Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3138312e3232352e392e302f32342d3234203d3e203532323638.roa
File:                     3138312e3232352e392e302f32342d3234203d3e203532323638.roa (raw, json)
Hash identifier:          vwyzt2Pd/oK8GjAdBhrrzx5lhe9LIc9GoHMXprFkI9E=
Subject key identifier:   5B:50:7B:A3:EE:0C:2D:35:5E:C2:6A:70:5B:BD:29:20:69:71:5F:C6
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       5ACDF91412F477C3F1BC00C3B7C2295D8CEA727C
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3138312e3232352e392e302f32342d3234203d3e203532323638.roa
Signing time:             Fri 10 Jan 2025 13:25:00 +0000
ROA not before:           Fri 10 Jan 2025 13:20:00 +0000
ROA not after:            Fri 09 Jan 2026 13:25:00 +0000
asID:                     52268
IP address blocks:        181.225.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cd:f9:14:12:f4:77:c3:f1:bc:00:c3:b7:c2:29:5d:8c:ea:72:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Jan 10 13:20:00 2025 GMT
            Not After : Jan  9 13:25:00 2026 GMT
        Subject: CN=5B507BA3EE0C2D355EC26A705BBD292069715FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:f2:f8:ce:40:31:fb:e0:76:69:d1:ef:40:
                    93:a6:79:6d:da:8b:85:0a:b2:be:b7:4d:a7:7f:70:
                    5d:54:a5:90:65:b8:21:45:d7:f2:48:dc:de:df:78:
                    84:5b:51:ff:62:a3:43:d9:8a:d2:18:19:5c:05:58:
                    a8:79:21:eb:89:20:34:e0:8e:88:b7:49:67:d0:b4:
                    00:65:6e:ca:9a:8e:c0:b6:1f:de:92:1e:80:d7:84:
                    d4:d0:38:e3:19:91:2a:6c:13:8a:c0:47:49:e8:85:
                    c1:f1:40:ab:3c:45:e2:14:1d:e7:b2:34:cc:0f:f4:
                    7c:f2:9d:80:22:cd:37:fa:3d:d8:0c:81:df:26:b8:
                    a1:fc:c5:a2:21:47:b0:c3:f9:ca:da:aa:87:fd:25:
                    08:c1:3c:c1:97:94:bc:ec:9e:d2:59:2b:22:0b:39:
                    ed:15:4c:49:6d:c0:d6:b5:2c:37:18:86:9d:c5:2c:
                    8e:4a:87:bd:69:00:56:24:5c:24:22:8b:29:ba:74:
                    9d:ad:4e:31:81:18:28:c3:c2:6c:29:ee:c5:74:49:
                    ab:7c:6f:76:7b:52:ec:03:11:bf:c8:ee:a1:39:95:
                    dc:59:31:a3:88:af:cc:4f:25:7f:29:e5:5f:0c:f5:
                    35:b8:03:d4:0c:0d:67:ac:45:07:bd:ae:30:f6:57:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:50:7B:A3:EE:0C:2D:35:5E:C2:6A:70:5B:BD:29:20:69:71:5F:C6
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3138312e3232352e392e302f32342d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:82:b1:f0:84:e6:3d:95:52:01:a9:d9:f6:3b:7a:4a:f7:f3:
         7e:33:1e:92:c2:da:8b:75:20:87:f3:d5:55:5e:a1:2d:2d:46:
         3e:79:28:f1:c8:dd:2a:d4:ba:8e:3e:04:2a:3d:6b:8e:3c:35:
         c0:10:d5:6c:30:f5:ea:54:ab:ba:d9:cb:f4:96:c6:ee:f9:8f:
         45:4a:ea:04:40:73:5f:80:41:98:6e:63:da:c3:bf:90:e2:4b:
         ab:18:45:46:ea:63:1f:42:dc:4e:68:84:b1:07:35:5b:37:89:
         ca:47:d8:51:cb:7f:f2:f8:09:c6:3b:4d:41:0c:7d:25:8e:a7:
         d3:ff:0a:7f:04:4d:5a:b5:f3:f5:15:31:41:15:d4:2f:24:b8:
         03:49:df:e7:d9:85:08:bf:9f:d1:b3:f6:e3:d5:60:16:02:5d:
         5d:38:9c:4c:1a:d0:d8:35:86:0a:2d:9d:3a:ed:c1:18:16:b9:
         17:11:b8:75:98:bf:4b:a0:fd:4e:d1:e9:5c:b4:81:71:d7:21:
         79:ed:02:a3:a8:5d:78:82:9f:43:de:a6:26:e1:43:15:6c:e5:
         2c:60:86:65:a2:e4:4a:bf:df:9b:ce:ed:17:3e:2a:79:d5:d4:
         84:35:77:9c:cc:08:f4:7a:11:92:6a:6e:80:57:8c:34:98:78:
         af:3c:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:41:31 2025 by rpki-client