Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa
File:                     3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa (raw, json)
Hash identifier:          wHc5D/Vh7BnYbYxV5BoJ5NLLkq/kB2FG2LllmjfeJvw=
Subject key identifier:   C2:AE:37:F9:05:37:D9:61:E8:54:1E:A5:78:A1:BB:6D:CF:86:4A:CA
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5D756069A95CEE96700ED1CDD03789A8644177DE
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa
Signing time:             Tue 04 Feb 2025 18:35:10 +0000
ROA not before:           Tue 04 Feb 2025 18:30:10 +0000
ROA not after:            Tue 03 Feb 2026 18:35:10 +0000
asID:                     52500
IP address blocks:        201.182.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:75:60:69:a9:5c:ee:96:70:0e:d1:cd:d0:37:89:a8:64:41:77:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:10 2025 GMT
            Not After : Feb  3 18:35:10 2026 GMT
        Subject: CN=C2AE37F90537D961E8541EA578A1BB6DCF864ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:c1:8e:c5:86:67:7f:b7:fa:e5:4a:60:e4:
                    c7:5a:50:bb:cd:f9:30:07:94:5b:97:d4:69:14:67:
                    55:20:03:d7:7d:b3:d0:20:10:d9:34:14:63:40:5b:
                    27:f6:07:5f:0d:0a:99:f0:cb:08:4c:4e:dd:5e:41:
                    f7:1f:68:c9:e1:71:6d:50:7b:7e:6e:b7:ad:b1:f3:
                    a8:1d:25:e5:92:6e:9a:ee:cd:4e:11:41:62:50:41:
                    82:a6:33:63:fc:98:95:f6:e9:02:73:8a:a4:f1:53:
                    bb:f2:4a:23:62:39:77:f9:4e:aa:42:5d:45:59:28:
                    8c:ee:be:99:57:af:59:a1:3a:0f:aa:40:7e:8b:32:
                    c2:fc:03:6f:b9:95:55:92:97:34:69:33:a6:14:02:
                    28:bf:89:8f:a7:ea:c5:28:46:40:5f:10:9e:52:41:
                    2f:bf:f5:c9:32:3b:30:b3:6d:50:b6:5c:df:ea:59:
                    e5:5a:78:fa:85:3f:67:2f:ba:33:73:1f:da:5f:2e:
                    01:f9:46:aa:b6:9f:41:62:c9:06:af:f8:ee:cb:76:
                    0c:19:15:33:93:c9:6e:f4:90:cd:4e:48:5c:3c:ae:
                    bb:8d:01:85:b6:bd:2c:5c:e7:c4:da:df:e5:a7:40:
                    8a:3b:54:55:cd:7f:74:11:2a:18:17:d2:ea:24:48:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AE:37:F9:05:37:D9:61:E8:54:1E:A5:78:A1:BB:6D:CF:86:4A:CA
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:19:6c:9c:ee:91:3f:60:7b:5a:d9:01:c5:f5:37:46:0b:6d:
         bb:70:4d:1b:61:5a:fb:3e:65:fe:5b:cc:4d:24:3b:5b:db:de:
         d6:4e:9a:fe:4e:9a:1e:76:1f:32:e4:af:7b:18:fa:a0:31:b7:
         4b:f0:97:63:3d:4d:66:31:36:d9:8a:60:63:e1:20:f8:ac:d1:
         97:71:92:2a:33:ce:21:3b:10:46:a3:23:74:09:b8:f3:0a:07:
         5f:60:dd:b9:3c:e7:bd:28:06:45:ac:a9:94:15:50:e6:04:76:
         d5:6a:b7:84:72:b1:83:3f:53:eb:0c:51:7d:04:5e:a5:b8:0f:
         e6:28:22:1f:cd:0e:a5:3c:ac:5a:35:d1:ad:21:9b:83:67:54:
         4e:46:a9:27:a9:a3:c5:ad:2e:cd:98:60:e0:fb:7c:a7:20:da:
         35:c1:0e:20:51:33:0f:a5:a3:4a:6a:19:97:99:b7:a3:73:87:
         83:4b:e2:e9:d7:1a:c6:53:85:a7:c6:47:1b:5c:29:13:34:c8:
         22:d4:9e:50:22:33:e8:9a:31:d3:2a:a6:fc:4b:bf:c9:d4:a9:
         45:03:34:90:b7:3d:ec:bd:70:d4:d7:7b:ad:25:09:81:27:59:
         c3:df:33:ea:b4:45:07:43:31:9a:68:f1:2b:1a:04:ea:bf:e6:
         e4:96:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:25 2025 by rpki-client