Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132372e302f32342d3234203d3e203634313630.roa
File:                     3138312e3233332e3132372e302f32342d3234203d3e203634313630.roa (raw, json)
Hash identifier:          exqZ5uG9TxcCJVOJJkWF0nc1Qws+YpC6c7Q4KGfiRd8=
Subject key identifier:   9F:B6:47:F2:F2:03:9C:65:BD:54:61:C1:DD:7C:1E:C7:27:E2:7E:58
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       6519775B027B3DD97AA434398EB6A064A71E9F89
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132372e302f32342d3234203d3e203634313630.roa
Signing time:             Thu 04 Sep 2025 10:55:00 +0000
ROA not before:           Thu 04 Sep 2025 10:50:00 +0000
ROA not after:            Thu 03 Sep 2026 10:55:00 +0000
asID:                     64160
IP address blocks:        181.233.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 19:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:19:77:5b:02:7b:3d:d9:7a:a4:34:39:8e:b6:a0:64:a7:1e:9f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Sep  4 10:50:00 2025 GMT
            Not After : Sep  3 10:55:00 2026 GMT
        Subject: CN=9FB647F2F2039C65BD5461C1DD7C1EC727E27E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:b8:0c:7b:a7:ad:73:ea:e2:a0:98:14:ae:
                    5f:a6:0e:1a:6b:a9:11:1b:f1:15:a6:2b:cf:bc:7b:
                    4d:90:3a:bb:3b:50:bb:b7:51:1c:82:c1:5f:b5:b8:
                    0b:4e:92:17:b9:34:6e:4f:f1:2c:72:eb:03:bd:18:
                    df:21:57:3f:c8:60:ea:37:45:c7:48:02:a9:8a:32:
                    f5:d3:e0:0a:d1:68:55:ef:ae:30:2a:9b:6b:d2:ec:
                    55:96:c2:b6:7a:56:4e:49:fc:27:4a:c5:27:c0:54:
                    2f:1b:88:4a:03:96:13:81:78:12:20:7d:41:d8:8f:
                    77:18:68:fa:de:95:93:c4:b4:56:e8:3b:d6:3d:07:
                    fd:62:4a:04:3b:ec:46:70:ef:c7:c6:e6:ad:bb:9a:
                    6d:b0:eb:a3:48:29:84:e1:71:68:8e:64:70:bb:d4:
                    67:74:7b:0b:2b:f6:f8:94:34:f7:60:0b:93:a6:dd:
                    d9:97:2c:12:56:3f:a0:01:84:a7:8f:a9:a4:eb:2d:
                    2f:30:4b:36:4b:46:77:75:60:59:a1:7a:3c:e4:31:
                    2e:f0:e0:e5:fb:3d:9e:5a:2c:81:29:cf:35:91:3b:
                    f5:cf:29:00:4b:42:7d:30:3e:98:79:56:85:da:65:
                    97:c8:bc:55:49:b4:4c:4e:cb:27:9c:c8:4c:7c:40:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:47:F2:F2:03:9C:65:BD:54:61:C1:DD:7C:1E:C7:27:E2:7E:58
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132372e302f32342d3234203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bc:c3:d6:22:d9:c3:dd:e5:53:ab:ff:6e:00:79:d6:58:af:
         5c:5d:14:33:5f:d0:c3:41:c7:58:27:e6:4d:aa:58:54:0d:b0:
         42:92:20:e2:03:8d:05:48:42:41:48:37:09:b3:97:64:e6:68:
         11:c4:57:e6:7c:b7:85:31:53:78:79:36:ca:dc:7b:a1:17:95:
         06:ed:27:3b:47:57:87:2e:0a:15:eb:6f:56:6b:e8:0e:8d:ef:
         d1:04:0c:54:d5:c5:9d:da:b2:e5:fd:51:d8:69:6f:b3:15:9c:
         05:5f:13:71:c0:30:82:84:9b:77:5b:88:4c:99:b4:cd:92:ba:
         6e:9e:a7:ca:e9:8f:81:4a:44:f3:4f:ed:e3:07:3c:41:e6:72:
         26:84:18:17:d9:62:0e:90:90:7c:5d:e2:ea:91:46:41:6a:9f:
         d1:66:6b:17:74:96:7a:ab:dd:8b:9a:fd:8a:0c:06:67:c5:4f:
         31:6f:c4:ed:b1:53:55:30:30:3e:f8:35:8f:c1:8b:4c:72:d8:
         d4:38:59:c8:67:6c:28:93:51:1c:90:b6:09:27:6a:10:bd:db:
         48:40:1d:de:e3:1e:f5:ce:b0:b3:60:01:8d:62:c5:52:ff:8a:
         b7:14:b5:3e:ea:73:1b:bf:68:a9:0f:94:1c:c3:df:9f:71:5b:
         8e:67:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:27:44 2025 by rpki-client