Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
File:                     3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa (raw, json)
Hash identifier:          NlIvK6RrqCTCD88hBX7nhkmrFTFDndRJagTAl6pnlig=
Subject key identifier:   C4:5A:BF:EC:9E:2F:2B:45:62:72:8A:5F:9B:0B:D7:79:29:95:EF:75
Certificate issuer:       /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial:       4EE85CB44C04D14B698254A7EACA3AA4A569F2D2
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
Signing time:             Tue 04 Feb 2025 18:50:30 +0000
ROA not before:           Tue 04 Feb 2025 18:45:30 +0000
ROA not after:            Tue 03 Feb 2026 18:50:30 +0000
asID:                     271855
IP address blocks:        181.191.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e8:5c:b4:4c:04:d1:4b:69:82:54:a7:ea:ca:3a:a4:a5:69:f2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
        Validity
            Not Before: Feb  4 18:45:30 2025 GMT
            Not After : Feb  3 18:50:30 2026 GMT
        Subject: CN=C45ABFEC9E2F2B4562728A5F9B0BD7792995EF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:11:df:1d:f0:12:6a:32:e4:7c:5d:4b:4e:
                    9d:19:97:01:2b:2a:22:c5:69:bb:1e:2c:a9:82:03:
                    72:c5:0c:3c:2d:59:69:ab:47:92:6a:b2:b4:8a:f2:
                    47:70:e3:6b:c5:4a:d3:cf:86:85:68:78:8c:21:55:
                    85:8f:c9:3f:d2:60:59:58:d5:df:e9:80:52:f8:8e:
                    e0:88:d4:ef:52:41:6f:9b:d7:2e:66:91:57:b5:4d:
                    85:bf:70:7a:34:23:6f:dc:b3:3f:8e:c1:e7:6c:78:
                    e6:8b:9a:32:e1:07:d1:c8:ed:04:28:3f:b2:07:0e:
                    7a:7d:36:b6:01:c9:0e:cc:e4:b1:db:81:8c:e8:c0:
                    45:67:cd:f1:21:cd:95:dd:59:98:38:91:dc:30:c3:
                    ad:c5:90:eb:ae:77:75:33:4f:54:f8:59:9f:7f:ac:
                    d2:79:97:a8:3e:16:4d:aa:f8:51:91:6d:97:e8:e5:
                    5f:c1:d7:1b:19:ea:af:35:0e:e4:43:28:54:4c:04:
                    a8:11:34:94:9d:1e:70:92:5d:66:bf:e6:ac:8c:5d:
                    8a:d1:06:dd:0b:17:43:83:17:3f:e1:59:2e:f7:7a:
                    5f:98:0a:5d:cd:eb:d2:44:e7:7a:b0:1d:46:a4:97:
                    81:8e:5f:1c:e6:13:40:b0:8f:48:91:a8:40:a1:66:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5A:BF:EC:9E:2F:2B:45:62:72:8A:5F:9B:0B:D7:79:29:95:EF:75
            X509v3 Authority Key Identifier:
                keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:27:de:a2:ac:7e:37:8f:84:56:91:c9:5b:af:59:59:c0:
         a2:e8:bb:f4:65:22:41:63:ed:b3:d3:a4:29:b9:77:5e:2a:db:
         df:e4:72:c3:7a:98:5b:3b:8b:c6:68:ea:c9:8f:1e:f0:8f:25:
         1b:1e:aa:f8:17:33:cd:ad:dd:6c:81:8e:b0:01:25:14:0f:a1:
         ed:d4:31:98:3a:09:55:6b:93:04:e1:7d:14:b5:5c:eb:14:05:
         f7:47:c0:ce:1c:fe:43:7a:29:35:22:f4:8a:01:43:2a:87:fa:
         16:25:37:bc:06:4a:ab:3f:2f:72:5f:4c:07:e0:06:69:34:10:
         d6:b4:33:96:b9:b9:eb:63:98:5d:17:7d:9e:f8:da:fe:2b:97:
         27:dd:cf:8b:ea:59:dc:5c:7a:f0:df:56:53:4a:19:fd:f8:49:
         2e:49:74:5a:80:11:4a:65:90:9c:91:f0:f8:76:42:eb:98:23:
         0e:bd:24:3c:85:96:97:f6:02:7a:fc:44:e4:83:9f:d9:32:df:
         35:28:0b:58:c3:06:ae:dc:d8:fa:ba:97:21:5f:76:42:ea:b7:
         e6:84:68:18:47:10:53:3a:63:cc:8e:a1:ff:0b:60:4c:0a:9e:
         80:7f:fa:31:ad:51:f1:3d:aa:ff:8c:fd:b5:03:33:09:11:1c:
         16:e2:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:32 2025 by rpki-client