Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323033.roa
File:                     3230312e3232312e3132342e302f32332d3234203d3e20323033.roa (raw, json)
Hash identifier:          OOWNkTmVfnwyfUaKxKP5QBdYA7tSuQ2G+cUWb8p5eFY=
Subject key identifier:   BC:B4:DC:51:1C:AA:B9:67:F2:46:86:28:10:44:80:06:82:20:14:00
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       290A75155FC2EB6CE4C956DE9A35A5632DEF1CF6
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323033.roa
Signing time:             Tue 04 Feb 2025 18:07:17 +0000
ROA not before:           Tue 04 Feb 2025 18:02:17 +0000
ROA not after:            Tue 03 Feb 2026 18:07:17 +0000
asID:                     203
IP address blocks:        201.221.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0a:75:15:5f:c2:eb:6c:e4:c9:56:de:9a:35:a5:63:2d:ef:1c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:17 2025 GMT
            Not After : Feb  3 18:07:17 2026 GMT
        Subject: CN=BCB4DC511CAAB967F24686281044800682201400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:24:76:ec:a9:5d:c7:52:4b:16:9d:e7:aa:
                    a0:29:5b:bc:ba:ec:6f:69:71:9f:06:6a:47:bb:e8:
                    9e:ef:84:d0:0f:b1:8c:39:57:5b:6e:19:f6:31:15:
                    6d:7a:e8:2e:5c:47:f7:65:24:88:57:4d:28:49:92:
                    46:62:28:b7:c9:fd:41:b5:ff:32:14:f1:61:ea:9d:
                    e4:a7:d6:2d:6d:c5:cb:1f:eb:42:7d:64:50:1c:6c:
                    e7:e9:84:50:a8:d3:65:d3:cb:11:74:f9:dd:2b:df:
                    bd:09:23:d8:da:cc:05:27:60:5a:d8:c3:20:6b:53:
                    a2:e0:5b:07:22:c3:5f:19:a1:eb:dd:7a:ac:77:cb:
                    fc:c9:82:3f:f5:2c:91:eb:93:54:a3:14:4a:ca:70:
                    10:4b:3a:db:84:ef:62:6c:cc:a6:ba:c4:2f:8a:d5:
                    4b:cf:54:94:77:7b:d1:7f:9f:51:07:2c:01:a6:4e:
                    cc:39:c8:c9:e4:28:4a:33:67:65:ec:f1:bf:91:c2:
                    0a:2f:0e:09:10:c2:9d:8f:0c:95:3d:fa:b6:c9:9c:
                    7d:c1:56:8f:48:84:f7:14:af:4f:ce:4e:f5:a6:20:
                    ce:9a:a3:2b:65:1f:6e:c9:48:f9:3c:a4:08:63:95:
                    f6:5f:9f:93:1c:87:83:51:f1:9d:59:f4:1c:e9:9b:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:DC:51:1C:AA:B9:67:F2:46:86:28:10:44:80:06:82:20:14:00
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:32:ca:80:f6:18:2f:9f:be:de:95:05:cb:18:b9:fb:5a:9e:
         df:08:76:ae:4f:74:8d:9d:35:66:5d:37:e0:a7:8d:19:13:89:
         d3:66:da:d0:94:20:28:c8:b2:83:a7:0b:95:08:b9:34:c5:6c:
         ec:cf:ac:fa:f3:a6:f2:a1:dc:11:cb:2b:8a:29:f4:6a:65:96:
         bb:f3:d8:f7:85:db:c0:b3:14:27:20:00:10:03:94:76:56:5d:
         02:da:da:05:f7:cf:04:88:cc:60:cd:7b:43:41:87:d4:aa:9d:
         4f:80:81:f9:ec:d2:29:c0:72:d6:96:4a:64:fa:e8:4d:03:41:
         cd:1c:2c:06:4f:47:04:17:de:29:c2:6d:9f:85:35:a1:be:8c:
         39:a1:e5:b5:c1:7e:8a:6b:ec:7b:51:f6:77:2e:ea:0d:f0:e7:
         8e:e8:06:ac:92:e6:bc:1e:3d:38:c2:2a:91:80:71:30:57:c5:
         9a:26:17:dd:d7:67:fc:b4:75:d7:16:e7:a1:00:d6:66:51:e7:
         ea:ef:ba:c4:62:b0:18:29:fe:44:4f:b7:e1:35:91:e5:a8:ac:
         8d:0f:a6:a1:19:6c:a4:49:79:85:85:9e:61:be:6d:26:46:87:
         8a:ee:81:25:c2:f9:86:28:d7:1b:3b:75:b1:3c:e4:f5:9c:89:
         73:36:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:53:41 2025 by rpki-client