Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3130302e302f32352d3235203d3e203532343434.roa
File:                     3230312e3233342e3130302e302f32352d3235203d3e203532343434.roa (raw, json)
Hash identifier:          TYM8FMJdBVR14ZC6bQt9s2IhSqwu64lqe9kyz4o+qXI=
Subject key identifier:   BA:AB:3B:CB:3E:81:E6:68:62:79:39:27:02:B4:8A:D7:73:9D:3B:30
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       5BBF0C4E01834BDE4AE8EAAA8D5E510585E1504C
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3130302e302f32352d3235203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:41:27 +0000
ROA not before:           Tue 04 Feb 2025 18:36:27 +0000
ROA not after:            Tue 03 Feb 2026 18:41:27 +0000
asID:                     52444
IP address blocks:        201.234.100.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Feb 2025 23:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bf:0c:4e:01:83:4b:de:4a:e8:ea:aa:8d:5e:51:05:85:e1:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:27 2025 GMT
            Not After : Feb  3 18:41:27 2026 GMT
        Subject: CN=BAAB3BCB3E81E6686279392702B48AD7739D3B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:aa:07:35:7c:f3:dd:77:27:dc:b1:9c:02:
                    78:31:28:4a:ca:22:cc:96:9f:6d:35:24:79:e8:3c:
                    3e:de:79:cb:23:ef:33:d3:25:de:89:75:4c:3f:09:
                    3f:1f:c1:11:2d:68:ed:e5:89:c5:97:70:24:28:5e:
                    0f:b5:a1:68:a9:5b:92:06:c9:fe:6c:fe:b4:f3:97:
                    6b:e7:d6:41:bf:0a:dd:00:08:ac:a5:4f:6d:43:48:
                    f6:a5:0c:2d:65:92:99:87:ed:64:5e:c3:ee:f0:ab:
                    8a:7a:ec:a4:7a:90:39:bc:1c:13:70:14:34:0b:41:
                    cf:2d:c3:5b:7b:5f:f0:12:d0:31:7f:52:8b:e4:1b:
                    50:30:6d:6c:d4:0c:9c:00:ce:4f:06:31:d4:39:f0:
                    c9:65:25:2c:11:d1:d5:6f:56:58:16:9a:4e:66:b5:
                    c9:61:a9:4a:ec:54:a7:6d:a6:19:31:44:59:00:f2:
                    90:bb:e9:f8:ce:a6:3c:08:15:cc:da:1b:25:48:fa:
                    78:6c:86:f0:b5:43:51:3c:a7:db:98:e6:ec:14:80:
                    dc:82:de:7c:81:3d:e4:4a:76:c7:a4:4e:a9:3f:67:
                    6f:b1:7a:e9:4e:4f:d0:45:e8:e5:56:16:3e:89:be:
                    5e:99:ef:1f:dd:77:e2:b3:29:57:97:ea:3c:b6:84:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:3B:CB:3E:81:E6:68:62:79:39:27:02:B4:8A:D7:73:9D:3B:30
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3130302e302f32352d3235203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.100.0/25

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:48:03:7c:21:f3:2a:d9:22:5a:15:1a:68:26:29:11:0e:
         65:e6:d9:ff:bb:ea:76:c1:8d:29:49:98:3b:5c:87:2b:58:5a:
         2e:03:cd:cb:9f:f6:d8:8c:8e:ff:cb:80:41:95:4c:0a:6b:86:
         5a:41:60:69:b7:58:0f:bf:fd:18:51:34:7e:c4:85:3b:f8:df:
         39:e5:78:41:fe:eb:33:ba:a2:46:f4:73:d3:d7:c0:62:f0:1b:
         46:0f:d6:6f:c5:ac:58:35:65:9a:7f:de:cc:46:c3:2d:de:20:
         23:16:8f:f4:bc:fd:2d:44:93:c9:57:03:9c:aa:1a:f1:e7:cd:
         22:ca:42:6b:73:34:74:f4:08:39:3f:17:3f:7b:52:fd:08:4e:
         17:3a:69:9c:b4:1f:16:69:af:5b:f6:17:4f:62:c6:d4:a5:3b:
         35:a6:db:e4:37:bb:ac:15:8e:19:3f:2a:e4:a8:59:98:ca:0e:
         6f:3d:9b:45:f2:a7:d2:2d:9a:37:fa:82:6c:11:3c:1d:f9:44:
         5e:05:14:98:e2:a9:b8:03:6c:f7:f9:1a:0a:14:4e:4a:64:c0:
         59:14:30:79:55:d5:2b:49:bf:16:0c:d2:a9:d4:fb:84:0f:0e:
         f6:9e:90:48:0a:ef:62:9e:d4:4e:08:2f:a3:49:88:1b:8b:f9:
         1e:79:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 15:05:27 2025 by rpki-client