Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e362e302f32342d3234203d3e20323632323038.roa
File:                     3230312e3233342e362e302f32342d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          d+DtkerBZ8TiC3r3IMwvlRTuK/chneYoSD/fIB7npBw=
Subject key identifier:   23:2B:ED:2D:BA:9E:6B:2E:2E:06:4B:A5:DE:92:78:3F:97:F9:6D:1A
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       23631A52F49521DCC879E906405A8303FD1ADDB8
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e362e302f32342d3234203d3e20323632323038.roa
Signing time:             Tue 04 Feb 2025 18:41:47 +0000
ROA not before:           Tue 04 Feb 2025 18:36:47 +0000
ROA not after:            Tue 03 Feb 2026 18:41:47 +0000
asID:                     262208
IP address blocks:        201.234.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:63:1a:52:f4:95:21:dc:c8:79:e9:06:40:5a:83:03:fd:1a:dd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:47 2025 GMT
            Not After : Feb  3 18:41:47 2026 GMT
        Subject: CN=232BED2DBA9E6B2E2E064BA5DE92783F97F96D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e9:3c:b9:f8:61:19:f6:bf:80:5d:f7:a3:9b:
                    59:f9:8c:95:f0:83:a6:06:24:fd:ff:8d:21:b1:a7:
                    58:b9:6a:c0:b0:4e:d1:7c:5f:ef:cb:dc:01:92:96:
                    02:ba:c0:0e:2f:93:d2:dc:21:ca:2b:09:9a:fc:67:
                    0c:e4:3f:4d:f2:29:2e:13:74:86:1d:fa:01:fe:43:
                    bd:ae:c9:da:ab:09:a4:94:b4:4c:db:fa:e6:a3:67:
                    4c:dc:2b:6b:1a:ad:ee:17:c5:0c:4a:70:65:a0:ad:
                    9e:99:cb:55:51:95:44:89:61:f6:bc:ed:28:5c:51:
                    fb:7f:de:27:15:66:7e:c4:8e:d8:c0:8a:5d:20:6d:
                    bd:88:1f:27:52:e2:01:a8:ee:d5:bb:fd:70:2d:23:
                    e5:bf:c2:15:59:dc:cc:15:e8:5b:73:1f:4d:8c:df:
                    a5:8b:04:bb:34:1d:18:bc:db:79:ac:0f:82:b2:70:
                    d2:fd:fc:76:d1:90:72:69:59:f4:43:53:d8:c7:6e:
                    83:9d:7f:0b:6a:da:c5:27:86:21:2b:7a:fd:59:7a:
                    0b:6c:18:a6:a9:eb:eb:60:43:2f:df:a5:d8:9b:cc:
                    50:48:22:bb:1e:0e:0d:3b:23:6c:2d:ee:11:05:ca:
                    3f:f7:df:65:b1:c4:2b:ee:dc:60:99:61:6f:6e:4d:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2B:ED:2D:BA:9E:6B:2E:2E:06:4B:A5:DE:92:78:3F:97:F9:6D:1A
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e362e302f32342d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:de:67:0c:f6:04:8f:65:94:3e:45:a7:b6:1d:e8:b1:ca:23:
         d0:d5:d5:0e:08:95:94:fe:15:51:ae:98:fa:41:73:a0:fe:47:
         d2:68:87:0b:e3:e7:aa:a2:5b:f7:b7:b5:13:0f:1f:d4:48:f0:
         32:47:00:37:73:4d:6b:7e:90:40:90:b9:a3:31:64:16:74:5e:
         f5:34:e2:f5:48:07:92:bf:bf:2a:f4:0e:52:b0:3d:de:1f:aa:
         7b:9a:cb:09:23:de:d6:4a:ce:ef:41:0c:62:9c:33:80:7d:79:
         05:3f:57:7a:b5:33:5e:a7:ef:4a:2b:2d:08:da:f9:bb:91:3d:
         6a:c6:12:82:e3:49:e8:3c:19:6e:18:05:d0:16:fe:c2:27:02:
         62:79:2d:a1:39:36:6f:16:d2:f3:f6:d9:e9:4f:17:66:70:19:
         a1:e8:f4:ef:6b:29:f5:6a:4d:48:0f:f2:e6:3f:42:08:6f:b3:
         45:72:96:18:f1:08:3e:54:7c:bc:fb:11:82:35:d5:a9:1f:ce:
         4a:58:e7:c7:71:13:34:62:fc:e0:b9:db:ab:80:e7:fb:42:02:
         ef:01:25:ac:43:8b:c4:ee:b4:3e:43:34:ca:c1:c3:4e:0b:4c:
         d4:3f:6e:e0:f4:88:14:78:7e:f4:99:a5:76:30:14:2d:58:d7:
         1f:8f:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:39:41 2025 by rpki-client