Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203634313630.roa
File:                     3138312e3233332e3132352e302f32342d3234203d3e203634313630.roa (raw, json)
Hash identifier:          hMWewpts5Avv0F8gEEmmn1O03zqUT0YQggN7xZB4RWs=
Subject key identifier:   A4:A4:0A:4D:22:D7:8F:EA:78:EF:B8:BF:7A:5B:AF:3A:84:4F:B2:2C
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       5CB202232119C043340B87000DEBE12D5C3DDA0E
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203634313630.roa
Signing time:             Thu 04 Sep 2025 10:55:00 +0000
ROA not before:           Thu 04 Sep 2025 10:50:00 +0000
ROA not after:            Thu 03 Sep 2026 10:55:00 +0000
asID:                     64160
IP address blocks:        181.233.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 19:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b2:02:23:21:19:c0:43:34:0b:87:00:0d:eb:e1:2d:5c:3d:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Sep  4 10:50:00 2025 GMT
            Not After : Sep  3 10:55:00 2026 GMT
        Subject: CN=A4A40A4D22D78FEA78EFB8BF7A5BAF3A844FB22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:20:c0:66:84:68:f0:7e:19:0b:8d:cc:96:
                    00:07:d0:b6:8c:a9:4c:a3:a9:42:0d:f6:18:49:91:
                    67:49:7c:ba:4e:0b:7e:25:3b:29:42:29:9a:0c:e0:
                    57:f2:27:77:30:8a:df:7e:43:cd:d6:88:9c:e6:33:
                    e0:ee:b8:7d:b2:88:c3:8d:9a:5c:6e:94:64:20:b1:
                    b8:b1:bf:71:c7:91:4f:3a:ab:ce:db:95:b5:a8:14:
                    96:8b:09:e5:07:81:f6:59:13:9f:ac:c7:d1:9f:d8:
                    de:62:bc:f5:ab:09:53:18:e9:6b:10:3a:f4:6d:84:
                    d9:60:65:06:e5:ac:69:88:e0:d7:97:45:d5:5c:0b:
                    3d:73:8c:db:84:07:11:63:76:b4:2c:1f:08:73:f7:
                    cd:40:57:32:e9:f9:ac:2d:25:3d:af:cd:9b:43:35:
                    00:b7:ef:56:f3:cb:a8:f3:2c:7e:01:65:4d:23:7b:
                    b8:c2:c7:10:83:4d:17:34:31:bc:4b:7a:4c:df:28:
                    8d:ee:c9:30:ee:6a:05:e6:53:48:09:8f:c1:04:cc:
                    2e:94:b2:5a:fe:ab:13:7b:3c:78:3b:56:5b:9f:66:
                    d5:5c:2e:93:00:e5:f2:2e:2e:98:5b:fb:6f:bd:52:
                    d0:94:1c:d4:4a:b0:2a:9f:e7:e2:2b:d8:fa:50:e7:
                    77:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:0A:4D:22:D7:8F:EA:78:EF:B8:BF:7A:5B:AF:3A:84:4F:B2:2C
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c9:ce:e8:39:96:f6:08:bd:e4:73:d8:b1:20:29:52:60:8f:
         ca:4a:b7:95:85:ed:50:11:8e:1f:a9:ae:39:af:07:cb:ba:f5:
         11:70:08:8b:c6:0d:d1:f9:c1:fd:0b:9a:22:1e:e3:bf:ce:61:
         c8:57:0d:13:3a:50:10:ac:58:3c:54:c9:5c:ee:61:12:f8:5f:
         8a:a1:46:1d:c9:02:41:9b:4a:22:fd:24:30:a7:c5:5c:aa:dc:
         9f:35:05:f1:64:a8:3e:fd:98:6b:6e:c3:fa:b1:1d:db:1e:ad:
         00:62:c8:d8:36:22:23:37:ee:b9:74:12:aa:0f:e8:c1:16:3b:
         49:28:a8:f5:25:7d:5b:88:45:8d:db:90:29:85:9b:38:c2:44:
         18:7e:73:cc:40:c4:e5:08:65:d9:45:af:b8:cd:14:fc:ba:ea:
         a9:bb:ec:cf:1f:75:72:23:53:57:96:ee:09:a7:00:f9:66:5c:
         ea:1f:e4:7a:4e:78:d1:8a:b8:ad:a6:ab:14:a3:04:f5:de:60:
         22:41:88:bf:9b:b1:02:80:c1:11:cc:8b:f4:e8:69:71:f6:50:
         78:3c:45:51:88:66:3f:a6:54:25:cd:ab:2a:97:6e:f6:b3:fa:
         e2:21:a9:a9:76:e1:b3:40:c3:60:6c:38:ec:f6:12:b3:60:af:
         5e:0e:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:27:40 2025 by rpki-client