Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa
File:                     3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          u8DknxIS+eiO/QUqXa82OFTRN8L16GFp1CW28n1feRw=
Subject key identifier:   58:45:3E:32:2A:C0:E8:F8:16:66:C9:04:F6:9F:AA:0F:C3:93:9C:FE
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       6D6B5DD0E5DD43108AB002D3693E4FCF52665278
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:53:35 +0000
ROA not before:           Tue 04 Feb 2025 18:48:35 +0000
ROA not after:            Tue 03 Feb 2026 18:53:35 +0000
asID:                     61468
IP address blocks:        181.224.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6b:5d:d0:e5:dd:43:10:8a:b0:02:d3:69:3e:4f:cf:52:66:52:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Feb  4 18:48:35 2025 GMT
            Not After : Feb  3 18:53:35 2026 GMT
        Subject: CN=58453E322AC0E8F81666C904F69FAA0FC3939CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:39:fd:ed:13:16:cc:aa:32:9d:33:a1:31:
                    fc:ab:cc:40:95:7a:38:de:91:29:01:3b:0a:bb:0c:
                    64:16:b1:ce:2b:22:7e:b4:be:f4:ba:bc:49:9d:70:
                    08:b0:1c:2a:fc:85:ac:c9:f1:9c:66:e0:a3:bb:5d:
                    09:ed:87:09:bb:bb:bb:33:58:ff:e2:f2:66:88:db:
                    85:99:f1:61:f6:96:30:d7:e6:b1:d9:10:af:16:11:
                    65:a1:30:dd:8f:b3:7f:a3:1f:1f:f7:40:17:e7:ce:
                    f8:fd:07:a3:21:02:d8:64:82:00:be:5d:22:c6:33:
                    0c:50:df:b4:77:6c:86:a1:62:25:3a:62:46:71:03:
                    55:c4:55:16:61:72:e4:79:82:40:70:da:a8:65:5c:
                    ec:18:50:e0:cb:3b:e3:40:63:e8:f5:5f:0d:5f:ee:
                    18:04:f1:11:63:ec:f3:f2:68:d3:8d:c2:c4:2d:f7:
                    5b:9d:4f:c1:26:4a:f1:a6:23:eb:2e:b7:87:a5:a3:
                    3d:49:9d:c2:bc:48:bc:9c:dd:8d:6d:76:f7:b6:64:
                    71:fb:29:99:ce:b2:5b:87:2e:10:43:f0:96:3e:2b:
                    64:51:f5:b4:81:e1:40:1e:c3:f7:71:b3:93:ba:1c:
                    32:17:12:91:6b:a0:7d:82:6a:1f:94:b6:14:48:bf:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:3E:32:2A:C0:E8:F8:16:66:C9:04:F6:9F:AA:0F:C3:93:9C:FE
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:c3:92:21:94:25:62:90:82:eb:06:01:2a:c0:78:da:5a:aa:
         21:b3:fd:6e:98:35:10:40:03:d3:56:ec:cc:81:05:82:0f:ba:
         fe:e6:13:11:c2:33:d0:8b:01:2f:b6:2b:19:76:e8:58:a6:5a:
         7e:a8:cd:83:63:47:b7:52:9a:6b:8c:a4:7f:6a:c4:e8:bb:13:
         39:5d:f6:25:27:9e:04:d3:9d:79:f5:83:e4:65:5d:af:f9:0d:
         04:24:7a:85:ae:32:cd:ee:d8:ef:14:38:9c:e9:eb:18:cd:62:
         ef:a5:79:72:de:42:19:ec:1b:8c:be:71:13:59:a8:05:08:87:
         e5:23:55:44:f0:5c:e8:d8:93:ab:c0:11:72:8c:52:c6:45:50:
         4d:a0:c1:3d:7d:cd:f5:c2:91:60:45:d2:f2:0c:e0:f6:80:62:
         f2:69:2b:16:c4:64:32:d6:a4:63:39:2c:88:00:a5:e4:83:0e:
         d2:a0:ff:1d:fa:83:e1:f7:41:ee:20:54:58:d6:45:0b:15:47:
         ca:59:57:03:0b:49:41:67:5f:fb:d4:26:7e:92:e5:d9:bf:eb:
         d3:b9:60:ef:1c:81:99:9c:d8:c3:8b:8f:4a:76:4f:39:08:45:
         2b:9b:9e:95:75:a8:19:9e:91:9b:ef:a7:77:06:ac:6f:78:62:
         d9:db:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:38 2025 by rpki-client