Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e35302e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e35302e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          SoDfW243kxyr69idcfg+/WHgNzEVg610gnx3ovZeT7c=
Subject key identifier:   6B:08:02:D9:23:73:1D:4F:77:42:45:E7:25:9A:BE:BC:F7:FB:65:F8
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       A1F2B16112340008E8E8E5ACE2CDE2EEB8D75C
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e35302e302f32332d3233203d3e2033383136.roa
Signing time:             Wed 23 Jul 2025 19:50:00 +0000
ROA not before:           Wed 23 Jul 2025 19:45:00 +0000
ROA not after:            Wed 22 Jul 2026 19:50:00 +0000
asID:                     3816
IP address blocks:        181.174.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:f2:b1:61:12:34:00:08:e8:e8:e5:ac:e2:cd:e2:ee:b8:d7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jul 23 19:45:00 2025 GMT
            Not After : Jul 22 19:50:00 2026 GMT
        Subject: CN=6B0802D923731D4F774245E7259ABEBCF7FB65F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:29:20:11:a1:b5:ed:39:f1:84:de:5e:43:
                    13:23:08:7c:5d:7e:95:86:8f:22:c6:a9:3c:e4:ed:
                    17:95:41:c8:03:fe:9c:7a:46:67:b3:20:48:fc:9e:
                    62:d3:a4:a2:ea:d5:a7:30:4b:6e:fe:2e:64:a0:3a:
                    7c:b6:bd:77:52:63:29:87:31:80:62:14:26:b7:af:
                    69:0e:ad:42:87:95:d8:1c:1d:cf:ea:12:d5:fe:7f:
                    37:e6:bf:6d:b7:8d:69:8b:cb:9a:ae:3d:28:57:ac:
                    6a:b8:7e:00:5d:94:02:a8:ce:3d:5b:0a:db:ed:ba:
                    98:6b:ea:a7:0b:7c:2b:d3:f8:47:21:47:0f:2c:25:
                    7a:f4:74:33:be:79:25:f1:37:cc:fa:22:80:36:b3:
                    95:e4:87:22:6e:ff:67:62:3d:97:63:8e:08:75:2a:
                    a5:02:a7:3d:40:a2:54:15:9c:c9:6b:c7:73:dc:11:
                    f3:ce:08:c1:27:60:11:8f:43:db:3e:6c:35:d3:42:
                    29:85:da:b4:c6:7b:f9:5b:8d:27:3c:9c:d8:a0:55:
                    00:cd:3a:08:36:3d:f5:fc:82:c2:e4:84:9c:25:0b:
                    e2:4e:7f:47:ca:b3:43:33:e4:38:67:1e:0d:f3:ce:
                    0d:ac:1d:6c:9d:51:7d:e5:7f:ab:f6:11:59:7b:e7:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:08:02:D9:23:73:1D:4F:77:42:45:E7:25:9A:BE:BC:F7:FB:65:F8
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e35302e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:d4:c5:a9:a2:93:f5:4f:44:bc:ea:f2:d8:f7:91:c5:ce:
         e6:7f:0b:14:da:e6:cf:82:2d:de:bd:e9:47:8b:35:04:fa:2e:
         55:8c:73:6e:28:62:14:09:27:64:de:82:dd:2a:3b:b8:5d:43:
         13:9c:77:58:48:3b:d8:71:77:d1:50:a4:65:f4:96:f5:8e:b2:
         f1:09:67:52:33:73:73:26:5f:fd:99:9e:19:9c:e5:56:80:06:
         7e:8d:ba:64:ab:dd:57:b2:51:9b:50:f2:fd:93:d2:a7:05:e2:
         c1:8a:73:af:ab:dc:7e:e7:7b:ba:ed:ae:3e:6f:db:ef:19:e3:
         cf:cf:4a:2e:38:e9:bd:5a:48:d9:78:ef:95:a2:96:c0:b3:b4:
         8b:63:b1:17:79:07:75:99:1b:cb:ea:3a:13:00:9a:8d:d3:59:
         0a:08:e0:49:81:e4:e7:24:ed:60:2e:6a:e9:b2:bd:be:7d:e4:
         ff:4a:dc:51:14:63:04:12:20:cf:88:18:59:dc:94:3d:cb:7c:
         ab:8c:54:ca:68:c1:58:32:2c:2b:32:68:2d:3a:80:a8:bc:b1:
         cd:b9:84:9f:85:91:b1:ac:26:3c:f4:57:a5:5d:00:65:f6:a0:
         d6:98:9c:91:b8:a5:29:78:e2:8c:ed:a8:07:ab:a9:60:36:dd:
         48:63:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:14:02 2025 by rpki-client