Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa
File:                     3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa (raw, json)
Hash identifier:          6geeu3baxjY0vSNlblxZObEy0M9SJcXQhyo3wGlwKsA=
Subject key identifier:   57:2E:1C:7E:F0:AE:B8:E6:B3:53:02:46:7A:22:FB:AD:4C:00:69:0B
Certificate issuer:       /CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
Certificate serial:       3FD21E76D2FD7DACB36D566541C4BDD52B1FA6EE
Authority key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa
Signing time:             Tue 13 May 2025 03:18:37 +0000
ROA not before:           Tue 13 May 2025 03:13:37 +0000
ROA not after:            Tue 12 May 2026 03:18:37 +0000
asID:                     265714
IP address blocks:        181.114.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:1e:76:d2:fd:7d:ac:b3:6d:56:65:41:c4:bd:d5:2b:1f:a6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Validity
            Not Before: May 13 03:13:37 2025 GMT
            Not After : May 12 03:18:37 2026 GMT
        Subject: CN=572E1C7EF0AEB8E6B35302467A22FBAD4C00690B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a3:9e:f6:c8:62:91:bb:58:ca:74:6d:db:a1:
                    93:f6:fb:cb:82:83:8b:83:c9:f6:61:7f:69:2f:9a:
                    ff:35:8f:71:1a:22:6d:29:43:71:ed:2b:d2:e5:f3:
                    56:79:12:93:e0:55:2e:80:9a:c7:cd:d2:be:47:3f:
                    19:b5:62:2c:c9:c4:ee:8f:10:d6:b5:d9:65:65:1c:
                    78:22:f2:c4:ef:9e:89:28:bf:62:f4:5d:b4:dc:76:
                    58:70:76:76:6b:4a:d5:cf:44:ae:09:18:53:5d:d2:
                    3f:88:73:26:47:d9:79:28:76:81:91:c7:97:9c:2d:
                    ac:6a:a4:62:fd:07:7e:87:a5:cc:7f:e3:3d:e9:48:
                    c4:f7:8b:37:a9:2e:94:b1:c3:5f:5c:04:57:ed:3c:
                    98:9f:a2:d7:35:d8:da:83:9c:a1:1e:ed:d3:a6:eb:
                    20:cf:1a:18:6c:49:7b:ae:dc:ba:89:52:58:da:20:
                    31:11:54:62:d3:9e:82:50:e3:01:6c:94:8d:c6:2c:
                    ed:f1:52:11:36:c6:41:58:4c:6d:bb:bc:5d:c8:6a:
                    c2:ee:d8:4f:8c:39:16:15:5b:57:ab:32:5f:89:9d:
                    12:61:32:30:9d:fc:a3:02:f2:ed:a5:d5:07:3d:51:
                    c3:f5:42:53:7d:1b:ad:1d:db:fc:9d:a8:46:93:eb:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:1C:7E:F0:AE:B8:E6:B3:53:02:46:7A:22:FB:AD:4C:00:69:0B
            X509v3 Authority Key Identifier:
                keyid:94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:ac:35:54:98:2d:54:e8:eb:e1:b2:97:7b:22:25:14:f4:
         cb:8f:f8:3f:92:74:5d:af:c4:f2:31:c8:7f:b7:78:c6:a3:52:
         0b:8c:38:50:4c:74:a8:70:10:03:d4:f6:3f:2f:5f:cd:59:18:
         f6:8f:a0:b5:53:24:dc:ab:d6:e0:b1:11:c2:48:55:41:f0:70:
         7e:e8:8d:45:d4:b1:bb:97:bc:07:7e:25:a4:83:eb:71:3a:a9:
         06:bf:ee:6f:71:7d:00:e6:dd:f5:a5:2b:22:67:a5:25:6e:5f:
         99:72:4a:f2:78:77:b8:ce:47:45:b6:c8:20:67:f7:f8:be:c1:
         a9:4f:78:8b:fd:0a:9c:c5:71:07:9f:96:fb:65:ca:35:46:98:
         ba:05:89:3e:11:c0:57:57:97:0b:70:d6:ec:05:2c:66:a6:53:
         a8:4b:1a:9b:c9:ef:8c:81:f7:52:4a:38:4c:48:fc:7b:65:a0:
         5a:6e:72:32:39:94:ad:ea:29:8e:f3:4c:95:21:85:fd:c6:97:
         29:87:73:46:17:bb:be:e5:cf:1f:06:64:ed:58:4b:17:84:4d:
         45:2b:3c:36:a9:e7:a9:e1:99:3f:08:48:fb:db:cb:1c:2f:dd:
         13:d1:55:bf:1a:34:ac:c3:bc:be:88:53:cf:a7:db:6e:48:11:
         79:e6:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:28:08 2025 by rpki-client