Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa
File:                     3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa (raw, json)
Hash identifier:          Vqp3h8+rcTavUXPA2bt/FSZfli3j06jIFG3kltZ1wJE=
Subject key identifier:   40:6E:63:67:B7:D2:72:09:16:D9:68:F5:78:89:00:A9:90:14:97:C6
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       68014AC5D73AB09826D67706E04E9D32DC6BC08B
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa
Signing time:             Fri 15 Aug 2025 16:35:45 +0000
ROA not before:           Fri 15 Aug 2025 16:30:45 +0000
ROA not after:            Fri 14 Aug 2026 16:35:45 +0000
asID:                     272025
IP address blocks:        181.224.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:01:4a:c5:d7:3a:b0:98:26:d6:77:06:e0:4e:9d:32:dc:6b:c0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Aug 15 16:30:45 2025 GMT
            Not After : Aug 14 16:35:45 2026 GMT
        Subject: CN=406E6367B7D2720916D968F5788900A9901497C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:fd:55:e3:53:fd:5a:30:bd:c3:7d:dc:13:
                    ff:a6:8a:2e:35:ee:33:20:8c:18:75:1a:01:89:a7:
                    68:25:5b:b7:20:3a:2b:19:3c:9b:d8:93:63:91:a3:
                    78:69:ed:a5:4f:c9:4c:70:06:ee:76:09:7a:90:e4:
                    50:23:95:57:58:76:98:51:58:30:6f:16:ec:a8:b2:
                    90:b5:91:9a:c0:a2:c4:03:c5:74:7a:63:2c:28:61:
                    ea:1d:d6:8d:ca:50:1d:4d:a5:d9:ff:f2:50:f4:7a:
                    af:d7:39:ae:c2:1b:9d:7f:62:48:ab:84:14:0f:96:
                    b5:c8:7d:b1:e1:7d:6a:a6:ce:90:0a:01:f9:81:a4:
                    07:8b:1b:e6:c8:aa:e0:1e:5d:2c:0e:fa:ec:7e:f6:
                    88:84:f7:b8:a4:40:b6:17:5d:ad:c2:56:57:a9:a1:
                    3f:d3:15:31:0f:7d:4d:14:a6:fb:0f:bb:13:a1:1a:
                    85:1d:f5:01:be:99:3e:a7:70:1b:27:a6:80:51:cb:
                    80:9a:6a:e4:ea:7e:53:19:11:07:66:6a:f0:ca:1d:
                    12:e8:0f:31:4a:1e:59:6a:9f:a1:00:4f:7f:af:c7:
                    3f:1d:f8:f7:4f:b8:7b:1c:61:a9:45:91:f2:31:7e:
                    38:14:00:82:4e:7e:be:84:10:28:cd:d5:de:da:d3:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6E:63:67:B7:D2:72:09:16:D9:68:F5:78:89:00:A9:90:14:97:C6
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:48:eb:49:42:42:36:8c:48:f8:59:83:9b:34:f0:e3:62:
         69:b1:c4:ce:61:fd:a4:8e:ca:91:cc:37:23:62:03:4e:6e:84:
         79:a6:ae:a6:76:5e:65:3f:fa:2b:af:77:23:1a:93:57:59:1b:
         fe:c2:9c:0d:36:38:6c:37:f3:1a:86:05:85:ff:e4:51:9b:c8:
         d8:80:ee:a1:18:98:21:15:5e:8d:6f:ae:4c:eb:8b:17:11:71:
         79:d5:2e:1d:e0:b6:f4:19:57:67:3c:21:42:d8:b7:66:6b:63:
         d5:55:3e:d7:e7:83:44:11:5a:55:51:76:86:8d:8c:aa:d7:b3:
         67:1f:32:09:c1:8e:f9:1c:d3:2d:7d:95:f7:4a:57:33:d2:62:
         e5:b0:27:31:cb:17:14:69:af:40:98:78:59:b9:c9:db:33:2c:
         a9:04:62:d4:58:5e:af:8e:43:ab:c1:6e:14:f8:26:f7:d0:aa:
         c1:a6:7c:a6:b9:0e:c5:7c:cd:6c:3b:30:22:cd:ce:6e:a1:c7:
         f4:20:24:a7:a5:a2:3b:b7:69:88:3b:6c:f0:84:cf:6b:dc:03:
         60:1b:11:d8:b5:c9:5c:2d:6b:b6:ad:76:e7:f6:ee:5c:79:7d:
         03:c2:d4:05:7a:3c:54:36:fc:4a:23:7b:81:66:b0:bd:3f:d2:
         c4:28:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:41:58 2025 by rpki-client