Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32342d3234203d3e20323732303235.roa
File:                     3138312e3232342e36342e302f32342d3234203d3e20323732303235.roa (raw, json)
Hash identifier:          qMBNAvvFIyvREFsCgcHpCKsK73Fa4+zjCgqcpaKmpPM=
Subject key identifier:   4E:AF:09:57:BB:A4:7A:B6:07:F3:C5:AF:E1:41:0A:BE:1D:3E:F3:90
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       045384AE610B133A32605ED53A1A6A40D273957B
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32342d3234203d3e20323732303235.roa
Signing time:             Fri 15 Aug 2025 16:35:45 +0000
ROA not before:           Fri 15 Aug 2025 16:30:45 +0000
ROA not after:            Fri 14 Aug 2026 16:35:45 +0000
asID:                     272025
IP address blocks:        181.224.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:53:84:ae:61:0b:13:3a:32:60:5e:d5:3a:1a:6a:40:d2:73:95:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Aug 15 16:30:45 2025 GMT
            Not After : Aug 14 16:35:45 2026 GMT
        Subject: CN=4EAF0957BBA47AB607F3C5AFE1410ABE1D3EF390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:59:74:e3:d8:9a:3e:6b:5a:f4:73:85:da:
                    c1:ff:6f:19:04:7a:12:87:cb:f1:a9:49:ed:10:ff:
                    84:fc:be:c1:59:ce:b0:25:f6:9e:0e:36:dd:15:a6:
                    04:6c:d2:8f:b0:bc:6a:f5:32:cf:f9:45:5c:b3:f7:
                    a1:f1:76:1a:7f:2f:c4:71:ff:96:fb:e3:43:6f:3f:
                    8e:4b:89:2d:2b:cc:8f:ce:26:7e:bb:ee:3c:bd:2f:
                    e1:ae:26:65:c4:73:8b:da:9e:95:b0:56:1a:53:79:
                    8e:2b:a5:fd:d1:7a:b9:f8:81:f3:4b:54:7f:17:ee:
                    15:92:8a:a4:5e:6a:b9:06:8e:85:b3:4b:fd:c7:87:
                    26:f3:01:da:fd:a6:11:83:8d:d0:67:7f:ab:94:0e:
                    a8:51:26:53:21:98:ac:64:ff:77:10:53:62:bc:b3:
                    8c:69:56:3f:33:1d:12:71:34:b5:8a:1b:d6:b4:bb:
                    5a:5d:6f:19:eb:0a:f9:a4:83:f5:7e:57:f6:a7:d9:
                    35:bf:09:e7:3b:d8:56:89:53:63:b2:eb:db:1f:55:
                    66:c6:1d:9c:2a:28:9c:1d:a5:c1:34:38:fc:37:a7:
                    86:14:8a:6b:c7:93:92:cd:ef:d2:7c:d1:0c:5d:42:
                    b2:d7:cc:5f:6e:e6:5d:82:c2:2d:51:71:70:ca:90:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AF:09:57:BB:A4:7A:B6:07:F3:C5:AF:E1:41:0A:BE:1D:3E:F3:90
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32342d3234203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:38:db:82:94:35:eb:11:75:6a:a7:12:03:4f:7a:ec:c8:21:
         38:23:56:03:d0:df:50:2a:de:fa:c2:59:2e:29:41:5d:72:2f:
         74:fd:5b:ec:27:aa:ae:3d:46:21:0d:59:19:01:e9:b3:87:9e:
         3f:5b:18:58:9c:29:97:cf:6c:e8:c2:da:ce:c2:34:7b:5e:9a:
         de:54:b6:3e:8a:6a:ff:ea:7d:75:9e:23:df:d5:fe:7e:da:d3:
         3b:35:43:e5:23:6a:50:b8:74:06:db:4e:0a:04:77:d6:34:ef:
         a9:a4:5d:fd:23:19:ad:1c:d6:bb:54:65:8c:73:fc:fe:15:2d:
         85:fe:7f:6b:6a:74:4f:f8:af:b8:e3:41:c9:5b:2d:53:ab:ea:
         fe:23:23:9d:11:a7:28:52:ac:e3:3c:a7:fd:0b:88:a0:52:ad:
         17:c2:3c:99:61:70:10:30:df:37:68:92:18:aa:47:ae:03:fe:
         82:51:b9:ba:9e:cd:12:30:47:da:5f:4d:6d:a1:d3:17:f1:e8:
         9a:c9:e1:b5:48:af:f6:a0:8b:dc:09:68:0c:cb:0e:c7:73:8a:
         fb:68:db:76:89:14:ad:4c:a5:af:7b:28:ca:96:c7:fd:0a:6f:
         1b:ca:06:61:c8:19:25:1c:ff:97:25:4c:fd:eb:09:14:d8:ca:
         b7:0b:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:36:20 2025 by rpki-client