Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa
File:                     3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa (raw, json)
Hash identifier:          FgeLlkgYzs1mkO84lkykq51unA8y5AQLf38+dbLb9tk=
Subject key identifier:   A2:53:C9:08:B9:3A:15:35:FC:17:55:18:05:AE:94:44:AB:16:80:A2
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       42CB15CC6018EF479BF92B354CF97ACC93DEC45D
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa
Signing time:             Thu 07 Aug 2025 15:35:04 +0000
ROA not before:           Thu 07 Aug 2025 15:30:04 +0000
ROA not after:            Thu 06 Aug 2026 15:35:04 +0000
asID:                     52412
IP address blocks:        181.224.205.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:15:cc:60:18:ef:47:9b:f9:2b:35:4c:f9:7a:cc:93:de:c4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Aug  7 15:30:04 2025 GMT
            Not After : Aug  6 15:35:04 2026 GMT
        Subject: CN=A253C908B93A1535FC17551805AE9444AB1680A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:62:08:f2:c4:a8:6b:4d:e4:87:4a:8e:9b:
                    e4:12:e1:21:8b:10:33:9a:59:11:06:77:54:47:2b:
                    b4:ee:40:01:3e:69:97:c9:0a:23:95:ff:ea:f6:89:
                    82:38:8f:fb:d6:c1:33:a4:91:34:84:70:29:66:30:
                    61:6f:0d:89:44:39:1f:6a:b3:05:0b:f3:01:13:e3:
                    d1:86:95:6d:39:32:cf:90:c2:a7:90:f1:de:d7:41:
                    1c:6b:90:7e:56:88:e5:0b:3b:de:71:de:7d:b5:8f:
                    2f:6b:31:5a:71:17:ce:bc:f3:48:35:45:f0:bf:03:
                    63:2b:bd:c9:f4:90:eb:ed:0e:5b:ac:11:73:2d:0d:
                    9d:40:ed:3d:75:35:01:54:01:5c:52:4a:ca:7e:3e:
                    88:48:c2:1e:69:75:65:71:b2:e4:35:7d:2f:ec:1c:
                    ec:0f:c5:60:ca:34:fb:b5:8f:5d:8b:96:40:ef:13:
                    6a:e8:78:0f:f3:c6:6b:94:46:b8:ff:65:17:78:bb:
                    23:c4:dc:9d:bc:79:1e:7a:df:4d:3f:cf:41:68:25:
                    02:43:e1:38:17:5d:07:a4:26:d6:93:6c:3a:1f:7b:
                    37:0f:db:6d:49:1c:a0:97:bd:5e:45:7f:44:c6:e9:
                    a6:68:76:9d:9f:57:f5:ee:4e:35:32:0d:4f:41:a9:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:53:C9:08:B9:3A:15:35:FC:17:55:18:05:AE:94:44:AB:16:80:A2
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:0e:f0:8c:54:00:f3:8d:9c:08:a0:e3:fb:49:75:8d:df:b8:
         db:ad:ec:62:eb:f8:72:7f:30:e7:39:3c:82:be:05:36:be:80:
         1c:16:52:e8:b7:30:14:bd:52:6d:74:4c:f4:a1:48:73:2e:fe:
         34:ef:32:72:58:76:d7:57:11:25:86:2b:0d:d1:8b:c4:5d:96:
         c8:aa:e2:6d:6c:19:d7:79:91:ac:0e:a2:08:be:9b:85:ab:47:
         86:61:9f:f3:3c:5a:41:b8:7b:bb:52:c8:54:f0:03:b4:0e:9a:
         28:69:d3:04:56:5f:6a:7f:2c:50:d0:0b:a5:c4:f7:91:4e:8e:
         22:f9:64:a3:4d:36:97:63:a0:34:c5:5c:d3:0c:31:1f:64:46:
         93:0a:7f:ee:6a:e8:ba:c2:36:26:0d:d9:29:b2:f4:be:c2:b5:
         d5:07:e7:7d:fa:3f:c6:ef:58:91:64:a7:b4:cc:28:9d:ca:66:
         95:d3:fa:40:12:d3:9b:fd:55:04:85:16:91:f7:b4:7a:6d:8d:
         be:3a:b8:92:d2:29:48:d8:fb:a6:e3:84:72:bb:69:ae:0a:92:
         b8:f8:fa:23:2b:41:c0:2f:7b:5c:24:6d:1f:06:2e:40:8d:93:
         33:74:c7:86:06:c1:12:92:96:0f:bf:57:59:04:47:c9:f6:87:
         81:6a:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:39:06 2025 by rpki-client