Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3138312e3232352e302e302f31392d3234203d3e203532323332.roa
File:                     3138312e3232352e302e302f31392d3234203d3e203532323332.roa (raw, json)
Hash identifier:          C4EiuVYZWPF6KGpGsBsBGJvEbQBnfi83szJcIAwt30A=
Subject key identifier:   E7:02:85:75:46:79:96:AE:AC:48:F6:9F:7E:A6:3B:4C:86:35:58:9A
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       0C4C8D32C3D14FFDD64157821501A989073404A8
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3138312e3232352e302e302f31392d3234203d3e203532323332.roa
Signing time:             Tue 04 Feb 2025 18:00:11 +0000
ROA not before:           Tue 04 Feb 2025 17:55:11 +0000
ROA not after:            Tue 03 Feb 2026 18:00:11 +0000
asID:                     52232
IP address blocks:        181.225.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4c:8d:32:c3:d1:4f:fd:d6:41:57:82:15:01:a9:89:07:34:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Feb  4 17:55:11 2025 GMT
            Not After : Feb  3 18:00:11 2026 GMT
        Subject: CN=E7028575467996AEAC48F69F7EA63B4C8635589A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:4b:1c:40:2a:04:93:28:f5:5e:83:fe:ec:
                    b2:d4:e1:de:4d:6c:ae:e1:2a:79:d5:03:57:ab:c9:
                    54:84:4a:19:12:99:49:f8:63:8a:00:30:9e:32:ab:
                    58:a8:ab:54:9f:98:75:2d:b9:86:ee:f5:9f:b2:02:
                    7d:2c:e8:7a:62:1d:59:e4:53:12:c3:5c:ff:47:36:
                    73:83:eb:f4:b6:14:96:34:99:0c:39:ad:49:97:60:
                    79:66:92:a5:67:37:4c:5f:a8:21:cf:a5:e9:9b:60:
                    c4:67:33:43:75:64:34:03:34:d3:45:e8:36:2d:af:
                    ff:de:2c:f5:2a:94:72:a1:ac:88:e1:10:ad:0f:c6:
                    28:7c:d0:2a:95:bc:41:bc:13:b7:7f:61:2e:9f:50:
                    30:79:c8:25:89:a9:09:36:82:dc:56:28:54:21:55:
                    a3:4b:90:08:7e:3e:9a:ae:21:68:5c:c4:6d:8a:c8:
                    7f:b8:cf:99:75:eb:d9:43:1a:e4:20:09:ec:da:2f:
                    2f:7f:2c:0c:f2:56:d7:78:f1:d1:b7:3f:17:8d:8f:
                    f8:8c:6c:de:c1:61:45:4b:30:9d:55:ff:1c:cc:d0:
                    bd:92:7b:12:d5:6c:e6:3d:0a:32:76:fe:dd:3b:fb:
                    1f:5d:7e:a0:0d:cb:d1:db:b3:9a:40:21:43:55:a3:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:85:75:46:79:96:AE:AC:48:F6:9F:7E:A6:3B:4C:86:35:58:9A
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3138312e3232352e302e302f31392d3234203d3e203532323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:61:d6:80:be:19:cc:a7:37:f0:d2:56:79:f0:52:89:5c:
         c6:1f:6e:23:51:96:5e:1c:65:a4:51:88:41:74:2e:87:d1:dd:
         bf:1b:cd:82:c4:19:33:72:1a:44:50:cb:b5:00:ee:b4:cd:13:
         ea:d2:df:52:e4:3a:9a:76:8c:d7:02:82:c5:ca:d7:91:99:88:
         7f:9c:b3:0b:d1:3d:d3:c2:f5:ba:b1:b2:47:c0:59:6e:92:a4:
         31:d5:44:02:80:c4:96:07:45:9a:ac:04:85:14:83:f3:b1:80:
         0f:f8:97:3e:b8:df:d0:34:6a:23:8c:78:2d:70:65:c0:2b:86:
         d8:ee:db:09:01:cf:d1:6e:40:1d:5f:59:ec:79:c7:f2:20:d5:
         c5:50:4a:3f:e7:6d:dc:db:48:4f:bb:1f:79:88:0d:b5:1b:f3:
         ae:29:aa:7e:e5:83:c7:03:11:fa:9c:a8:13:6e:eb:2b:a1:a4:
         c4:a9:b4:41:51:d9:34:7d:81:ea:32:2a:03:2c:e2:54:31:03:
         22:32:9a:b4:ab:8f:12:3b:65:13:51:a3:80:c3:e9:d8:ed:ce:
         42:6e:7e:b7:d1:33:1b:4f:f5:1a:af:a7:25:c0:ea:16:19:50:
         b2:3e:13:4c:40:4f:82:81:89:8a:b2:af:db:4c:ef:45:ad:07:
         61:62:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:32 2025 by rpki-client on console.sobornost.net