Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/3138312e3233332e382e302f32322d3232203d3e20323732303333.roa
File:                     3138312e3233332e382e302f32322d3232203d3e20323732303333.roa (raw, json)
Hash identifier:          iD8Q5xkCDyrOWaqXC2SHJN2DLVvvasSN5D4TZsiBqG4=
Subject key identifier:   D1:2C:36:38:EE:9C:57:B0:F7:ED:65:EB:1C:4C:51:3B:A3:31:B9:F7
Certificate issuer:       /CN=D87A1AB545BE4E257CE10B4965EE134E7673FC52
Certificate serial:       03933170EB625688C9A73EB18A85C62B6BAEFA9B
Authority key identifier: D8:7A:1A:B5:45:BE:4E:25:7C:E1:0B:49:65:EE:13:4E:76:73:FC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/3138312e3233332e382e302f32322d3232203d3e20323732303333.roa
Signing time:             Tue 20 May 2025 03:15:00 +0000
ROA not before:           Tue 20 May 2025 03:10:00 +0000
ROA not after:            Tue 19 May 2026 03:15:00 +0000
asID:                     272033
IP address blocks:        181.233.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:31:70:eb:62:56:88:c9:a7:3e:b1:8a:85:c6:2b:6b:ae:fa:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87A1AB545BE4E257CE10B4965EE134E7673FC52
        Validity
            Not Before: May 20 03:10:00 2025 GMT
            Not After : May 19 03:15:00 2026 GMT
        Subject: CN=D12C3638EE9C57B0F7ED65EB1C4C513BA331B9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:0d:2b:c0:52:68:c0:b5:04:79:32:2e:e1:
                    43:05:64:26:2d:a2:67:43:78:01:ff:f3:71:e2:33:
                    a5:9d:9c:7a:f1:2b:14:78:9d:6f:bf:6d:ab:95:7d:
                    bb:50:0a:5b:0c:2f:fb:bb:aa:cc:3c:72:31:8e:df:
                    e1:65:72:0d:f4:6a:b5:76:f7:b9:f2:16:b0:be:3f:
                    b7:cc:04:89:86:4c:aa:6d:0f:7e:aa:af:c6:35:51:
                    36:49:57:b5:1a:a5:e8:bc:83:63:1c:44:39:b1:25:
                    39:f9:1b:7e:db:ad:6d:63:af:42:1b:80:d3:35:e3:
                    8a:08:af:91:1d:25:47:84:84:be:16:99:20:81:49:
                    ca:cc:da:0f:d7:8f:d6:60:99:f3:8f:34:bb:be:09:
                    af:2c:97:af:84:e3:b2:d0:cb:92:e7:9f:91:b6:5f:
                    e0:72:60:ec:1f:80:cd:61:b3:7f:04:78:62:68:e7:
                    0d:c1:27:2c:b9:ab:1c:8e:72:53:de:4a:1d:f1:82:
                    d2:be:47:65:9a:cb:6f:dc:35:9a:35:8e:05:43:a2:
                    45:81:f4:b0:8a:03:24:58:06:32:66:04:45:9b:c1:
                    9a:34:fc:00:76:bf:96:52:80:b5:ce:dc:fa:ac:93:
                    45:f2:fa:f2:cf:75:73:4c:92:cc:91:96:55:9f:39:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:36:38:EE:9C:57:B0:F7:ED:65:EB:1C:4C:51:3B:A3:31:B9:F7
            X509v3 Authority Key Identifier:
                keyid:D8:7A:1A:B5:45:BE:4E:25:7C:E1:0B:49:65:EE:13:4E:76:73:FC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/3138312e3233332e382e302f32322d3232203d3e20323732303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:86:aa:be:a8:99:7e:82:8e:4a:5e:e3:a5:95:b2:78:04:84:
         99:be:d6:2c:86:d8:91:fd:65:a7:10:6e:79:ff:ea:e6:ca:45:
         28:c7:48:fd:f7:e9:64:31:91:68:de:71:46:3e:dc:b7:94:86:
         89:05:1f:26:f9:0e:41:81:76:18:a2:a4:c9:55:64:42:7b:43:
         21:cd:33:7b:41:24:9e:f9:2c:fb:b9:f5:3d:94:2d:dd:96:1f:
         36:bc:c2:51:64:3f:d2:ee:8b:af:35:21:18:86:33:94:37:07:
         e8:4a:ae:c2:76:b8:96:6a:7c:f7:fb:1d:eb:af:b3:f6:bc:6c:
         b8:7b:9b:b1:f9:af:b9:63:0b:8e:92:ae:4e:b8:dd:2c:3a:48:
         80:b1:66:cd:97:d3:b7:5f:d0:0c:d9:7a:e2:0c:3b:53:f6:8e:
         b1:18:52:41:1b:10:e9:0a:19:30:b2:85:26:c9:4c:c0:54:ff:
         82:0c:11:a6:a6:eb:9e:58:a9:18:69:b8:96:91:35:8d:3c:6f:
         a8:1f:2b:3c:0d:6f:c6:d6:07:c7:fe:ed:3f:8c:92:04:b7:ae:
         c7:f3:b5:e9:cd:fb:34:2d:2b:e3:7f:9f:d2:b7:61:ff:33:63:
         97:b7:8e:1c:af:2b:3b:de:3d:f4:32:ed:fe:44:e9:4f:56:97:
         f9:0c:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:17:59 2025 by rpki-client