Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e20323632323237.roa
File:                     3230312e3133312e3134382e302f32322d3234203d3e20323632323237.roa (raw, json)
Hash identifier:          NkhAsvSK6/+PFX83KjGgu3AalKMkixikwVdbsLWrayY=
Subject key identifier:   76:52:FD:C6:49:3E:B1:25:3A:28:CC:E9:9F:9E:E6:42:00:E4:D7:9A
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       74FC0BEA9B57470FC3E0D4848A5F856F0E2D6B54
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e20323632323237.roa
Signing time:             Fri 14 Mar 2025 14:20:01 +0000
ROA not before:           Fri 14 Mar 2025 14:15:01 +0000
ROA not after:            Fri 13 Mar 2026 14:20:01 +0000
asID:                     262227
IP address blocks:        201.131.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:0b:ea:9b:57:47:0f:c3:e0:d4:84:8a:5f:85:6f:0e:2d:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:15:01 2025 GMT
            Not After : Mar 13 14:20:01 2026 GMT
        Subject: CN=7652FDC6493EB1253A28CCE99F9EE64200E4D79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:01:77:13:88:99:7d:60:b6:c2:82:95:97:
                    84:34:50:7e:d1:9d:18:29:1d:b3:e7:da:98:3d:d1:
                    a3:6f:1c:e4:60:ae:0c:e5:51:cb:f1:0d:b0:11:cd:
                    71:2e:9b:45:2c:5f:bb:0a:8e:db:24:62:57:97:c9:
                    56:87:da:d2:d3:00:d5:10:13:ae:74:62:af:ad:2d:
                    6c:e4:05:47:6e:33:91:b8:97:1b:2c:6a:59:08:00:
                    5b:70:cb:df:23:13:46:40:c7:0b:df:f4:24:be:26:
                    8b:da:ee:b1:77:33:6f:93:fe:4c:d6:ae:1f:69:3d:
                    41:5c:f3:63:e8:f8:dd:66:86:11:74:06:ab:51:0c:
                    22:70:8f:07:fb:9c:12:31:cf:9e:43:d7:48:8e:23:
                    75:07:73:06:2c:47:c6:f2:66:51:09:7a:1d:b6:5f:
                    1b:38:f8:9e:2e:07:9b:19:79:e3:4b:86:39:36:af:
                    6d:a9:1a:cb:ca:7e:68:c2:51:ed:84:30:e1:8c:76:
                    55:8a:fd:9d:e0:34:5e:f6:5f:a8:be:78:b8:7b:29:
                    95:06:ec:33:2e:24:c2:d0:67:87:75:7f:63:bf:58:
                    0a:b1:f3:07:cf:f7:5a:c6:35:e7:5f:a0:64:38:86:
                    0d:dd:55:b5:20:4f:d8:93:f0:45:92:28:08:bc:8d:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:52:FD:C6:49:3E:B1:25:3A:28:CC:E9:9F:9E:E6:42:00:E4:D7:9A
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e20323632323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:e8:92:63:dc:be:a4:ea:cb:06:5e:16:d5:ca:2b:fa:84:
         e4:be:8c:65:64:bf:fe:de:d0:2d:ba:e1:68:a9:28:60:bd:92:
         6e:28:16:2f:4a:d6:06:aa:fe:cb:8a:60:ac:62:9b:e5:21:c9:
         dd:ec:35:21:dd:00:64:2e:2d:98:c5:4f:fc:95:37:59:d2:e7:
         ab:5d:8c:ae:74:36:db:ef:99:4f:52:a7:38:dc:ee:7a:11:4e:
         8f:4f:77:c8:e0:63:82:08:8a:72:ad:6e:c5:2a:e4:de:ef:e8:
         bd:1b:f2:ee:61:21:e7:4e:0b:4b:4b:ea:7b:37:4f:ed:8f:2b:
         3b:c0:af:f0:0a:2d:1f:26:f4:15:f7:55:9f:71:53:39:bb:f4:
         5d:bf:f3:09:aa:ba:a7:9c:2f:46:be:8d:29:25:5a:80:ed:f1:
         9e:bd:94:36:8b:f7:d2:ee:5c:ba:09:b1:ff:fe:05:5c:6c:2f:
         31:d6:64:8e:e6:22:08:20:79:1b:80:f2:43:d0:54:f0:ff:81:
         32:c2:44:4f:fe:ec:ba:27:ff:08:c1:62:38:17:f4:80:29:b1:
         63:7e:02:6a:67:30:d5:06:d3:ca:ed:42:ce:f7:eb:5c:ce:6b:
         10:78:82:c9:3b:a3:7c:aa:3d:03:68:c9:19:f1:35:50:61:f0:
         94:18:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:44 2025 by rpki-client