Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230372e302f32342d3330203d3e203532343132.roa
File:                     3138312e3232342e3230372e302f32342d3330203d3e203532343132.roa (raw, json)
Hash identifier:          dksWCkS1P7DxqVa36YIfgdb6QTnHQ4LmXfySVSECx+E=
Subject key identifier:   EB:7F:49:DB:2C:92:3A:CD:0E:55:23:C6:E3:75:90:5F:64:E1:A2:50
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       4C4AC426E45A2E9DC73A011C12CEA72F5A919E58
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230372e302f32342d3330203d3e203532343132.roa
Signing time:             Thu 07 Aug 2025 15:35:05 +0000
ROA not before:           Thu 07 Aug 2025 15:30:05 +0000
ROA not after:            Thu 06 Aug 2026 15:35:05 +0000
asID:                     52412
IP address blocks:        181.224.207.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4a:c4:26:e4:5a:2e:9d:c7:3a:01:1c:12:ce:a7:2f:5a:91:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Aug  7 15:30:05 2025 GMT
            Not After : Aug  6 15:35:05 2026 GMT
        Subject: CN=EB7F49DB2C923ACD0E5523C6E375905F64E1A250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:09:d6:46:7c:79:d6:e8:a7:8d:5c:91:fc:
                    9b:8e:e0:5f:d4:d8:5c:dd:60:ce:68:12:c0:b5:28:
                    f1:be:0c:ca:d8:6a:4b:c1:2d:d3:0e:3d:e3:ee:0b:
                    8d:84:e4:71:31:47:e4:08:fe:65:42:41:58:80:ef:
                    33:4c:49:ae:68:f7:72:fa:21:6b:1a:f2:83:27:c2:
                    84:fe:04:fc:64:43:11:7c:19:65:e2:da:51:da:3e:
                    f7:e9:7d:ab:13:0c:0e:37:92:35:0f:0c:b3:5a:16:
                    90:70:5c:9f:85:12:48:6a:1f:7e:b2:f8:26:87:94:
                    c5:37:96:55:2a:cc:7f:90:3e:7c:ca:fd:b7:7d:d6:
                    9e:73:07:00:34:ed:0b:30:3d:78:5b:23:8e:a2:19:
                    ab:25:6b:03:fc:5b:b0:d4:05:1e:3b:5d:8a:e2:01:
                    7d:44:1e:fa:1a:f6:4a:51:60:33:b1:7b:0a:af:77:
                    d3:67:08:ea:4b:e5:c3:80:3e:02:84:93:d8:0b:12:
                    09:eb:8c:da:7d:e9:55:a8:c8:71:68:e6:f1:29:e2:
                    30:65:63:f5:e0:a5:56:75:df:e1:16:ae:3c:bb:10:
                    7d:ed:c2:66:5a:35:80:9f:ae:68:6a:d7:89:40:c3:
                    74:08:f1:06:d4:3e:b3:32:cc:38:7a:f8:5c:80:92:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7F:49:DB:2C:92:3A:CD:0E:55:23:C6:E3:75:90:5F:64:E1:A2:50
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230372e302f32342d3330203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:05:fd:7c:e3:1b:21:bc:bf:1b:75:98:38:bf:67:e2:a1:71:
         09:57:b6:af:b6:8f:0f:16:fe:9c:cb:79:57:e9:a1:c5:ac:c6:
         71:eb:82:f2:8f:ab:57:68:32:10:e5:55:ef:5a:47:0c:a6:6e:
         ee:bc:73:34:a7:be:48:7a:e6:5f:02:97:d7:d7:7d:f4:1f:f6:
         7d:1e:da:d5:23:a4:3d:78:38:0a:42:7d:63:5f:16:9d:19:d0:
         77:38:ed:db:a4:0f:62:ff:c0:08:53:68:67:1a:4d:36:5d:a1:
         59:7a:79:64:0a:a5:04:ec:34:fc:47:b4:10:ab:a2:64:62:b5:
         0e:10:c1:cf:dd:5f:e8:b1:a9:4c:f5:d9:67:6f:76:65:e6:18:
         fe:31:4f:7f:b8:5c:25:94:a0:3c:5d:26:41:ea:6c:9a:c6:05:
         80:02:e8:c4:79:b8:f9:69:fa:e3:ac:84:89:b8:27:be:12:ee:
         55:f9:2e:7b:e1:7b:30:d3:9a:3a:ba:30:47:b4:81:85:c8:e8:
         f1:9d:f1:2d:06:b7:c3:ef:9e:73:5a:47:5d:ae:32:fa:bb:7a:
         6a:30:46:e7:a4:72:92:9d:b5:a4:25:27:b8:d2:c5:f7:3f:c4:
         ce:b9:24:bf:82:fb:32:78:19:ef:75:fb:94:47:28:94:da:6f:
         0e:af:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:40:05 2025 by rpki-client