Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3138312e3137342e3136382e302f32322d3234203d3e203238313130.roa
File:                     3138312e3137342e3136382e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          zbh+f5CVU7D7TD8dI4qhXIJlmNHUtV82CiQRp9okalo=
Subject key identifier:   C3:7D:04:AA:C3:73:A3:59:DD:D1:6B:61:D9:7B:97:FA:95:20:8A:25
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       33AA3138F29C251F695B30277A8FE2E1F8DEE2EC
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3138312e3137342e3136382e302f32322d3234203d3e203238313130.roa
Signing time:             Tue 04 Feb 2025 18:41:14 +0000
ROA not before:           Tue 04 Feb 2025 18:36:14 +0000
ROA not after:            Tue 03 Feb 2026 18:41:14 +0000
asID:                     28110
IP address blocks:        181.174.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:aa:31:38:f2:9c:25:1f:69:5b:30:27:7a:8f:e2:e1:f8:de:e2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Feb  4 18:36:14 2025 GMT
            Not After : Feb  3 18:41:14 2026 GMT
        Subject: CN=C37D04AAC373A359DDD16B61D97B97FA95208A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:81:2a:7c:1a:28:a1:2a:f0:a0:a4:1a:3b:
                    2a:e5:9a:e2:d6:4f:af:65:5d:17:63:e8:11:c6:a6:
                    21:87:0f:4b:24:41:a7:94:63:7f:c4:9a:5e:b0:4e:
                    18:28:56:1f:9e:a3:4c:4b:bf:80:c0:26:97:27:f8:
                    09:a5:29:75:b5:65:ed:27:6b:25:fc:a7:ce:21:b8:
                    2e:7a:d8:82:c8:d7:6c:56:a2:e5:f8:c0:6b:f3:23:
                    c6:a6:2e:13:a1:d0:0d:e2:b1:c5:f6:65:be:c5:3e:
                    53:47:5e:f6:2e:d4:d0:03:3d:8f:53:96:40:fc:41:
                    fa:d2:1f:8d:63:89:c6:aa:34:6e:72:be:15:bf:70:
                    e1:0a:c9:68:c4:bf:94:b2:58:ba:a9:4b:d7:83:79:
                    9b:96:0f:3c:11:93:d7:21:20:c4:ab:d6:f3:87:06:
                    b9:94:45:d9:5d:26:92:c0:fb:ce:76:bc:43:fa:54:
                    d3:59:86:ed:45:d7:9f:a6:24:43:e5:92:d7:f5:2e:
                    60:e5:20:cd:f6:a9:d1:f1:0b:48:3d:1f:3a:ef:14:
                    3b:02:1f:af:60:42:58:20:29:ae:4a:76:24:15:ac:
                    20:92:0a:c5:ff:b0:5f:f6:fe:fa:63:de:e2:fc:0d:
                    da:3b:09:2d:5b:0c:23:41:4c:69:83:c1:d2:6d:00:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:04:AA:C3:73:A3:59:DD:D1:6B:61:D9:7B:97:FA:95:20:8A:25
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3138312e3137342e3136382e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:97:25:1f:df:0e:4f:c4:cf:7a:9e:94:ee:21:7f:94:1b:0f:
         22:c9:8c:23:b0:38:7f:5f:84:76:85:78:b9:0b:36:f8:44:c0:
         03:64:3e:c0:5e:49:17:9e:e8:cb:dc:7d:d4:21:c4:04:6e:b7:
         a0:3f:73:55:2c:f2:f8:e1:a7:b0:48:7c:2c:b9:1a:b5:dc:27:
         3a:62:33:76:ce:7c:22:60:79:e1:94:c0:90:68:6d:37:9b:c8:
         21:a4:9b:d1:6a:74:af:7e:70:8c:93:08:1e:0c:36:ea:e0:d1:
         f5:73:34:1f:04:5d:9b:2d:ae:f1:ca:49:af:d7:f7:66:79:03:
         59:65:bd:0b:ea:59:2d:47:c6:a6:97:1f:b4:a3:47:22:4b:05:
         79:94:bd:22:54:e5:ca:18:b6:da:c3:de:76:f5:eb:00:b2:ff:
         8f:7e:99:19:24:bd:4d:b7:ff:5a:83:96:eb:dc:f0:42:a8:28:
         e9:72:44:dd:bd:84:e2:2f:c8:45:74:f2:20:53:42:47:f2:b7:
         ec:55:32:0b:df:3a:23:69:2e:6e:6b:d5:72:62:49:0a:f2:cd:
         29:bf:93:ed:ac:6b:68:ce:cc:32:65:93:38:fb:13:d5:19:b4:
         6d:89:f3:48:f9:3e:65:20:00:43:ad:e4:77:e9:f4:6d:a7:83:
         8e:62:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:56:32 2025 by rpki-client