Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e34302e302f32312d3234203d3e203232333638.roa
File:                     3138312e3137342e34302e302f32312d3234203d3e203232333638.roa (raw, json)
Hash identifier:          eUeci/6WVc/bx537brTabS2bJ7+7mu8QhZ+nN3KdeNM=
Subject key identifier:   B1:69:C7:80:77:7A:62:51:62:EF:81:A3:C6:C8:60:E7:55:61:AE:44
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       3A925E0FB20534BF6F8B4C351332CE0BB1DA5160
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e34302e302f32312d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:22 +0000
ROA not before:           Tue 04 Feb 2025 18:17:22 +0000
ROA not after:            Tue 03 Feb 2026 18:22:22 +0000
asID:                     22368
IP address blocks:        181.174.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:92:5e:0f:b2:05:34:bf:6f:8b:4c:35:13:32:ce:0b:b1:da:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:22 2025 GMT
            Not After : Feb  3 18:22:22 2026 GMT
        Subject: CN=B169C780777A625162EF81A3C6C860E75561AE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:15:0f:76:53:7a:aa:52:e6:a3:92:0c:02:
                    d7:b0:10:32:9e:bf:fd:2a:ef:9f:2f:0e:24:59:82:
                    49:cf:30:4e:5e:26:4e:4a:f7:c5:5d:74:d5:28:f6:
                    cd:29:63:39:ec:a1:7d:93:bb:16:01:0f:30:5b:52:
                    bc:e4:2c:2a:79:ad:25:18:2c:d5:75:81:d9:32:28:
                    fc:b7:2c:73:ba:ef:22:2f:94:41:76:36:88:0a:4b:
                    0e:d7:55:97:de:fd:5a:44:fd:94:5a:a2:07:d7:d1:
                    e8:f3:b6:d5:2b:ef:28:48:4f:79:d4:3e:23:3a:0f:
                    66:78:1a:f3:e3:6f:e5:ad:3f:f6:96:83:42:a8:48:
                    95:93:1a:75:7d:aa:b3:17:35:33:42:9b:01:19:57:
                    c7:f9:2a:81:31:32:b7:79:48:8a:a3:06:30:84:8a:
                    12:f5:9e:92:a6:08:84:a8:78:d5:6f:3b:8e:0a:d8:
                    63:b0:68:23:cf:a8:3e:80:1d:ec:b0:20:86:34:ab:
                    41:6a:9e:34:dd:11:30:14:9d:d2:4d:39:e9:e1:74:
                    eb:2a:19:77:18:e6:dc:f2:09:93:98:67:7b:a5:50:
                    91:a6:39:df:93:f8:07:64:c5:bb:ad:bf:11:f2:bd:
                    c3:4c:55:ef:4e:68:45:c7:3c:06:b4:58:96:fe:9f:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:C7:80:77:7A:62:51:62:EF:81:A3:C6:C8:60:E7:55:61:AE:44
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e34302e302f32312d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:39:04:c7:64:1d:54:2e:7c:7c:73:39:ce:3a:60:b4:4a:
         fd:2b:f6:b3:bb:9c:64:78:92:fe:d7:d2:82:a8:0f:f1:c6:e8:
         31:c1:9c:15:f6:bc:a8:f7:66:f2:a8:48:51:5e:b4:e8:16:c2:
         9c:3b:52:21:03:14:15:2c:04:75:bb:07:0a:31:26:5c:cb:03:
         d6:80:90:8a:a5:9f:52:2a:32:32:04:f5:4b:50:fd:fd:e5:68:
         35:89:f7:27:78:b2:01:ac:c2:f9:2f:8d:62:8b:3f:e1:89:56:
         d5:3d:bc:5a:87:81:a4:40:5d:1c:85:7c:ff:62:27:dd:48:b3:
         5c:72:a0:fc:b5:55:d9:50:bb:c1:06:44:a5:f6:77:70:8b:fd:
         75:8b:b0:53:58:0f:5d:4b:11:f0:74:57:96:c1:a8:31:89:7a:
         85:19:58:f1:4a:e5:03:5a:c9:39:6e:36:3d:e9:73:09:c4:8f:
         68:ee:8f:e7:c8:94:17:67:2f:e2:c6:62:ff:dc:36:2e:2e:85:
         73:c6:eb:cb:e0:0c:d6:c2:28:28:86:04:9a:6c:6d:ea:a2:87:
         94:5b:c1:76:35:d9:bc:38:61:9d:56:db:3f:26:08:87:21:7d:
         d5:c6:94:a5:9a:e7:48:eb:05:13:ff:3b:87:74:c7:7f:d9:34:
         d7:bd:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:54 2025 by rpki-client