Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3138312e3232352e38302e302f32342d3234203d3e20323632323230.roa
File:                     3138312e3232352e38302e302f32342d3234203d3e20323632323230.roa (raw, json)
Hash identifier:          ywvwL/1W8xra4RPx0NofWzUVAVO/Xj881qo1SxxGiJY=
Subject key identifier:   15:1B:99:98:3C:98:C4:7D:5F:49:65:3D:63:B0:63:1A:38:FB:FB:BB
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       0C53749326FE98FD18A1FD4F2497DAFA47A399E9
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3138312e3232352e38302e302f32342d3234203d3e20323632323230.roa
Signing time:             Tue 04 Feb 2025 18:11:01 +0000
ROA not before:           Tue 04 Feb 2025 18:06:01 +0000
ROA not after:            Tue 03 Feb 2026 18:11:01 +0000
asID:                     262220
IP address blocks:        181.225.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:53:74:93:26:fe:98:fd:18:a1:fd:4f:24:97:da:fa:47:a3:99:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Feb  4 18:06:01 2025 GMT
            Not After : Feb  3 18:11:01 2026 GMT
        Subject: CN=151B99983C98C47D5F49653D63B0631A38FBFBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:1a:21:3a:65:cf:2d:23:1a:19:c4:66:87:
                    55:e5:5e:ef:ea:c7:c7:11:93:75:5b:e2:39:66:83:
                    1a:43:32:10:34:77:9e:1a:65:ab:2c:fb:bc:1b:ab:
                    6e:9d:6d:a2:66:a8:23:60:32:94:01:df:f2:2f:7f:
                    11:f0:ae:7c:8f:74:b2:ea:9e:33:cc:4a:5f:6e:57:
                    a5:ed:87:e0:70:25:b5:9a:02:ec:a1:9f:ec:16:92:
                    f7:81:b2:9c:0f:a4:31:16:d2:9a:95:fc:2d:d3:42:
                    2c:3d:ab:df:db:61:50:02:20:c2:ae:f0:27:4b:f9:
                    9b:71:63:62:fd:c2:d9:7d:c2:44:8b:73:15:f3:ad:
                    5f:a3:0f:ce:39:9a:43:a6:cf:a1:74:ac:f8:69:14:
                    e5:47:99:37:0e:74:c6:94:6c:9a:d0:73:cf:f6:b8:
                    e6:81:93:6c:bc:ad:76:20:85:12:7b:f9:12:68:ba:
                    e1:96:eb:b1:68:7a:f9:0a:af:5c:b5:f7:d2:06:a9:
                    f1:4a:49:dd:dd:a1:49:fd:f5:a7:cd:c6:86:2f:82:
                    be:26:29:14:cb:29:bd:72:85:33:de:4c:54:8c:69:
                    e1:b5:86:41:77:4d:fa:0a:4e:7d:fb:3b:41:17:58:
                    4c:ed:a2:76:70:15:b6:0f:7e:c7:0d:1a:f7:f4:97:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:99:98:3C:98:C4:7D:5F:49:65:3D:63:B0:63:1A:38:FB:FB:BB
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3138312e3232352e38302e302f32342d3234203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1a:cc:3a:42:c4:6c:f9:78:4a:e3:76:46:60:e9:87:49:96:
         73:a0:c3:0a:fc:fd:0b:27:32:ad:7b:81:a7:d2:dc:0a:1e:4a:
