Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e34362e302f32342d3234203d3e203532343434.roa
File:                     3230312e3233342e34362e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          GmXHNqVUJU3Vca4kkHhqtPdhQO7t7CVafdl9fW6c3ww=
Subject key identifier:   63:67:28:E1:2B:17:DA:98:51:D2:A9:23:D1:52:C1:F0:67:82:B8:BE
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1200384E87500A9A0F44D253BD532BA7C42FB032
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e34362e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:41:30 +0000
ROA not before:           Tue 04 Feb 2025 18:36:30 +0000
ROA not after:            Tue 03 Feb 2026 18:41:30 +0000
asID:                     52444
IP address blocks:        201.234.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Feb 2025 12:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:00:38:4e:87:50:0a:9a:0f:44:d2:53:bd:53:2b:a7:c4:2f:b0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:30 2025 GMT
            Not After : Feb  3 18:41:30 2026 GMT
        Subject: CN=636728E12B17DA9851D2A923D152C1F06782B8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:6b:d0:ad:d0:3c:d8:49:8a:b4:8e:a4:72:
                    03:47:5b:42:47:0b:e6:e6:dc:16:24:23:09:4d:90:
                    53:cd:fb:26:b8:06:ab:05:54:bb:87:0a:ff:70:c1:
                    d5:32:a2:c3:07:6c:a8:6b:e4:c4:30:b0:e0:9c:5b:
                    a9:44:26:50:1b:ad:f9:47:de:a2:75:f1:5d:77:f2:
                    f2:5c:1a:b1:24:56:e9:ad:48:c1:1a:72:6c:0e:08:
                    ff:09:1f:6b:3b:32:18:b8:8e:31:5e:34:5c:9f:4d:
                    6c:b6:9f:2c:d2:80:cb:5a:e5:42:36:9d:ca:c0:0e:
                    87:bc:71:4a:e0:d4:db:4a:2b:01:32:1a:01:d3:22:
                    52:20:bc:a9:16:74:27:74:32:43:4c:01:e1:ba:8d:
                    a8:49:d0:a7:c5:31:c9:e9:a8:f7:52:27:26:9b:42:
                    d4:51:37:a8:2f:66:b2:b6:9d:96:ce:af:92:7e:69:
                    00:f7:4e:b1:7c:de:6b:b1:f9:e5:35:5f:49:7b:43:
                    b7:c2:b1:25:c2:ab:28:87:dd:ec:cc:d9:4b:7d:1e:
                    72:fc:10:6e:ad:7d:10:95:1f:09:3f:be:51:9d:31:
                    74:0c:5e:60:3e:d0:b7:30:5e:f6:59:da:4c:3f:cf:
                    7e:c9:aa:26:32:a0:b6:00:72:fe:96:0b:d5:43:b9:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:28:E1:2B:17:DA:98:51:D2:A9:23:D1:52:C1:F0:67:82:B8:BE
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e34362e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:41:3d:44:2c:57:d2:09:ce:56:2b:46:1f:18:2b:f7:50:9d:
         b8:4a:f7:e9:36:34:5f:d8:06:3f:24:99:87:99:49:bb:a6:1b:
         8b:e9:a1:46:d0:d8:0b:99:ae:b9:21:33:00:b9:40:2c:fb:be:
         a8:c4:d6:52:2a:eb:86:cc:4b:77:4f:b0:0d:be:ff:85:8b:75:
         9d:bb:7e:bd:9e:c5:1b:bb:c1:8a:51:81:56:28:79:0f:0e:f6:
         d3:f6:1d:b4:dc:c7:eb:d5:02:ac:4b:e9:7b:4a:d3:2a:10:6f:
         25:aa:99:96:75:a6:8a:58:d9:a8:cc:92:9b:5d:a1:49:4a:7d:
         bf:f5:12:4a:75:28:14:47:c5:fe:88:61:9d:0e:6a:b1:70:4f:
         0e:91:9c:29:1d:51:7f:5e:a6:ff:f9:5e:3b:59:75:f6:2a:d4:
         33:50:23:dd:ab:20:53:02:47:c1:56:24:f4:5a:33:3f:e9:0a:
         0c:94:c5:3d:3e:d0:93:d7:81:ee:0c:3e:88:19:9b:6d:da:1b:
         32:ca:0f:6d:7d:8e:b4:79:53:79:18:86:53:be:5f:bf:8b:55:
         fa:a6:8d:87:ca:61:67:df:04:5e:2b:9c:1c:c5:99:bb:c9:af:
         34:e3:0d:7f:3b:a3:47:85:7c:0c:12:37:32:53:8f:be:40:c3:
         6f:40:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 13:43:19 2025 by rpki-client