Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3138312e3232352e38302e302f32302d3234203d3e20323633323130.roa
File:                     3138312e3232352e38302e302f32302d3234203d3e20323633323130.roa (raw, json)
Hash identifier:          t/c6tdpxQm/y3CQfcoyLAPUZiwOZw9Y9Fs4zFK6wSG0=
Subject key identifier:   9B:8E:24:56:B5:28:0F:4E:28:5E:14:FF:5D:07:C4:C9:12:FC:84:8B
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       68EC10F1B09C0DAFF9E854F38C95F153BCCDC74F
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3138312e3232352e38302e302f32302d3234203d3e20323633323130.roa
Signing time:             Tue 04 Feb 2025 18:10:59 +0000
ROA not before:           Tue 04 Feb 2025 18:05:59 +0000
ROA not after:            Tue 03 Feb 2026 18:10:59 +0000
asID:                     263210
IP address blocks:        181.225.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ec:10:f1:b0:9c:0d:af:f9:e8:54:f3:8c:95:f1:53:bc:cd:c7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:05:59 2025 GMT
            Not After : Feb  3 18:10:59 2026 GMT
        Subject: CN=9B8E2456B5280F4E285E14FF5D07C4C912FC848B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:54:71:9f:3b:9b:7c:f9:8e:1e:8f:19:9d:
                    65:86:08:95:e9:7b:9b:a9:76:9c:f0:53:96:de:94:
                    1a:d7:0d:c7:5d:7e:70:3b:c0:1a:4f:70:23:a6:a3:
                    6d:a1:e5:bb:ec:2d:d9:0c:29:f4:8a:5f:42:8f:47:
                    07:81:0a:29:23:26:60:fc:38:50:93:50:50:53:84:
                    53:d5:cb:44:39:97:50:57:8d:de:36:5e:19:73:87:
                    25:b4:66:23:e5:6f:28:fc:f0:fb:73:94:60:7c:d3:
                    8b:7d:b6:2d:6e:89:a9:82:03:fa:f9:f5:14:a6:0d:
                    e6:73:9d:77:cf:10:b0:6d:41:88:3c:e1:9a:d3:f5:
                    76:76:0b:26:e4:c2:aa:97:e9:2f:36:e1:c2:95:cd:
                    fe:71:63:46:60:7b:ff:f6:f2:7c:87:fc:69:7c:1b:
                    5d:0b:d9:9a:06:59:c7:17:42:04:9b:12:f9:74:8c:
                    62:1f:a3:f8:1a:10:50:80:0a:71:73:f5:0f:c3:10:
                    b9:ed:a3:ae:50:a7:6d:b8:2c:d7:28:e7:ca:5d:c0:
                    0c:58:a0:90:75:de:5d:42:81:02:03:3c:eb:70:35:
                    68:68:eb:bd:e6:0e:25:20:b5:81:62:28:a3:c3:18:
                    ef:03:79:88:e1:6f:46:96:dc:f1:a0:d2:91:69:7d:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8E:24:56:B5:28:0F:4E:28:5E:14:FF:5D:07:C4:C9:12:FC:84:8B
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3138312e3232352e38302e302f32302d3234203d3e20323633323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:77:bc:3e:e5:a7:0f:7f:57:34:d6:2e:ae:f6:98:22:a4:fb:
         41:38:dd:57:20:c9:53:5a:15:2a:67:e7:f1:bd:4e:bf:69:97:
         26:cf:4b:d2:bf:ce:ef:ec:b3:e4:61:5f:a8:8a:07:ee:89:9b:
         a1:ef:e0:2d:bd:47:0b:2b:1f:45:52:e1:c2:ad:29:cf:33:9b:
         42:16:05:49:f4:47:e8:72:8a:a8:ab:7a:ea:79:91:e8:e5:ef:
         67:02:9f:be:88:9d:5f:a6:7d:b3:be:00:68:fb:58:cb:c7:1d:
         1f:8d:09:49:95:93:d5:9e:09:0e:17:78:86:66:56:8f:e4:bb:
         16:ce:aa:d1:21:1d:10:41:09:a0:1d:3b:24:1a:9a:e8:c0:d5:
         35:ac:57:e7:44:34:13:a4:ab:d3:d9:d4:6f:c4:8b:e9:fb:b5:
         d3:81:ae:28:04:4d:64:3d:7f:6e:19:d5:af:29:60:ee:95:1c:
         12:42:4f:c3:b6:fa:2e:79:6e:80:ce:61:49:09:f2:a0:68:3d:
         0f:65:0d:c5:b6:31:6b:fd:4b:86:2d:e8:bf:61:e4:c5:d4:6f:
         6b:b1:24:c4:ed:62:a4:a0:8a:c0:24:0b:29:65:94:f9:c6:58:
         85:5d:f1:34:21:c7:c0:f3:5d:d0:09:b7:14:99:16:a0:48:38:
         85:ab:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:43 2025 by rpki-client