         29:5f:c5:93:4a:56:bc:5e:a0:57:e0:77:bd:7e:bd:b4:db:f0:
         ee:29:1d:5c:e7:a8:e7:e9:43:80:30:54:62:cb:d7:31:2c:90:
         fd:2e:11:6d:b7:cc:32:0c:46:c4:20:cd:43:a4:a0:04:d1:f8:
         ed:e6:27:8e:76:83:39:71:b9:5f:fe:d4:0a:1a:6f:4b:9e:a6:
         68:7d:b5:5a:36:59:72:ca:0a:ca:bf:b7:34:a4:d5:9f:74:0f:
         93:99:10:fd:23:f2:f2:56:09:16:f0:7e:49:f9:a4:de:14:fd:
         2a:8c:c0:42:93:89:6a:f5:80:70:82:e4:85:de:1d:43:a2:92:
         ec:9a:57:35:a8:d7:92:67:e8:dc:fc:cc:ba:60:49:4d:58:03:
         ea:ba:a3:1e:4a:f5:79:cf:49:1e:32:66:9b:bd:6a:a2:a8:13:
         8b:1f:3c:01:b1:90:f3:e9:9a:8e:52:1e:09:c8:d5:a4:6c:b3:
         e4:f6:03:13:46:60:81:e2:e2:95:78:51:b9:cd:8d:48:b9:e8:
         ea:b6:48:62:6e:d9:46:14:7e:f7:84:f3:e6:19:99:02:82:a5:
         d0:ef:90:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDFN0kyb+mP0Yof1PJJfa+kejmekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyODNDQTExMzNCRjkwRDJFQjJDQzUyQ0UxRTA4MDQ4
MDNCMEM4NTAeFw0yNTAyMDQxODA2MDFaFw0yNjAyMDMxODExMDFaMDMxMTAvBgNV
BAMTKDE1MUI5OTk4M0M5OEM0N0Q1RjQ5NjUzRDYzQjA2MzFBMzhGQkZCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJhohOmXPLSMaGcRmh1XlXu/q
x8cRk3Vb4jlmgxpDMhA0d54aZass+7wbq26dbaJmqCNgMpQB3/IvfxHwrnyPdLLq
njPMSl9uV6Xth+BwJbWaAuyhn+wWkveBspwPpDEW0pqV/C3TQiw9q9/bYVACIMKu
8CdL+ZtxY2L9wtl9wkSLcxXzrV+jD845mkOmz6F0rPhpFOVHmTcOdMaUbJrQc8/2
uOaBk2y8rXYghRJ7+RJouuGW67FoevkKr1y199IGqfFKSd3doUn99afNxoYvgr4m
KRTLKb1yhTPeTFSMaeG1hkF3TfoKTn37O0EXWEztonZwFbYPfscNGvf0lwf1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFRuZmDyYxH1fSWU9Y7BjGjj7+7swHwYDVR0j
BBgwFoAUJCg8oRM7+Q0ussxSzh4IBIA7DIUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUMxQ0Y0ODc1NDU1OUZEODk2QTEwRUM4MDJCNzk3QTJB
ODYzRkVBQTg1RkMxNzlGNDEwQjU5QTMzMDQ0Q0VDLzAvMjQyODNDQTExMzNCRjkw
RDJFQjJDQzUyQ0UxRTA4MDQ4MDNCMEM4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDI4M0NBMTEzM0JGOTBEMkVC
MkNDNTJDRTFFMDgwNDgwM0IwQzg1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDMUNGNDg3NTQ1NTlGRDg5NkExMEVDODAyQjc5N0EyQTg2M0ZFQUE4
NUZDMTc5RjQxMEI1OUEzMzA0NENFQy8wLzMxMzgzMTJlMzIzMjM1MmUzODMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAteFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQACGsw6QsRs+XhK43ZGYOmHSZZzoMMK/P0LJzKt
e4Gn0twKHkopX8WTSla8XqBX4He9fr202/DuKR1c56jn6UOAMFRiy9cxLJD9LhFt
t8wyDEbEIM1DpKAE0fjt5ieOdoM5cblf/tQKGm9LnqZofbVaNllyygrKv7c0pNWf
dA+TmRD9I/LyVgkW8H5J+aTeFP0qjMBCk4lq9YBwguSF3h1DopLsmlc1qNeSZ+jc
/My6YElNWAPquqMeSvV5z0keMmabvWqiqBOLHzwBsZDz6ZqOUh4JyNWkbLPk9gMT
RmCB4uKVeFG5zY1IuejqtkhibtlGFH73hPPmGZkCgqXQ75Cz
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:21 2025 by rpki-client