Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e203131383330.roa
File:                     3230312e3233372e302e302f31362d3234203d3e203131383330.roa (raw, json)
Hash identifier:          GAXZvtdu8r1YY6bwUJp5xYR8Nn0NGLLjk2WWVGeUr7E=
Subject key identifier:   0B:6E:83:78:0C:14:E9:C4:9B:5D:7A:74:5E:66:20:B1:62:51:61:F3
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       105D6A5E55C8E96E79F63887C44722DC052501E7
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:36:36 +0000
ROA not before:           Tue 04 Feb 2025 18:31:36 +0000
ROA not after:            Tue 03 Feb 2026 18:36:36 +0000
asID:                     11830
IP address blocks:        201.237.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5d:6a:5e:55:c8:e9:6e:79:f6:38:87:c4:47:22:dc:05:25:01:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:36 2025 GMT
            Not After : Feb  3 18:36:36 2026 GMT
        Subject: CN=0B6E83780C14E9C49B5D7A745E6620B1625161F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:6a:81:79:5d:58:77:39:fb:80:e5:4f:97:
                    99:f9:27:27:f3:06:3e:01:1a:96:0a:22:1a:98:2c:
                    2f:b1:de:2e:b0:b0:d6:9a:2f:72:8c:a3:aa:f7:00:
                    53:8c:bd:e1:a4:c8:ef:a2:da:20:9d:27:f4:73:c3:
                    86:c3:b0:05:6d:5c:02:24:00:2c:78:5a:c8:61:1f:
                    38:2a:41:09:1b:0e:59:e7:48:53:fb:f5:3d:b4:7a:
                    a9:f7:cb:46:ca:df:db:79:11:2f:ec:97:72:95:6a:
                    58:f7:af:98:28:33:4a:44:91:79:b2:f0:4f:53:53:
                    32:d8:da:b8:23:60:09:10:cc:38:85:c7:3e:5c:a5:
                    f3:b9:ff:96:a1:f8:ce:79:f8:b9:63:81:09:5b:ca:
                    a6:0e:ad:22:25:98:0b:ba:42:ac:da:40:a4:28:47:
                    45:d5:e0:6b:7e:ad:7b:7b:68:1b:03:78:89:4a:0e:
                    bb:77:b1:01:c4:8c:6c:a3:41:55:2b:58:df:7b:1d:
                    a9:2d:78:94:c8:eb:d1:15:0d:21:fd:59:44:b2:b3:
                    06:46:a4:90:93:64:24:4b:57:e9:c9:87:23:fe:b5:
                    06:2f:ba:1b:98:23:fd:92:87:bf:31:58:36:b4:63:
                    bc:13:5c:d4:60:1b:4a:b2:6c:19:09:df:5d:f8:c5:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6E:83:78:0C:14:E9:C4:9B:5D:7A:74:5E:66:20:B1:62:51:61:F3
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:66:e8:20:53:4b:e8:48:df:88:8a:b9:f2:70:27:30:ab:
         ee:f0:25:87:d7:cd:bb:f5:de:98:d1:d0:ab:2e:13:71:28:cc:
         e8:a2:40:aa:26:4d:88:4a:81:eb:bc:c9:20:cc:52:ad:b2:97:
         d8:78:f8:65:e3:66:66:66:34:56:60:2e:5f:ee:a0:b8:63:92:
         38:34:fb:76:65:b0:be:24:9c:8a:34:5b:fc:6a:27:ff:6d:1b:
         c6:27:3b:e8:ea:b4:e0:6a:01:49:93:5a:7c:44:dc:a4:9d:70:
         2e:ef:f0:e9:2e:9f:6d:27:31:59:0e:0f:7e:8c:da:2f:7b:5c:
         b6:a1:d9:04:3a:0f:ab:b5:32:88:24:ee:f4:6b:19:ff:b0:ef:
         a7:26:51:64:6d:cd:3f:1f:c9:e7:0f:0d:0f:5c:e8:d5:ff:bb:
         c7:47:a9:f5:d0:88:7b:4c:7b:38:b7:82:5e:b7:8b:5d:5b:ef:
         39:e3:b1:95:64:99:70:85:2f:e2:d4:e3:26:d4:e1:46:49:77:
         f6:bb:e8:b5:cc:d6:bc:7e:27:6e:de:c2:78:77:c0:96:2d:2c:
         6f:c2:35:ae:2f:3a:a2:88:15:f6:a0:ab:8a:3a:f9:e1:74:83:
         86:24:e8:8a:0c:02:e1:5f:b7:57:2f:2d:dc:f9:cb:57:fb:09:
         e2:3f:4a:62
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUEF1qXlXI6W559jiHxEci3AUlAecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxMzZaFw0yNjAyMDMxODM2MzZaMDMxMTAvBgNV
BAMTKDBCNkU4Mzc4MEMxNEU5QzQ5QjVEN0E3NDVFNjYyMEIxNjI1MTYxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK22qBeV1Ydzn7gOVPl5n5Jyfz
Bj4BGpYKIhqYLC+x3i6wsNaaL3KMo6r3AFOMveGkyO+i2iCdJ/Rzw4bDsAVtXAIk
ACx4WshhHzgqQQkbDlnnSFP79T20eqn3y0bK39t5ES/sl3KValj3r5goM0pEkXmy
8E9TUzLY2rgjYAkQzDiFxz5cpfO5/5ah+M55+LljgQlbyqYOrSIlmAu6QqzaQKQo
R0XV4Gt+rXt7aBsDeIlKDrt3sQHEjGyjQVUrWN97HakteJTI69EVDSH9WUSyswZG
pJCTZCRLV+nJhyP+tQYvuhuYI/2Sh78xWDa0Y7wTXNRgG0qybBkJ3134xYqzAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUC26DeAwU6cSbXXp0XmYgsWJRYfMwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzIzMzM3MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDJ7TANBgkq
hkiG9w0BAQsFAAOCAQEAXHlm6CBTS+hI34iKufJwJzCr7vAlh9fNu/XemNHQqy4T
cSjM6KJAqiZNiEqB67zJIMxSrbKX2Hj4ZeNmZmY0VmAuX+6guGOSODT7dmWwviSc
ijRb/Gon/20bxic76Oq04GoBSZNafETcpJ1wLu/w6S6fbScxWQ4PfozaL3tctqHZ
BDoPq7UyiCTu9GsZ/7DvpyZRZG3NPx/J5w8ND1zo1f+7x0ep9dCIe0x7OLeCXreL
XVvvOeOxlWSZcIUv4tTjJtThRkl39rvotczWvH4nbt7CeHfAli0sb8I1ri86oogV
9qCrijr54XSDhiToigwC4V+3Vy8t3PnLV/sJ4j9KYg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:50 2025 by rpki-client