Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e203131383330.roa
File:                     3230312e3139312e302e302f31362d3234203d3e203131383330.roa (raw, json)
Hash identifier:          HEKTE1+hEMVzJF3DnWEKm1jhKS6UxH4+wnWlmNLTBR8=
Subject key identifier:   1E:C1:D1:EF:D2:2D:D7:0B:8C:18:5B:C1:25:04:7B:52:91:9C:22:31
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       747E242799BE21E62B70759096B985616EF2F797
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:36:32 +0000
ROA not before:           Tue 04 Feb 2025 18:31:32 +0000
ROA not after:            Tue 03 Feb 2026 18:36:32 +0000
asID:                     11830
IP address blocks:        201.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7e:24:27:99:be:21:e6:2b:70:75:90:96:b9:85:61:6e:f2:f7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:32 2025 GMT
            Not After : Feb  3 18:36:32 2026 GMT
        Subject: CN=1EC1D1EFD22DD70B8C185BC125047B52919C2231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:e0:0b:f8:21:de:66:14:39:e2:51:15:43:
                    00:ff:bf:2a:19:c5:f3:eb:15:5b:fa:f5:b5:04:35:
                    38:8c:16:a4:7e:ec:8e:a5:3d:76:5f:af:c3:0b:3c:
                    ac:8e:1b:e1:d1:6b:5f:34:a8:b5:85:0c:31:4c:97:
                    0a:c3:e7:48:17:88:62:c8:c9:72:3c:1d:c4:db:e2:
                    77:5d:2c:8c:ba:c9:ce:21:2b:67:f2:bc:45:64:d8:
                    9a:91:6d:dd:0a:1b:63:51:55:78:1a:71:57:c4:11:
                    00:bb:57:66:7f:48:25:fc:81:cf:6f:e7:54:cf:30:
                    d6:2a:95:6d:34:ed:93:55:cb:f5:c9:e9:20:d9:15:
                    48:3a:87:c9:eb:9f:2f:e9:60:06:b4:ac:b2:9a:cb:
                    93:ef:89:65:39:f7:38:dd:a8:3d:ca:f7:b0:75:d4:
                    6c:3b:2b:7a:07:0d:e0:b8:d2:9c:e0:e9:d3:b5:15:
                    69:e4:4d:e7:78:f8:23:6e:4b:8f:49:e7:5b:13:a7:
                    30:da:61:b9:f5:95:61:d2:73:56:73:64:8a:4a:0b:
                    8d:fa:ff:11:85:5a:b7:44:16:c1:86:79:1e:16:73:
                    27:da:2a:44:d3:d8:e6:42:6e:6b:c9:f7:85:f1:b8:
                    69:41:94:9e:6e:46:ab:4b:dc:f9:b8:b2:9d:7f:2e:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C1:D1:EF:D2:2D:D7:0B:8C:18:5B:C1:25:04:7B:52:91:9C:22:31
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:2e:40:8e:08:47:e9:3a:84:e3:4b:85:78:95:70:f9:fc:
         a6:f7:bc:6e:2d:f4:14:1e:c4:69:26:ca:cd:49:3b:7b:41:ce:
         10:5b:33:2b:fe:ef:07:3e:3a:40:8c:11:80:f7:d4:08:e1:5a:
         c0:5b:df:34:68:c3:f9:d8:3b:08:cf:56:cd:ed:3c:0e:97:be:
         c4:cd:fc:b4:41:0f:f1:60:3f:e1:3f:5d:0e:e4:bc:85:0c:28:
         4f:fc:ff:71:87:c9:4a:90:4d:c3:e5:8e:63:86:ee:48:bc:db:
         bd:1f:2c:22:68:00:67:e5:f6:34:2f:b0:32:d4:69:16:03:85:
         1a:c4:db:f9:b9:84:36:f0:e0:31:48:d3:7d:8e:d2:91:ac:64:
         20:89:a3:2b:74:16:ed:28:45:e6:02:57:d4:1f:37:1b:56:2c:
         c3:95:7a:db:30:bd:f2:c6:7c:fd:45:d1:ad:7b:35:8e:6f:67:
         46:79:b4:e2:05:99:af:4e:3b:f3:28:ae:f1:5d:ad:d3:1b:e4:
         df:b0:8f:2c:54:4e:3d:7a:87:08:69:b0:d8:55:7e:03:de:60:
         19:1d:16:83:64:91:98:66:f7:4d:fa:b6:75:a9:cd:2d:df:46:
         29:04:51:0a:1a:8c:46:f9:9e:10:a7:12:53:e2:03:35:52:81:
         86:97:d8:8a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUdH4kJ5m+IeYrcHWQlrmFYW7y95cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxMzJaFw0yNjAyMDMxODM2MzJaMDMxMTAvBgNV
BAMTKDFFQzFEMUVGRDIyREQ3MEI4QzE4NUJDMTI1MDQ3QjUyOTE5QzIyMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdOAL+CHeZhQ54lEVQwD/vyoZ
xfPrFVv69bUENTiMFqR+7I6lPXZfr8MLPKyOG+HRa180qLWFDDFMlwrD50gXiGLI
yXI8HcTb4nddLIy6yc4hK2fyvEVk2JqRbd0KG2NRVXgacVfEEQC7V2Z/SCX8gc9v
51TPMNYqlW007ZNVy/XJ6SDZFUg6h8nrny/pYAa0rLKay5PviWU59zjdqD3K97B1
1Gw7K3oHDeC40pzg6dO1FWnkTed4+CNuS49J51sTpzDaYbn1lWHSc1ZzZIpKC436
/xGFWrdEFsGGeR4WcyfaKkTT2OZCbmvJ94XxuGlBlJ5uRqtL3Pm4sp1/LpnPAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUHsHR79It1wuMGFvBJQR7UpGcIjEwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzEzOTMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDJvzANBgkq
hkiG9w0BAQsFAAOCAQEAlO8uQI4IR+k6hONLhXiVcPn8pve8bi30FB7EaSbKzUk7
e0HOEFszK/7vBz46QIwRgPfUCOFawFvfNGjD+dg7CM9Wze08Dpe+xM38tEEP8WA/
4T9dDuS8hQwoT/z/cYfJSpBNw+WOY4buSLzbvR8sImgAZ+X2NC+wMtRpFgOFGsTb
+bmENvDgMUjTfY7SkaxkIImjK3QW7ShF5gJX1B83G1Ysw5V62zC98sZ8/UXRrXs1
jm9nRnm04gWZr0478yiu8V2t0xvk37CPLFROPXqHCGmw2FV+A95gGR0Wg2SRmGb3
Tfq2danNLd9GKQRRChqMRvmeEKcSU+IDNVKBhpfYig==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:07:31 2025 by rpki-client