Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa
File:                     3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          wv9bzhvqRZDHf+P78l6TYaz5VREYKd9TaLC7U4S9rPE=
Subject key identifier:   D6:57:73:78:57:EA:4E:F5:D0:35:BC:11:84:90:D2:F2:04:F8:13:DA
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       03519E4596F250051331B1896DEF963423311293
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 15 Jul 2025 15:25:23 +0000
ROA not before:           Tue 15 Jul 2025 15:20:23 +0000
ROA not after:            Tue 14 Jul 2026 15:25:23 +0000
asID:                     52468
IP address blocks:        181.233.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:51:9e:45:96:f2:50:05:13:31:b1:89:6d:ef:96:34:23:31:12:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Jul 15 15:20:23 2025 GMT
            Not After : Jul 14 15:25:23 2026 GMT
        Subject: CN=D657737857EA4EF5D035BC118490D2F204F813DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:8f:e1:75:2f:a1:b8:b3:7b:98:a7:5f:f7:
                    82:bb:eb:1b:bc:c4:42:3d:1a:44:81:c7:f1:99:eb:
                    12:f2:ba:90:e4:82:72:f9:8f:57:26:47:86:76:c7:
                    33:a0:e3:4c:d7:cf:f1:30:17:da:96:ae:e7:f4:2c:
                    f7:b1:7a:b5:21:59:4e:dc:43:7c:f8:49:5b:c5:c5:
                    70:a3:38:46:8c:3c:6e:dc:7a:de:46:4b:bb:d5:39:
                    d5:e4:da:a5:9e:98:d2:eb:86:c5:44:6d:db:f3:1a:
                    a9:4c:58:27:e9:cf:d9:46:39:b4:f2:ae:a7:74:9f:
                    70:77:27:2a:3f:8c:fb:d1:14:13:9f:56:09:10:01:
                    a4:e3:c0:ee:1d:e0:bf:70:07:af:36:14:d8:07:69:
                    9e:c1:91:59:c9:90:dc:ec:07:08:4f:cb:c7:32:45:
                    91:e1:63:e3:1f:ed:aa:54:5a:8e:ef:0d:cd:e4:1c:
                    06:94:cc:87:63:24:16:4c:84:8e:c9:85:74:98:29:
                    b0:5f:b3:0b:52:b0:c1:a8:82:f9:52:af:48:a0:16:
                    fd:39:07:4b:87:d5:05:a6:da:00:d0:96:a2:04:36:
                    5c:c1:e0:79:90:16:96:35:a0:8e:07:0d:23:6e:ae:
                    a0:bd:f4:13:85:68:4f:06:05:63:98:ab:b8:98:1c:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:73:78:57:EA:4E:F5:D0:35:BC:11:84:90:D2:F2:04:F8:13:DA
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:73:31:fa:f7:9f:50:b6:f5:e8:43:52:51:51:b8:7a:29:
         d5:6b:13:25:9b:23:b1:3b:a9:12:cd:69:6e:59:e6:b5:49:ad:
         8e:81:cf:6e:34:3b:db:c5:d2:2f:bb:a8:01:09:63:75:f9:ee:
         28:b0:51:dd:b6:29:92:79:82:f9:b4:67:c1:ad:b9:8c:a0:67:
         f1:dc:38:14:3a:ba:c2:8c:a1:5c:45:73:9e:4a:ec:09:1c:23:
         7c:50:0b:9e:7e:b5:f8:47:1e:35:eb:84:81:d9:7c:b5:a2:08:
         eb:ba:77:34:df:85:83:06:f1:a3:9b:40:a0:f4:83:d9:51:1d:
         73:7a:59:7d:3a:0b:b9:4f:37:d0:51:ab:05:a5:40:b6:ec:3d:
         9c:69:3f:a9:00:a6:b2:be:af:a1:1b:fb:19:b5:cd:98:75:a4:
         7a:ae:4c:f2:64:88:55:bc:14:10:27:53:57:2b:79:f2:f6:20:
         0f:51:66:85:ae:9a:e8:2a:88:3a:ca:5d:45:58:85:3b:86:7a:
         f2:fc:e6:32:78:11:ea:47:24:cf:67:4f:d1:2e:b7:cd:30:41:
         be:3e:17:49:90:e8:9a:0c:ec:0d:62:6b:61:41:6e:fa:17:d8:
         17:8c:fe:8c:5b:d2:75:32:52:5a:66:20:e6:92:f6:81:30:48:
         f6:6b:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:27:03 2025 by rpki-client