Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e36352e302f32342d3234203d3e203138363738.roa
File:                     3138312e3232352e36352e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          VmFa9WPDuGDIagEJhwTmZzBh1ER+erGiM+OEVuGbJTQ=
Subject key identifier:   6F:D1:5D:E0:88:64:61:2C:1F:68:56:24:CE:DD:2D:3A:93:E5:CA:A3
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       358C29588B1EA898CABBD87F06CEDD07E00F6F88
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e36352e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 19:57:00 +0000
ROA not before:           Tue 04 Feb 2025 19:52:00 +0000
ROA not after:            Tue 03 Feb 2026 19:57:00 +0000
asID:                     18678
IP address blocks:        181.225.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8c:29:58:8b:1e:a8:98:ca:bb:d8:7f:06:ce:dd:07:e0:0f:6f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:00 2025 GMT
            Not After : Feb  3 19:57:00 2026 GMT
        Subject: CN=6FD15DE08864612C1F685624CEDD2D3A93E5CAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:b8:20:b7:e2:fe:a3:50:63:82:64:f8:96:
                    3d:9d:16:12:08:e7:be:77:a0:d3:0c:a8:78:6c:2f:
                    ed:25:7e:69:c7:f2:3d:cf:de:cd:0d:0d:9f:e7:12:
                    32:81:f3:df:4c:f3:f5:d0:0d:7f:05:f1:2a:15:50:
                    9b:19:0e:ff:04:f0:b4:90:4a:be:d2:cb:a7:9e:58:
                    e3:cd:56:dd:5c:cf:39:e8:55:f0:ca:10:90:d1:c4:
                    6e:50:7e:95:f0:47:7e:72:1c:8c:92:92:d3:61:24:
                    da:7c:75:56:19:b5:e7:1a:87:e9:a8:16:77:8d:78:
                    2e:f3:83:29:33:9b:3b:20:b4:71:d5:6a:de:17:17:
                    7b:f4:a3:65:70:1b:77:84:cf:94:42:5a:e6:bb:80:
                    90:ca:6f:06:ca:52:ec:3e:e0:93:68:d7:b5:b3:76:
                    ca:a6:78:4e:c4:cb:01:99:96:1c:e9:66:cc:bb:e5:
                    67:72:32:c5:c0:4c:ac:b4:58:d5:c5:87:a8:ff:a3:
                    76:fd:77:16:c3:b2:23:39:01:d0:e9:5e:99:7f:90:
                    1b:e1:6c:7e:71:2b:a8:fa:a5:56:cd:e0:13:fa:80:
                    a4:48:19:bd:8f:b9:12:dc:97:52:14:ce:be:16:7f:
                    d1:58:f9:c6:8b:7d:1b:e0:b3:c5:0d:32:cf:63:af:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D1:5D:E0:88:64:61:2C:1F:68:56:24:CE:DD:2D:3A:93:E5:CA:A3
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e36352e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:73:87:89:d8:7d:69:c8:69:f6:87:c6:de:fd:1f:f1:7b:f3:
         38:1c:6c:83:e9:0c:17:3a:2a:38:8a:b5:c1:1d:0b:bb:19:2d:
         bb:cc:62:6e:a9:f9:98:70:c1:22:3a:10:98:10:d0:84:77:5c:
         b8:d9:d5:d0:8d:57:18:26:eb:45:3a:b5:cc:7e:13:ab:f2:9b:
         d0:e4:04:c2:16:6e:21:a7:00:e3:35:9f:33:bc:d0:15:21:e5:
         76:60:c1:9b:60:1e:11:92:59:36:b2:32:cd:c6:c3:7a:5b:50:
         bd:e6:32:00:ff:58:6d:d7:89:ec:e7:29:71:04:3f:f3:49:e1:
         ce:fc:ed:0c:d5:84:38:ef:1c:0e:de:14:70:27:0b:a5:9e:3c:
         46:91:42:7a:a0:50:0c:69:a6:76:5d:6d:e2:7b:0f:39:c5:77:
         cd:d7:1a:ad:91:c0:7c:ed:fd:8c:5e:19:66:a1:f6:0c:b1:33:
         ee:a3:1b:7e:91:06:fd:08:12:fa:57:09:d7:68:06:59:15:79:
         01:29:5c:94:35:2f:3f:4d:04:0d:99:a9:de:e4:21:97:73:16:
         5f:f3:e3:73:1b:ec:f4:37:57:97:b6:4b:29:13:74:81:02:1f:
         f6:0e:36:b1:7f:0c:47:e6:8a:d1:01:a0:85:0a:7d:92:ed:0f:
         10:15:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:48 2025 by rpki-client