1:d2:09:c0:02:21:
         b9:20:24:90:7d:3c:56:09:8f:bc:4e:2c:79:67:b6:50:69:48:
         d6:3b:f3:fa:55:ee:57:97:f0:70:60:ef:a1:66:bf:c9:02:1a:
         28:db:f6:bf:d6:83:21:cb:75:3d:1e:12:e3:ff:94:1e:d3:c6:
         17:92:de:60:33:84:3a:c0:b8:ae:59:e6:98:5c:1f:95:4e:1a:
         a1:c7:60:45:8f:4d:17:1c:7d:f5:a0:f9:12:e9:c6:b9:f6:9d:
         c5:b3:da:aa:c2:f4:59:d2:c1:0b:76:f6:24:02:4a:b7:6a:2e:
         18:c8:ae:de:b3:e6:d1:2a:14:a0:21:2c:08:d2:de:14:6f:7b:
         61:63:78:7c:bc:32:25:fa:64:1f:ce:b4:7d:3a:08:4e:64:7f:
         95:e7:0c:75:e7:ed:be:e3:07:d5:02:b0:36:56:d9:63:99:73:
         45:d6:19:a3:48:7a:70:2e:1e:9c:b9:44:72:c7:f1:0e:71:25:
         64:ac:62:bd:77:1a:69:40:ac:62:16:3e:a7:ac:11:b1:d7:d2:
         f5:02:9a:08:b4:71:27:d2:92:97:bb:23:16:86:12:6b:f7:7b:
         79:92:fe:ca:cc:e2:d6:4e:ba:ea:6f:75:37:29:f2:fd:39:e3:
         b0:35:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:16:17 2025 by rpki-client