Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37342e3137362f33302d3330203d3e20323639393935.roa
File:                     3138312e3230392e37342e3137362f33302d3330203d3e20323639393935.roa (raw, json)
Hash identifier:          Y4lJv40Nga5yPL9dfzHtn5Pks7fChFePJieM0vjN+oA=
Subject key identifier:   BA:2F:B6:DF:29:79:3E:AC:84:FE:FE:D8:15:6B:14:A9:75:C5:57:B1
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       D2430CC8D7BF6DB4C42646013191773C68AF8C
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37342e3137362f33302d3330203d3e20323639393935.roa
Signing time:             Mon 04 Aug 2025 15:50:00 +0000
ROA not before:           Mon 04 Aug 2025 15:45:00 +0000
ROA not after:            Mon 03 Aug 2026 15:50:00 +0000
asID:                     269995
IP address blocks:        181.209.74.176/30 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Aug 2025 22:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:43:0c:c8:d7:bf:6d:b4:c4:26:46:01:31:91:77:3c:68:af:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Aug  4 15:45:00 2025 GMT
            Not After : Aug  3 15:50:00 2026 GMT
        Subject: CN=BA2FB6DF29793EAC84FEFED8156B14A975C557B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:91:bc:84:ef:42:3a:26:fd:38:9d:0d:da:
                    94:05:5d:1a:95:64:98:d0:4d:fb:01:78:d9:ac:73:
                    b2:1d:ed:87:4a:19:e0:33:17:97:b0:37:df:7b:df:
                    e2:a4:56:97:ee:f0:9b:32:25:a0:c8:09:19:1d:99:
                    b5:03:21:f0:25:83:e5:28:1e:8a:99:b1:1a:81:d3:
                    90:ca:97:80:03:98:c6:25:62:e5:53:95:24:83:77:
                    73:96:49:b1:28:99:64:b2:b3:94:c1:32:24:d2:09:
                    0d:d0:11:0c:12:72:cd:c9:36:ca:95:c2:19:5e:e0:
                    09:20:29:a9:5e:e9:1d:8e:c5:7c:01:d9:5e:75:e3:
                    e3:36:8b:e8:ff:fa:bf:16:57:af:38:d2:00:bf:b7:
                    6b:b6:f2:24:cf:3c:74:2e:1b:4c:b4:ca:03:9f:b4:
                    1d:27:97:b3:86:66:8b:0a:a8:94:e0:d8:6b:1e:2d:
                    7f:34:47:71:c0:6b:16:c5:ba:c9:db:65:9a:6e:7d:
                    d0:97:f9:ea:4f:93:56:9d:ea:f4:18:8e:d3:81:e2:
                    be:c0:96:ad:8a:e7:f5:23:0b:e7:6f:21:05:cd:c9:
                    83:34:e4:0a:4c:77:7c:a2:1b:30:4f:40:6b:80:35:
                    c2:d8:54:15:60:2a:b9:bd:83:f7:84:05:75:d9:63:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:B6:DF:29:79:3E:AC:84:FE:FE:D8:15:6B:14:A9:75:C5:57:B1
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37342e3137362f33302d3330203d3e20323639393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.74.176/30

    Signature Algorithm: sha256WithRSAEncryption
         7a:4b:db:ba:68:0d:d3:81:e0:3a:12:51:cb:07:19:8d:9a:45:
         e2:f9:7c:c3:8f:85:e8:b3:11:d0:c0:2c:09:ed:4d:1a:4e:58:
         77:12:7f:7e:1f:88:69:50:d1:b4:c4:bf:64:fa:99:ee:0d:1d:
         70:ec:e3:ca:36:70:3a:25:9e:6a:5e:0a:2b:55:49:d8:68:a7:
         db:ae:ba:a2:d0:9e:67:ca:50:f1:91:ad:61:1d:ac:a2:62:3c:
         2e:1a:a7:14:9c:df:6d:80:9f:3b:fa:c3:e4:47:44:7f:59:61:
         17:27:45:6f:c6:cc:3c:fb:2e:5c:fd:c6:93:5f:28:5e:3b:71:
         09:90:3d:8b:6b:b7:85:b0:53:c3:3a:cc:4d:03:c1:00:db:12:
         4d:83:c0:c4:c8:1b:44:da:08:ed:ad:0e:11:05:ec:b7:89:31:
         95:f8:2b:90:f9:f1:65:f9:e2:1c:da:76:a3:d5:2b:c8:fb:4b:
         d5:cb:07:0c:ee:83:77:c5:35:dd:22:67:ad:ab:f2:f8:6e:51:
         11:0a:84:1d:4a:7b:55:56:f8:10:bd:cb:1e:86:05:2c:cb:01:
         10:bb:82:35:ca:44:39:d0:2b:af:c2:e5:08:e7:44:c4:90:fa:
         2f:b2:c1:c1:e0:42:42:7f:48:a8:84:3a:91:f9:28:6d:c5:0f:
         da:46:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:46:02 2025 by rpki-client