Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e382e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e382e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          iTHPuxWlK6oc+vkcNCFt8b4vhGGFgHg8KxHOzuDuEXA=
Subject key identifier:   2C:E6:CE:5A:9F:B6:71:06:BB:99:78:93:3F:35:DA:DB:BE:24:49:83
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5A247458917A3C17E34BF294842CB756B331C2D3
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e382e302f32332d3233203d3e2033383136.roa
Signing time:             Wed 07 May 2025 22:20:00 +0000
ROA not before:           Wed 07 May 2025 22:15:00 +0000
ROA not after:            Wed 06 May 2026 22:20:00 +0000
asID:                     3816
IP address blocks:        181.174.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 04:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:24:74:58:91:7a:3c:17:e3:4b:f2:94:84:2c:b7:56:b3:31:c2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: May  7 22:15:00 2025 GMT
            Not After : May  6 22:20:00 2026 GMT
        Subject: CN=2CE6CE5A9FB67106BB9978933F35DADBBE244983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:02:2b:d3:1d:e7:a3:91:c1:74:be:52:a0:
                    e3:d9:17:e2:38:2c:91:f7:a8:ea:a1:14:bc:c7:7e:
                    3a:41:5d:57:50:9d:5e:e1:cb:d2:27:58:9a:e4:2d:
                    94:66:f3:05:85:4e:26:b6:31:7a:5f:83:d2:b2:0d:
                    d2:e2:0b:5b:86:97:12:32:0b:4e:19:36:87:da:a8:
                    91:df:b6:25:2e:eb:9f:bf:b7:08:10:d7:da:a7:b6:
                    8f:03:f0:0f:d9:9b:72:a5:d9:2e:8f:8a:b7:ab:44:
                    da:34:0e:bf:bc:83:c0:0c:c1:96:10:54:b9:9c:aa:
                    a7:16:aa:97:07:23:46:5d:4a:e3:42:6f:bd:76:ae:
                    5e:77:c3:6c:68:6c:a3:f3:64:f3:54:5c:4c:ca:ca:
                    71:03:32:6f:d1:74:6d:5d:7c:fd:ab:78:87:4f:18:
                    16:77:5d:7c:51:09:65:75:75:36:17:ec:a2:38:99:
                    4d:c1:7f:dd:1f:92:40:bc:80:80:e2:f5:f2:24:2b:
                    0d:68:b3:93:d6:5f:98:59:a7:a2:a6:2e:61:5e:40:
                    05:2e:b6:c2:b7:b2:c3:31:e0:af:5a:ca:fc:d0:11:
                    90:b6:6d:a3:2b:fb:14:2d:8a:49:5f:7f:8a:c3:cd:
                    ff:79:09:47:ef:a3:88:d4:3c:1f:14:f1:4f:95:d2:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:CE:5A:9F:B6:71:06:BB:99:78:93:3F:35:DA:DB:BE:24:49:83
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e382e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:90:29:3b:12:27:94:91:f4:d5:86:7a:45:b6:a3:38:f3:
         2e:7e:2b:60:e7:27:b3:c6:75:af:5a:27:a9:b3:4f:ba:73:75:
         23:90:2e:3a:78:07:d6:ea:79:a4:3d:c1:7a:01:80:09:06:f4:
         97:5a:61:8c:97:ae:f2:f9:94:c8:c4:d9:97:40:d3:0d:ae:c7:
         68:63:97:f5:ec:0a:d0:5f:45:16:33:5b:80:e3:2d:f6:c3:44:
         17:de:eb:28:8c:22:51:f5:bf:59:39:7e:8d:52:36:e2:e6:f4:
         6f:6e:fe:6a:f9:c8:1b:11:1b:34:6c:43:bd:fe:56:f9:9e:0d:
         4d:78:38:aa:ad:2f:c0:7b:81:c1:ff:06:7e:01:fc:ec:4b:09:
         50:71:15:4c:59:fd:66:63:87:ad:7b:f7:4d:97:8a:65:2f:80:
         cf:b2:d3:8b:d1:a1:c0:c2:93:6d:73:92:0e:aa:68:f1:33:c3:
         5a:2c:08:26:fa:6a:94:c4:c3:7c:86:f7:08:cb:ef:05:13:a1:
         a8:cb:62:24:af:7b:2a:70:17:d3:26:56:f7:36:81:44:0e:1a:
         be:db:39:b9:70:ca:05:f0:c5:9f:da:0e:0e:92:02:21:f4:5f:
         6c:aa:3d:3f:c4:3e:55:07:0e:78:c0:44:c4:95:da:7b:db:bf:
         12:b1:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:03:31 2025 by rpki-client