Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa
File:                     3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa (raw, json)
Hash identifier:          p6fRmB0GhxlUa9LYzWrML8LnTIL/eO9eEqLmjlgBj0w=
Subject key identifier:   2D:87:19:6B:2C:5C:FA:D2:3D:15:CD:29:49:4C:27:E7:4C:AF:14:76
Certificate issuer:       /CN=3637361DE43FA7164FAE0E4817E4450F8942C23D
Certificate serial:       667A4F3DBE6BC6F498A586D3B3AFB1325432007F
Authority key identifier: 36:37:36:1D:E4:3F:A7:16:4F:AE:0E:48:17:E4:45:0F:89:42:C2:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa
Signing time:             Tue 04 Feb 2025 18:17:38 +0000
ROA not before:           Tue 04 Feb 2025 18:12:38 +0000
ROA not after:            Tue 03 Feb 2026 18:17:38 +0000
asID:                     52431
IP address blocks:        181.114.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7a:4f:3d:be:6b:c6:f4:98:a5:86:d3:b3:af:b1:32:54:32:00:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3637361DE43FA7164FAE0E4817E4450F8942C23D
        Validity
            Not Before: Feb  4 18:12:38 2025 GMT
            Not After : Feb  3 18:17:38 2026 GMT
        Subject: CN=2D87196B2C5CFAD23D15CD29494C27E74CAF1476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:85:71:33:e5:94:b3:93:50:ff:07:58:c6:
                    32:10:3e:f4:36:31:16:fb:97:c1:53:04:27:8c:39:
                    98:da:fc:68:03:6b:2a:b1:15:3f:93:eb:d7:1a:63:
                    a5:08:fc:f2:e0:95:0b:83:30:cd:a8:75:12:9a:de:
                    98:13:40:dd:f9:62:bf:da:f4:a9:b0:77:cf:ce:15:
                    a3:f5:19:31:77:d8:99:59:db:92:ab:92:93:a4:05:
                    58:fc:3d:e0:c5:60:47:a4:bb:43:3c:03:89:f7:63:
                    91:78:aa:4c:7d:81:9a:1c:86:cd:43:8b:5b:11:c2:
                    0d:db:b4:69:48:35:93:38:8b:d3:79:fb:22:14:bc:
                    3c:ff:b5:87:4e:69:f3:6c:ae:f3:08:b0:aa:aa:bf:
                    47:e0:e3:d9:d8:c6:93:c6:6b:b0:8f:9b:54:61:a1:
                    d9:30:be:9d:a2:cc:9c:6c:2e:7c:0b:c8:80:7f:0a:
                    1c:bc:2a:f2:cd:75:c9:18:c0:2f:08:5d:5a:12:eb:
                    ec:97:13:a4:f8:94:ac:ed:32:c6:02:7a:d4:1e:5c:
                    92:2b:08:03:e1:49:84:6b:09:d0:97:84:77:e7:eb:
                    6f:a1:1e:b8:7a:0b:9b:75:4c:04:f7:2c:d6:3d:41:
                    74:ed:85:cc:c1:8e:40:53:e5:e1:2a:6c:b2:2e:52:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:19:6B:2C:5C:FA:D2:3D:15:CD:29:49:4C:27:E7:4C:AF:14:76
            X509v3 Authority Key Identifier:
                keyid:36:37:36:1D:E4:3F:A7:16:4F:AE:0E:48:17:E4:45:0F:89:42:C2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:17:2e:81:6c:a5:d9:1b:c2:b9:3e:7f:ec:ed:69:39:33:
         f2:c3:fc:83:58:b2:b6:a6:35:b0:18:80:ba:1f:1b:de:ab:2f:
         74:be:b2:3f:03:69:28:8c:5f:7c:1c:d5:80:f8:8a:be:db:67:
         5a:32:a9:73:02:50:31:7c:1e:73:ec:d4:8a:ba:88:96:6d:32:
         4d:7f:c0:c4:bb:2a:89:bb:10:53:e4:05:88:f5:5b:6b:bc:32:
         4c:37:1f:80:df:fa:fc:e7:55:94:28:f1:38:03:dc:11:d1:37:
         42:e1:6e:4c:88:c1:3d:8f:c6:f5:0b:c0:0d:81:f2:bd:3b:da:
         09:b9:f8:8d:16:32:97:05:e2:d1:2b:07:7f:c5:99:9d:59:33:
         80:2d:fb:ec:d8:56:7b:72:51:8f:33:c4:66:98:ac:1a:ba:3a:
         28:84:b6:f3:a8:e0:1f:7e:28:8f:df:5f:9f:3d:a4:7c:9b:99:
         7a:ae:a9:89:27:36:02:d5:e2:59:f1:30:16:6f:4a:ca:9e:7f:
         af:8f:c6:9e:50:62:5e:6d:ec:86:b6:45:9f:2b:54:f5:b0:70:
         f3:a5:78:4c:3a:9c:81:ab:a3:a2:56:fb:95:77:ff:00:42:86:
         2e:e6:5b:41:9f:8e:86:72:69:dd:ef:ab:41:cc:fa:06:8e:cf:
         8f:5b:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:37 2025 by rpki-client