Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132342e302f32342d3234203d3e203634313630.roa
File:                     3138312e3233332e3132342e302f32342d3234203d3e203634313630.roa (raw, json)
Hash identifier:          dkNDKic1SwHiic8vNj6zQDg4FRreeQ34ijHOSco/WDI=
Subject key identifier:   36:86:41:72:24:C1:71:0A:2D:D6:24:6D:EB:E0:4B:FF:61:5F:BE:9A
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       40A428C002DC67294CB711E85C0C638D6EDC32A1
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132342e302f32342d3234203d3e203634313630.roa
Signing time:             Tue 26 Aug 2025 11:30:00 +0000
ROA not before:           Tue 26 Aug 2025 11:25:00 +0000
ROA not after:            Tue 25 Aug 2026 11:30:00 +0000
asID:                     64160
IP address blocks:        181.233.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 19:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:28:c0:02:dc:67:29:4c:b7:11:e8:5c:0c:63:8d:6e:dc:32:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Aug 26 11:25:00 2025 GMT
            Not After : Aug 25 11:30:00 2026 GMT
        Subject: CN=3686417224C1710A2DD6246DEBE04BFF615FBE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:a3:3d:53:35:7c:2e:bd:b0:ce:dd:82:bb:
                    85:52:4a:21:e5:56:16:25:25:fd:ed:74:6b:b3:de:
                    6c:86:ae:7f:c6:d8:2b:af:bd:57:17:08:bf:57:f2:
                    dd:b8:e5:9c:23:c9:51:57:5d:84:9d:32:a4:54:6b:
                    d8:19:91:7c:cc:a5:54:6d:5a:38:a4:15:4a:81:25:
                    a7:27:85:3a:ff:9d:97:1e:45:20:65:27:1f:3a:8d:
                    82:4c:57:f0:ee:54:d8:7a:64:b4:48:b1:8a:a0:8d:
                    f2:9a:ac:fa:01:30:24:63:95:d9:a8:40:f8:86:6e:
                    a0:08:e1:ed:21:3d:19:64:58:c8:ba:d9:e7:fb:2a:
                    74:ff:d0:60:f7:56:ce:9c:f6:8c:af:f1:dc:09:3d:
                    5b:2b:3f:cf:18:10:1b:9e:c2:22:be:c5:8c:59:21:
                    8e:73:f0:c7:48:4f:ae:9a:d4:8f:7c:7a:0a:5a:e5:
                    3c:0a:71:25:99:b6:fd:4b:f9:08:0c:7d:70:35:f5:
                    01:cf:d1:cb:73:48:d1:86:b9:e2:2c:3d:64:61:af:
                    cb:c3:11:39:b1:a0:21:f3:9a:ba:66:93:05:5f:f5:
                    ca:2c:77:91:c2:75:d5:8d:50:43:4d:48:09:5a:3d:
                    0a:2a:b0:80:6b:2e:57:70:ca:0e:96:ba:a9:7a:14:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:86:41:72:24:C1:71:0A:2D:D6:24:6D:EB:E0:4B:FF:61:5F:BE:9A
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132342e302f32342d3234203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:38:08:91:c7:ab:6b:19:ae:e1:5d:d9:ad:1e:96:ac:d1:1f:
         8c:b3:48:f6:ca:8c:84:bf:df:bb:95:90:d6:ad:da:44:7e:dc:
         ad:7b:b4:26:59:de:5f:eb:e8:47:60:eb:43:63:bd:75:d5:4e:
         38:33:a7:20:ef:96:1e:ce:4e:46:b8:52:bb:a8:13:c0:03:1b:
         e1:f3:75:e5:78:5b:ed:3c:6e:04:0e:12:15:0f:74:cd:67:52:
         92:4b:9f:03:98:e8:35:34:e6:68:08:e6:81:51:5f:95:49:79:
         1d:ac:89:5e:d0:c4:fa:3b:52:0f:d5:ee:6f:33:69:3d:1c:a3:
         42:00:1a:5c:3f:93:dc:18:1a:a1:3d:62:a8:53:21:db:2a:8f:
         97:2f:1e:44:db:c8:81:0a:26:75:c5:5f:2e:e8:64:f0:7c:30:
         6b:a0:3d:0a:76:5d:98:78:69:bd:d1:dd:57:3a:8b:6d:12:6d:
         49:40:38:18:2f:d2:21:38:04:2b:38:70:6a:fa:95:81:64:35:
         c1:12:06:55:5c:b8:d2:d9:85:0e:16:35:03:0d:17:07:30:ed:
         d9:f9:56:d1:73:f4:4c:cd:27:cd:65:38:ac:86:d1:03:29:db:
         8a:eb:11:d4:02:63:aa:bd:db:68:a0:3a:db:99:28:f5:3f:b2:
         a9:7a:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:27:39 2025 by rpki-client