Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39302e302f32342d3234203d3e203532343434.roa
File:                     3230312e3233342e39302e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          Hy7/oGUrBuIebD1dXAHLFOC18Z2+FcAfMMZinVO0rrE=
Subject key identifier:   D8:CB:7D:FA:77:1C:BA:A1:1B:FF:51:F0:DD:9F:09:27:13:EA:12:89
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       535C31ED26A86AB282733A6D7959BBF8E594DB66
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39302e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:41:36 +0000
ROA not before:           Tue 04 Feb 2025 18:36:36 +0000
ROA not after:            Tue 03 Feb 2026 18:41:36 +0000
asID:                     52444
IP address blocks:        201.234.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Feb 2025 23:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5c:31:ed:26:a8:6a:b2:82:73:3a:6d:79:59:bb:f8:e5:94:db:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:36 2025 GMT
            Not After : Feb  3 18:41:36 2026 GMT
        Subject: CN=D8CB7DFA771CBAA11BFF51F0DD9F092713EA1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:91:66:49:ca:15:a6:68:04:75:47:68:5b:
                    b3:77:ed:83:43:46:7e:9e:a8:ce:0c:92:7a:5b:95:
                    79:31:d7:cf:19:a7:2e:80:26:38:8c:70:1d:6c:54:
                    47:7c:36:cc:c9:ae:af:cb:54:e1:66:81:77:2a:09:
                    bc:ff:a1:39:03:eb:f2:1d:4a:ee:e9:b9:27:2e:1a:
                    0b:81:a1:69:5c:a5:fa:7a:90:c1:10:9d:cb:63:a4:
                    e1:cb:91:b9:20:77:ff:78:f4:3f:54:87:b1:da:9f:
                    15:a9:0b:ba:be:76:1e:7b:0e:db:73:b0:d6:db:d9:
                    38:e8:39:c4:9c:cb:5d:8c:83:38:db:06:a9:35:67:
                    e3:97:2e:9a:a6:e7:db:c7:8e:e0:2d:47:4c:1d:ac:
                    96:b8:23:60:1f:d0:53:7c:2e:b7:54:c5:41:a3:fd:
                    58:51:9c:65:f7:9e:8a:3f:cd:86:78:a2:2c:cb:11:
                    c4:7f:11:69:dc:52:80:80:ad:1e:e1:0b:5b:a0:bb:
                    f0:2b:72:fc:f3:fa:de:82:57:f7:ac:2b:e9:3d:23:
                    ad:8b:cd:fd:38:90:4b:97:03:66:07:f0:37:b7:51:
                    81:9b:c5:72:66:8c:50:d8:07:e9:2b:61:34:e1:6f:
                    15:90:59:fb:d5:14:b1:3f:33:ef:92:8c:c0:1f:fd:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:7D:FA:77:1C:BA:A1:1B:FF:51:F0:DD:9F:09:27:13:EA:12:89
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39302e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:02:b0:16:dc:18:3d:3c:10:fe:23:5f:03:18:49:f8:35:
         d0:cc:e8:1b:86:af:66:08:90:46:4f:c4:9b:7d:82:c7:34:ee:
         42:2a:54:43:89:48:6e:51:ce:da:26:70:dc:c7:6c:d3:d4:ce:
         4d:8d:99:3c:aa:fd:41:f4:2c:66:ce:66:17:16:f4:cd:5f:ff:
         28:f1:86:f2:bc:7a:e8:06:aa:2e:af:2d:74:0a:ed:f4:9f:d8:
         0b:44:c6:74:9e:dc:b6:0d:d7:02:ab:a6:60:1f:a0:d9:eb:e9:
         61:10:53:d3:a7:69:85:e7:f7:ce:52:a9:d0:4e:2b:44:2c:08:
         b1:a1:63:26:6d:eb:fa:3c:e9:e2:4f:26:51:3a:dd:e8:4a:c8:
         ce:27:df:96:e2:3d:6e:35:20:59:d1:8b:f6:9b:c2:28:dd:a3:
         db:36:68:75:79:e6:c5:3f:51:ab:f8:ff:b2:a3:1a:24:51:16:
         c9:9f:c6:18:ac:f1:31:93:46:00:0d:ee:1f:73:b9:f7:17:4c:
         5e:83:8d:34:94:ce:8c:bb:93:b0:b4:60:6b:ac:23:52:e7:48:
         3f:30:b0:81:25:a3:31:32:6a:f4:61:a3:bd:60:99:3d:0d:ea:
         fe:ab:d8:c6:1b:6c:45:d5:9d:cf:e2:8e:44:dc:86:4c:f5:4d:
         9c:de:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 15:34:15 2025 by rpki-client