Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa
File:                     3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa (raw, json)
Hash identifier:          gkRu/LP+AsIlsuQNNcPbMtY7rHgmcAWKgWNCE3FApMs=
Subject key identifier:   B3:66:DB:14:8E:E5:48:BB:51:28:A6:9E:F7:ED:85:CF:06:60:62:7E
Certificate issuer:       /CN=64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B
Certificate serial:       7D143A5856BD2F88FF0EB456C12A6F1EB2B59C9A
Authority key identifier: 64:AE:10:F2:D2:F7:E0:7B:09:57:7E:7E:AA:B1:E9:ED:A1:23:02:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa
Signing time:             Tue 04 Feb 2025 18:06:26 +0000
ROA not before:           Tue 04 Feb 2025 18:01:26 +0000
ROA not after:            Tue 03 Feb 2026 18:06:26 +0000
asID:                     264619
IP address blocks:        181.191.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:14:3a:58:56:bd:2f:88:ff:0e:b4:56:c1:2a:6f:1e:b2:b5:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B
        Validity
            Not Before: Feb  4 18:01:26 2025 GMT
            Not After : Feb  3 18:06:26 2026 GMT
        Subject: CN=B366DB148EE548BB5128A69EF7ED85CF0660627E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:99:b9:9b:54:3b:6b:2a:02:9a:92:52:ab:
                    88:6b:97:7f:60:7f:c0:bc:ca:6e:d4:1e:9e:9e:67:
                    67:66:90:cf:b3:b6:dd:d9:dc:03:23:a3:6e:5e:10:
                    6f:d8:be:c6:e6:f7:0f:0b:7d:74:7c:61:ad:46:51:
                    8e:85:d7:a4:7a:6a:91:ab:8a:57:e6:29:82:32:32:
                    0c:e9:eb:66:83:45:a6:3a:13:91:bf:de:2e:67:72:
                    62:17:19:4f:f5:e3:39:ac:0a:74:41:d7:ab:55:81:
                    db:75:05:1c:08:c7:6f:cc:ea:41:4d:9f:b0:cc:e3:
                    4b:34:5d:02:19:52:f5:c6:d0:0c:a6:45:e6:f2:28:
                    3d:12:07:7b:2b:10:37:c6:be:8b:87:83:9c:6d:4b:
                    2d:5c:c6:cf:ea:4c:6f:1c:c6:81:7a:55:80:35:93:
                    3d:09:aa:46:45:79:26:a9:65:5c:ad:21:22:e6:d5:
                    df:08:21:21:40:48:1e:ff:61:3f:8b:f3:38:30:43:
                    74:a1:0e:35:99:22:da:a3:50:7b:9a:f8:c7:5d:00:
                    48:7c:b7:04:10:be:1c:94:e3:da:37:30:bd:4d:e6:
                    cb:92:63:4b:7c:83:40:e2:c9:e7:9f:cc:6b:c0:cc:
                    77:4b:b3:6a:20:f0:54:c6:92:f7:2e:fa:a9:51:01:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:DB:14:8E:E5:48:BB:51:28:A6:9E:F7:ED:85:CF:06:60:62:7E
            X509v3 Authority Key Identifier:
                keyid:64:AE:10:F2:D2:F7:E0:7B:09:57:7E:7E:AA:B1:E9:ED:A1:23:02:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:e7:ff:c9:10:26:b6:9c:a4:31:13:73:f5:68:fe:d4:f4:
         7f:fe:46:61:1e:2b:01:f7:50:eb:6d:c2:ee:b6:6c:35:57:e6:
         1e:8b:5f:53:1e:ce:de:35:9d:7f:77:5f:ff:63:a2:24:e2:a7:
         27:d5:a0:f5:b4:8e:4c:9f:fc:22:4e:12:5b:30:af:69:ca:a8:
         87:e5:10:23:d0:c1:86:d2:57:4a:8d:7d:7f:3f:55:41:67:5f:
         e2:fd:4b:f7:31:00:f3:ad:95:35:dc:a9:0e:18:11:5c:48:36:
         0f:5d:b4:79:49:94:4a:ad:cc:71:81:a1:7a:fa:bb:49:0e:1e:
         44:68:18:2d:a4:13:fb:1d:f7:83:8a:58:77:2a:d4:ee:98:60:
         95:94:0b:66:ad:6c:7d:ee:38:19:81:91:a8:0b:1d:db:15:2d:
         2b:53:0e:2b:ad:db:bc:4c:4b:d4:29:0e:e3:fd:d2:81:66:46:
         b8:5c:e5:a1:95:cb:cd:dd:6f:b6:26:c0:93:72:f8:f3:d1:1b:
         a6:1b:19:40:c7:52:c9:c4:f0:07:59:98:9a:4e:4e:9b:3f:0b:
         01:c6:cf:fc:78:47:80:aa:ed:33:54:41:2d:13:bc:51:6a:a1:
         30:3e:0b:06:70:7c:84:85:1d:ad:f1:3e:41:dd:57:e6:af:22:
         16:10:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:38 2025 by rpki-client