Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3233203d3e203237383137.roa
File:                     3230312e3133312e39302e302f32332d3233203d3e203237383137.roa (raw, json)
Hash identifier:          OmA3GwzBT2forB5Zc9k5Ujk52rn83P8pX5Dx0G+SPQU=
Subject key identifier:   A2:38:87:EA:43:7F:6A:A2:1A:0A:23:45:6F:4E:BC:98:FA:DB:EA:C8
Certificate issuer:       /CN=08A26042015ED7345A25228336BD6FF1618453BC
Certificate serial:       053E029BFD7FD1DCAF3EB012AD13678A5ABF8CB4
Authority key identifier: 08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3233203d3e203237383137.roa
Signing time:             Tue 04 Feb 2025 20:03:15 +0000
ROA not before:           Tue 04 Feb 2025 19:58:15 +0000
ROA not after:            Tue 03 Feb 2026 20:03:15 +0000
asID:                     27817
IP address blocks:        201.131.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3e:02:9b:fd:7f:d1:dc:af:3e:b0:12:ad:13:67:8a:5a:bf:8c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A26042015ED7345A25228336BD6FF1618453BC
        Validity
            Not Before: Feb  4 19:58:15 2025 GMT
            Not After : Feb  3 20:03:15 2026 GMT
        Subject: CN=A23887EA437F6AA21A0A23456F4EBC98FADBEAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:26:57:80:c2:10:3f:44:4c:22:62:f8:15:
                    cc:1d:1c:cb:20:02:9d:cf:51:a1:c4:66:35:37:39:
                    b7:68:9c:d8:53:d2:f5:64:f8:2e:00:31:c3:5c:5f:
                    85:a4:18:1d:35:69:49:27:d9:77:88:08:18:d9:5e:
                    2b:e3:07:69:e9:00:5c:0d:b3:31:7e:e6:6a:26:7b:
                    28:ba:06:24:4d:36:c8:3a:51:11:68:c1:22:b4:9a:
                    f6:22:60:a5:0f:30:da:0c:c4:d8:23:94:c1:38:21:
                    87:b9:b4:2f:dd:fa:a7:8d:54:80:d2:ee:8d:4a:0a:
                    8c:22:6e:ae:65:3a:fb:e6:eb:24:03:3c:b1:5d:95:
                    34:6f:03:22:b0:38:4a:1d:05:a0:45:b7:7d:79:37:
                    2d:0a:6d:74:35:62:d4:02:bd:10:01:74:0e:82:6e:
                    61:07:d3:3c:70:c7:e4:fd:68:fa:ea:06:dc:4e:3f:
                    1a:f6:f4:5a:c8:05:00:cd:7b:e2:76:18:74:fc:a3:
                    2e:24:50:48:47:8e:cf:04:fd:3f:64:fb:bb:08:2f:
                    4b:84:8a:08:14:28:3a:7e:bd:43:e2:8b:49:8c:04:
                    64:93:79:83:09:dd:37:00:7a:a4:e4:16:74:ce:eb:
                    76:ab:93:cc:64:cd:0a:b9:40:d3:89:13:fe:0f:fa:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:87:EA:43:7F:6A:A2:1A:0A:23:45:6F:4E:BC:98:FA:DB:EA:C8
            X509v3 Authority Key Identifier:
                keyid:08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3233203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:dc:f8:9f:0b:90:28:13:9a:80:04:a3:9c:62:9e:64:25:
         55:b2:fc:42:20:c4:66:f9:58:93:ba:a3:9b:12:37:58:97:88:
         9a:53:d6:1d:20:f9:e9:6a:81:11:6d:cc:7e:79:ac:59:e4:a1:
         a4:f9:14:e1:b3:58:90:06:3a:e7:a9:6f:81:70:5b:ca:82:6b:
         83:cc:44:ea:4b:7c:73:10:e5:c6:fe:9f:65:c4:1f:8d:d3:02:
         5c:b3:dd:92:d2:4c:a2:21:50:20:2a:ba:ab:44:71:e9:2f:d0:
         3a:2f:a3:fa:83:fa:ec:da:0e:39:22:49:fc:fe:e7:ff:74:b3:
         1a:ea:8a:55:0b:28:42:b5:d7:9d:6f:96:8d:91:81:ac:bc:da:
         ad:b1:3d:d7:67:9e:58:cc:17:eb:ab:e3:57:2c:7d:c7:eb:11:
         4f:67:fb:6c:38:e2:97:10:b2:9f:93:97:54:9f:02:cc:79:ff:
         99:f7:de:0b:1a:fe:5b:b6:a3:fc:0d:36:ef:72:94:2e:af:21:
         92:32:4b:db:8b:99:e3:da:35:ed:e8:10:08:10:fd:3e:49:7a:
         15:2a:4a:ad:ac:df:68:bb:24:da:ac:77:5b:10:5d:66:f3:94:
         ef:f4:2d:9e:1b:fe:8c:da:2d:60:fd:22:01:32:71:5b:49:a7:
         63:f6:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:00 2025 by rpki-client