Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e302e302f31372d3234203d3e203532333631.roa
File:                     3138312e3230392e302e302f31372d3234203d3e203532333631.roa (raw, json)
Hash identifier:          Q18oQQdCIRrJj43brUPp2nxAa0zlzDGD0hE73j2VSCg=
Subject key identifier:   A2:2A:32:F1:BB:C3:A6:2F:02:E2:40:9F:DA:2C:92:A1:96:52:02:34
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       76D6F46B9AD635BD62E1DDEAD216AF5D6C45D914
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e302e302f31372d3234203d3e203532333631.roa
Signing time:             Thu 24 Jul 2025 13:25:01 +0000
ROA not before:           Thu 24 Jul 2025 13:20:01 +0000
ROA not after:            Thu 23 Jul 2026 13:25:01 +0000
asID:                     52361
IP address blocks:        181.209.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Aug 2025 22:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d6:f4:6b:9a:d6:35:bd:62:e1:dd:ea:d2:16:af:5d:6c:45:d9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jul 24 13:20:01 2025 GMT
            Not After : Jul 23 13:25:01 2026 GMT
        Subject: CN=A22A32F1BBC3A62F02E2409FDA2C92A196520234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:20:d3:86:61:66:70:0c:0b:a1:1d:09:ba:
                    a0:88:ef:a0:68:38:7a:31:86:c3:21:5a:d0:fa:f1:
                    9a:c3:24:19:e4:4d:d6:53:e3:6e:46:a0:8c:dd:5d:
                    28:fc:95:1e:b3:d3:a6:22:6b:e1:b3:b3:d4:96:71:
                    d9:76:a2:9d:d4:20:3b:98:a4:69:23:cd:28:e4:b6:
                    a0:32:d9:8c:6b:ea:d0:7b:00:f8:c9:dd:bd:4f:69:
                    46:08:af:ca:9f:69:74:da:16:83:32:3f:e0:f4:bd:
                    22:eb:6c:c9:13:32:cf:df:13:5b:0d:25:24:df:91:
                    41:b2:31:91:03:57:82:4e:22:1e:a5:e4:b7:d9:32:
                    39:12:f3:6d:61:f6:67:86:3e:19:98:d2:59:ec:71:
                    67:b7:c7:f8:96:e3:7b:7d:8d:f6:96:95:d5:32:37:
                    0d:74:17:3c:7e:c1:06:30:61:a7:4d:09:12:ec:0f:
                    f9:69:21:f1:6a:99:f6:2e:c3:d1:6b:c0:3b:87:e2:
                    19:ce:5a:f5:0e:36:81:ee:64:33:79:17:40:c4:2e:
                    a5:57:1a:2c:60:9f:c5:05:04:a1:ca:de:b5:5f:a6:
                    1f:bb:76:45:a6:f5:f0:fd:13:20:ed:af:fd:18:42:
                    23:6c:8f:1a:75:e2:13:46:69:8c:fb:d0:4b:b5:60:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2A:32:F1:BB:C3:A6:2F:02:E2:40:9F:DA:2C:92:A1:96:52:02:34
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e302e302f31372d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:b4:85:18:02:9d:54:bb:e5:a2:13:85:63:6f:78:2c:c1:
         a0:1a:d4:b4:61:1a:51:dc:52:0a:d5:4f:62:60:c5:d6:20:fd:
         9c:be:e7:e5:b4:57:bb:58:fd:fa:6a:c0:1c:09:27:16:18:d0:
         4e:9c:8a:c7:14:09:b2:b6:36:74:e5:0b:48:86:73:09:72:3b:
         07:a9:a3:ef:79:12:e1:cf:e1:76:03:2d:1e:c7:e6:78:df:47:
         a3:4e:36:18:80:d0:1a:2c:89:e6:59:f2:da:0b:1f:1c:56:b2:
         00:bd:ef:03:16:6e:25:3c:f3:d0:03:28:ca:5b:9c:04:8b:82:
         98:2f:e8:1a:e3:67:a1:21:a9:a2:f2:7d:9f:7c:69:e7:46:0e:
         9c:cf:41:e8:85:c8:47:a9:f1:92:13:69:59:41:ff:45:2a:11:
         82:e7:18:be:de:0f:42:ae:14:41:ba:5c:22:0c:e0:db:6e:5e:
         1b:fa:b6:5f:ca:ee:03:d9:ed:f4:c8:ab:4f:91:3d:bc:90:e5:
         c6:a0:e7:5e:c0:be:a3:98:12:49:4c:dc:78:ec:93:a9:6e:c7:
         08:76:ca:3c:ca:b0:33:bb:49:a0:eb:c5:f0:62:3d:0c:8e:42:
         35:33:e8:a6:32:ad:ed:98:13:f0:b1:9a:fd:e6:45:66:2b:4e:
         2b:ca:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:49:09 2025 by rpki-client