Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/3138312e3233322e3134382e302f32322d3234203d3e20323731393937.roa
File:                     3138312e3233322e3134382e302f32322d3234203d3e20323731393937.roa (raw, json)
Hash identifier:          Ptt8Q+1ct900Z9LOHQgZeg239Q+jbA4Rn+q8WijezIM=
Subject key identifier:   EC:84:44:B2:56:7B:C6:C4:84:38:50:84:6B:DB:38:85:7B:E0:76:E4
Certificate issuer:       /CN=0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1
Certificate serial:       55C77051530B2292EE621706B45948F894508FDE
Authority key identifier: 0F:FB:8C:67:99:F6:5C:48:77:26:44:EC:CE:80:00:CD:E4:E1:A1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/3138312e3233322e3134382e302f32322d3234203d3e20323731393937.roa
Signing time:             Thu 02 Oct 2025 12:25:00 +0000
ROA not before:           Thu 02 Oct 2025 12:20:00 +0000
ROA not after:            Thu 01 Oct 2026 12:25:00 +0000
asID:                     271997
IP address blocks:        181.232.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c7:70:51:53:0b:22:92:ee:62:17:06:b4:59:48:f8:94:50:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1
        Validity
            Not Before: Oct  2 12:20:00 2025 GMT
            Not After : Oct  1 12:25:00 2026 GMT
        Subject: CN=EC8444B2567BC6C4843850846BDB38857BE076E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:7b:0b:a7:8a:48:0c:cd:28:b8:7a:15:d2:
                    60:8e:72:45:5f:68:a7:56:66:24:f9:ed:5f:33:37:
                    d6:35:7a:73:ad:1b:44:73:d7:7c:c2:14:b3:46:21:
                    82:75:d6:76:45:9e:b6:e9:0e:e1:39:2b:f2:54:f6:
                    3d:64:2a:3e:bb:ad:0f:23:b7:79:54:3e:d8:9f:c1:
                    dc:7c:2a:0e:f2:df:0b:02:f5:f2:bb:16:a8:bd:79:
                    79:51:45:83:bb:aa:d6:f0:33:6c:e4:b0:6f:1f:98:
                    25:1e:ab:10:b1:75:9b:36:b1:c7:ba:17:aa:6a:4e:
                    3d:81:fb:93:75:4b:ce:6a:88:30:8b:f9:10:44:95:
                    71:65:2e:fe:51:3d:2b:6f:e9:08:37:4d:69:b4:2a:
                    3c:42:d9:e2:c8:43:cc:be:ed:37:97:46:b1:7c:75:
                    bc:79:04:f8:15:9c:80:12:5a:99:05:1f:1f:e5:ed:
                    9e:4f:50:ad:5f:c2:fe:d5:11:73:fd:f3:71:e8:2d:
                    0f:dc:e5:62:f1:f0:82:5d:e9:72:44:70:ee:2c:d0:
                    f3:17:d6:ed:8e:78:31:a6:75:22:22:b9:12:09:0b:
                    e8:89:82:fd:fb:c7:f0:df:ae:9b:38:ef:a3:cc:df:
                    61:57:06:be:be:be:6e:14:27:74:6b:79:c6:ad:2f:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:44:B2:56:7B:C6:C4:84:38:50:84:6B:DB:38:85:7B:E0:76:E4
            X509v3 Authority Key Identifier:
                keyid:0F:FB:8C:67:99:F6:5C:48:77:26:44:EC:CE:80:00:CD:E4:E1:A1:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FFB8C6799F65C48772644ECCE8000CDE4E1A1B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC87E66A9D3141F9E0B935A7757454CB7DCD31671B967686A2D72E78D6E13D4/0/3138312e3233322e3134382e302f32322d3234203d3e20323731393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:2b:87:99:f2:75:8f:9d:d0:ae:15:e7:c9:bb:48:2f:1b:17:
         1a:ca:28:64:6c:b1:ca:22:e4:92:6c:91:54:47:81:0a:d2:b2:
         32:00:30:8e:fd:b3:28:44:80:eb:f5:65:42:21:36:7f:ba:b2:
         d2:30:c5:2d:c8:ac:3e:1b:d0:bb:77:55:e1:97:ae:61:3c:12:
         4a:38:a4:fe:16:a7:98:bf:e5:4a:3c:01:a4:4b:e4:91:72:06:
         81:92:0e:40:5e:6d:fb:90:aa:75:e1:0d:b0:2e:8a:32:23:e5:
         8f:48:76:32:11:6f:bd:18:97:8a:93:2d:8a:12:19:02:8b:86:
         d0:c6:e2:46:13:69:38:82:b9:f1:df:0d:10:95:b4:dc:42:05:
         e2:4f:c6:24:c6:50:d5:b1:00:9a:89:f8:1e:f7:02:2d:13:3f:
         74:53:63:d2:73:e7:a1:36:23:68:d3:2e:21:a1:77:ea:b0:5b:
         ce:f4:b3:d5:23:ec:28:c5:bc:46:e2:f4:18:70:96:86:d7:fa:
         59:75:61:10:1c:4b:a0:c6:4e:b2:13:5e:b4:dc:ac:3e:e0:c0:
         eb:54:8c:ae:95:da:64:cb:45:b1:d6:f9:28:f3:48:ba:30:d8:
         1f:c5:7f:ac:66:ed:03:8a:75:77:cb:e4:29:e4:00:3b:10:96:
         21:c3:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:50:39 2025 by rpki-client