Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e2033333536.roa
File:                     3230312e3139312e302e302f31362d3234203d3e2033333536.roa (raw, json)
Hash identifier:          nrpVj3uETATJ8nb2d56533u1sPkJ7W1H2wqS6qJugSw=
Subject key identifier:   24:A1:E7:2E:56:BA:F0:20:E2:2B:89:6D:FD:E2:9E:D3:D0:F1:EE:2C
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       175E525A3DAC7BFF76F4D485E4C27CCCFE90FFB6
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e2033333536.roa
Signing time:             Tue 04 Feb 2025 18:36:33 +0000
ROA not before:           Tue 04 Feb 2025 18:31:33 +0000
ROA not after:            Tue 03 Feb 2026 18:36:33 +0000
asID:                     3356
IP address blocks:        201.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5e:52:5a:3d:ac:7b:ff:76:f4:d4:85:e4:c2:7c:cc:fe:90:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:33 2025 GMT
            Not After : Feb  3 18:36:33 2026 GMT
        Subject: CN=24A1E72E56BAF020E22B896DFDE29ED3D0F1EE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:93:63:d2:ec:fd:7b:85:57:5c:e9:ac:ec:
                    da:5c:87:72:75:f5:72:17:78:79:35:9a:99:57:df:
                    a6:69:b7:a5:6c:f8:d8:cb:fa:14:99:ab:99:ef:a3:
                    00:0a:ac:af:d0:56:16:c8:08:fa:68:d9:83:5e:e5:
                    74:28:f7:18:ca:fd:34:f6:28:a5:cb:09:c0:9d:87:
                    30:c5:4e:70:27:57:da:d3:1b:ca:9f:3e:80:4a:7b:
                    b5:12:be:ab:1f:f5:0c:0e:b7:82:4e:d0:ea:a0:84:
                    1b:7e:f3:d6:02:9b:b6:37:53:e1:e4:8a:f8:b0:72:
                    0e:69:f0:4d:28:51:4e:36:6c:83:24:c4:9d:f6:f4:
                    6d:d0:1d:de:ef:98:e5:9f:6d:05:e6:82:47:ba:84:
                    5c:ee:07:6c:94:57:c1:58:6c:96:44:a7:8c:a3:0d:
                    3f:47:18:8a:c7:38:55:47:d2:26:6a:e6:e0:d9:30:
                    3f:d6:0a:0d:a5:ab:36:92:2f:29:42:37:ec:84:3f:
                    1c:8e:2d:d8:a9:6b:38:6f:73:8d:8a:6c:b6:c0:b9:
                    29:6f:fd:7a:56:49:06:8e:f6:d5:da:e3:6e:3c:80:
                    a2:3e:91:32:87:f0:31:2d:93:62:5c:16:86:7e:4f:
                    c1:0a:c8:1f:d3:5f:55:39:8a:c8:b0:da:e3:80:b4:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A1:E7:2E:56:BA:F0:20:E2:2B:89:6D:FD:E2:9E:D3:D0:F1:EE:2C
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:23:a2:63:00:0a:cd:18:48:48:33:92:3d:f8:b8:14:4b:
         28:4a:b7:72:d6:23:80:72:ec:2b:66:71:b2:d5:98:7d:02:75:
         9a:bf:eb:6a:e6:ac:40:1f:35:6f:72:dc:e5:bc:c7:13:75:03:
         8b:11:1b:21:8a:ea:a4:3f:d5:4f:06:11:1b:39:88:4d:1f:a2:
         74:c4:37:f5:f2:ff:27:ad:7e:37:52:5d:2d:22:98:1b:1c:11:
         e4:48:13:b4:9d:a2:80:9e:f1:f6:5b:5a:f1:f4:ae:fb:db:fd:
         a1:d4:be:46:7a:68:3a:14:50:93:44:bc:1d:e1:ec:d9:6d:05:
         e8:1c:90:da:0f:66:f0:22:c2:0c:c8:76:b5:f5:7d:56:ce:69:
         22:1f:33:20:5e:50:ce:6a:ca:76:64:95:62:d1:e3:a3:18:51:
         51:89:4d:9f:f1:17:54:55:35:ae:72:ba:91:18:e4:88:b3:80:
         c5:3e:03:e2:cd:c0:a8:4a:65:be:89:8d:d1:a8:b4:45:d9:5c:
         3e:62:c7:a1:6d:58:ac:ef:e0:5d:07:6b:10:de:33:d5:88:c7:
         bc:cb:0f:59:7a:46:65:75:64:ea:27:79:60:6e:c4:fc:c5:c4:
         4f:7f:fb:d4:94:79:43:af:c2:db:da:b0:bb:e0:fb:0c:fa:7e:
         bb:fe:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:16 2025 by rpki-client