Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS271825.roa
File:                     AS271825.roa (raw, json)
Hash identifier:          NnDqNOzqz7DTwXcYLGNB67hnyK/mazym9RcEiyL8wio=
Subject key identifier:   2E:23:CE:BC:2C:ED:46:4E:19:EE:7D:D6:80:E2:A4:5F:87:84:3F:A4
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       596C52B6E9BE643AF566E6FDD9D776A5BF9D9DC1
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS271825.roa
Signing time:             Fri 15 Aug 2025 20:55:00 +0000
ROA not before:           Fri 15 Aug 2025 20:50:00 +0000
ROA not after:            Fri 14 Aug 2026 20:55:00 +0000
asID:                     271825
IP address blocks:        181.60.102.0/24 maxlen: 24
                          181.63.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:52:b6:e9:be:64:3a:f5:66:e6:fd:d9:d7:76:a5:bf:9d:9d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Aug 15 20:50:00 2025 GMT
            Not After : Aug 14 20:55:00 2026 GMT
        Subject: CN=2E23CEBC2CED464E19EE7DD680E2A45F87843FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:1a:f8:cd:73:7f:5f:53:6d:63:cd:4d:2f:
                    57:b7:52:7a:0f:99:bb:08:98:5b:de:ab:b6:00:08:
                    23:07:9e:16:de:42:78:7d:43:41:fa:1a:a4:62:ff:
                    74:0c:b6:95:3c:57:17:b8:74:db:84:d2:d5:eb:6d:
                    31:d7:44:cf:a1:a7:3d:f6:97:9e:6d:9d:c9:46:ad:
                    ea:2d:ad:ce:4f:78:d4:64:e2:bd:c6:92:6b:3b:7e:
                    7f:d9:45:78:cc:a9:ce:3b:10:ab:9e:56:cd:25:e1:
                    f5:dc:35:50:97:80:aa:e2:b1:2d:06:33:05:d5:50:
                    ca:63:43:07:da:2d:08:7a:5c:88:b1:bf:e7:d7:d6:
                    fd:79:66:e4:6e:11:d7:6d:a6:4d:72:eb:a0:8c:9d:
                    68:27:5a:0f:ee:24:2f:72:18:fb:2d:b1:45:18:16:
                    70:5a:14:b2:01:00:d3:f1:a8:bd:f3:e1:10:99:c4:
                    4b:a2:b0:43:6d:6b:8e:18:ef:58:6a:3c:4a:1d:df:
                    c5:48:6e:96:4a:50:3f:3b:d8:27:37:1d:52:66:73:
                    29:ac:3a:18:61:64:3e:b8:89:c0:10:5e:bb:2f:e4:
                    52:91:f1:9b:67:66:80:6e:1f:af:8b:52:db:19:89:
                    6f:aa:2b:7c:28:4c:16:4a:1d:f2:f1:4d:5f:48:4b:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:CE:BC:2C:ED:46:4E:19:EE:7D:D6:80:E2:A4:5F:87:84:3F:A4
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS271825.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.60.102.0/24
                  181.63.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:14:0f:18:0a:50:4d:3a:ef:a6:09:3e:88:34:dc:fd:e0:b0:
         30:9f:ed:94:9c:9a:38:7f:dd:56:64:53:fc:22:26:36:3d:41:
         c6:a6:cb:6f:3a:ee:f5:a8:29:99:b2:ed:cd:d7:13:51:3c:82:
         98:ba:88:96:30:9c:f5:c1:b5:7d:12:65:76:88:2a:c6:63:db:
         a2:ba:dd:8f:18:03:0e:f3:80:ca:9b:58:f3:40:99:93:ae:8b:
         82:c0:4c:52:e7:88:ff:30:99:3d:a9:ad:59:96:bb:cd:60:00:
         d8:56:06:da:dc:1a:de:d2:5d:6b:10:ec:6a:ce:36:fa:4b:9b:
         f0:8e:16:b5:89:24:2f:b6:98:6e:6d:3b:a8:22:a7:1d:e4:51:
         15:94:6e:f9:d6:c4:f4:3b:1a:85:e6:a4:3b:53:5d:d4:68:76:
         fe:c0:7f:f0:53:8b:04:5a:34:0b:c2:45:cf:46:c9:92:63:09:
         e0:92:43:aa:4c:b8:a6:db:d2:52:80:45:fb:5b:74:62:84:23:
         55:d2:5c:d0:3d:5e:e9:65:d0:87:d4:14:51:e3:5e:17:18:55:
         3c:72:92:39:6f:80:82:ac:f2:8d:86:4b:b7:6f:5b:13:36:86:
         f4:79:a7:c0:1f:57:c4:2b:f7:38:66:f5:24:d6:d4:ca:9c:c2:
         72:d8:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:59 2025 by rpki-client