Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33352e302f32342d3234203d3e203232333638.roa
File:                     3138312e3137342e33352e302f32342d3234203d3e203232333638.roa (raw, json)
Hash identifier:          gJWZmeK/GZU7Kd8QmxxyoEegSdzdhDdVbu//MWRn6Gc=
Subject key identifier:   28:69:BF:B9:4D:D9:57:1E:43:8A:24:4D:66:B6:9E:8D:1B:15:12:CB
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       4D1F278880786ED76B495E5021A9BD6BB10F2978
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33352e302f32342d3234203d3e203232333638.roa
Signing time:             Thu 27 Mar 2025 22:30:00 +0000
ROA not before:           Thu 27 Mar 2025 22:25:00 +0000
ROA not after:            Thu 26 Mar 2026 22:30:00 +0000
asID:                     22368
IP address blocks:        181.174.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:27:88:80:78:6e:d7:6b:49:5e:50:21:a9:bd:6b:b1:0f:29:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar 27 22:25:00 2025 GMT
            Not After : Mar 26 22:30:00 2026 GMT
        Subject: CN=2869BFB94DD9571E438A244D66B69E8D1B1512CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:41:b4:79:65:fe:19:e7:82:68:32:f7:00:
                    0a:a8:10:44:71:27:e5:62:1f:53:61:3f:22:bc:73:
                    ee:e2:b0:86:c7:47:b1:bd:83:31:f6:7e:5f:11:2f:
                    cd:c5:ea:ea:06:17:98:c7:53:12:7c:42:71:14:b7:
                    4a:00:44:89:19:64:b8:52:5e:d9:6b:4f:d5:90:3f:
                    8c:19:43:6d:49:dc:20:f0:db:5a:dd:22:a7:b5:66:
                    00:13:41:b8:64:ed:bb:aa:97:05:61:ff:41:e4:2f:
                    31:80:80:b6:a9:8d:94:a0:bd:dd:23:45:c5:23:2e:
                    1d:80:bb:d9:73:ec:43:37:99:ec:b0:ac:7e:95:d1:
                    2d:9a:36:24:3d:06:b2:25:05:9d:b7:5c:73:f6:3b:
                    12:4a:f8:99:64:88:e4:a2:4c:92:19:08:27:6e:11:
                    9d:c2:99:71:f6:ac:74:c4:3e:63:12:ea:d1:4f:e2:
                    2c:13:c2:77:d9:ca:67:3e:8c:6b:72:5f:8d:a3:63:
                    1c:84:bd:67:1f:0e:39:96:2d:7f:97:01:2c:21:30:
                    5a:f9:1e:a4:ef:b4:e3:0f:28:ff:d0:81:02:82:9c:
                    b3:f9:4b:82:da:2b:be:df:11:e1:83:6c:8a:07:fa:
                    e9:87:46:c6:97:77:d3:31:81:d0:6a:ae:91:ba:50:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:BF:B9:4D:D9:57:1E:43:8A:24:4D:66:B6:9E:8D:1B:15:12:CB
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33352e302f32342d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:64:a2:2c:3c:9f:fc:ff:ed:31:2b:95:78:68:84:17:30:0c:
         ca:ba:48:75:04:65:8b:f4:26:4e:58:cc:fe:14:4b:9f:5c:4c:
         af:0e:d9:37:84:8f:6f:f1:41:b4:14:d2:eb:e1:88:5a:4c:71:
         e1:ae:fc:ce:40:da:a4:88:72:84:ac:d8:58:12:90:74:25:15:
         24:5d:db:b3:f3:7f:01:9c:8b:06:ae:88:d4:7c:13:3d:9f:6b:
         6f:b4:fd:04:12:d1:42:8b:94:4e:bb:a1:46:bb:cd:e5:e6:34:
         a3:37:7a:78:d6:3e:ab:af:3b:a6:e1:5b:72:1f:85:26:03:03:
         ef:7a:ae:ef:69:81:82:56:95:07:b3:5b:f7:8c:15:6f:d5:9b:
         08:1f:dd:6e:ee:c6:cb:5c:cd:3c:9a:d0:e0:3e:ae:b1:c1:6b:
         f6:6f:b5:9d:3f:75:99:2a:c1:5b:2d:2f:a9:45:69:45:74:a5:
         96:9f:4d:17:dc:35:ca:f9:70:80:f7:91:46:21:48:3f:87:3e:
         18:93:20:3a:72:27:4e:06:6d:ec:11:c9:54:70:83:2a:00:a7:
         5c:4a:0d:dd:8f:18:fd:23:26:0e:7d:db:78:5c:69:a4:53:2a:
         8c:71:55:1b:03:81:73:dc:e4:56:52:95:e3:d4:33:32:2e:cf:
         91:d3:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:57 2025 by rpki-client