Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3234203d3e20323636373336.roa
File:                     3230312e3133312e39302e302f32332d3234203d3e20323636373336.roa (raw, json)
Hash identifier:          FymZqxxVuh2Qw4wiPUWRBJuEUo37pvFii0YUQHiqSY4=
Subject key identifier:   A2:FE:1C:E7:D5:BA:BC:71:F5:33:69:5F:F6:FA:18:F2:D5:0B:D8:66
Certificate issuer:       /CN=08A26042015ED7345A25228336BD6FF1618453BC
Certificate serial:       7ADB01FCE622ED6B85C5772F684ED06AA25536EE
Authority key identifier: 08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3234203d3e20323636373336.roa
Signing time:             Tue 04 Feb 2025 20:03:16 +0000
ROA not before:           Tue 04 Feb 2025 19:58:16 +0000
ROA not after:            Tue 03 Feb 2026 20:03:16 +0000
asID:                     266736
IP address blocks:        201.131.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 03:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:db:01:fc:e6:22:ed:6b:85:c5:77:2f:68:4e:d0:6a:a2:55:36:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A26042015ED7345A25228336BD6FF1618453BC
        Validity
            Not Before: Feb  4 19:58:16 2025 GMT
            Not After : Feb  3 20:03:16 2026 GMT
        Subject: CN=A2FE1CE7D5BABC71F533695FF6FA18F2D50BD866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:f9:cf:99:54:cb:fc:6d:a9:4b:46:50:97:
                    16:3f:6c:50:0c:84:13:19:e8:dc:5b:ec:91:fd:55:
                    f3:1d:2d:40:ad:da:a5:dd:be:d1:4b:c9:8f:8b:54:
                    f7:ad:29:1c:6d:11:e6:8a:dc:11:46:44:bc:3a:d3:
                    fb:44:ff:a2:6c:12:ee:c4:ec:c9:ce:d1:54:7b:7a:
                    fd:c4:a1:3f:f8:51:fa:20:17:5c:ac:5e:1c:f1:30:
                    f8:bd:91:e4:ef:9d:b6:90:82:3f:ca:e1:bd:2c:e2:
                    66:55:d6:a3:61:0f:49:83:51:29:f2:5a:76:cd:0b:
                    77:e1:ed:f4:04:55:33:81:aa:f7:fb:b8:b6:0b:ca:
                    8b:71:f9:14:a6:5f:09:e7:56:67:e5:5e:c2:1e:11:
                    e0:79:c5:9e:0a:01:c8:70:bd:8b:9b:06:4c:32:19:
                    e7:f9:f6:85:40:8c:fd:9b:ba:b7:b7:88:4c:e8:26:
                    73:24:11:78:ff:d5:93:72:b1:02:c1:91:19:bb:02:
                    7a:9c:95:2f:0a:61:65:98:3c:16:ec:56:ec:9a:29:
                    bb:83:bd:69:e8:95:c6:6b:a6:9c:8c:25:1e:29:07:
                    6f:16:03:a8:ae:59:6d:e4:42:32:af:2d:a8:37:d7:
                    89:21:1a:0f:40:a3:11:d1:eb:43:a9:f6:91:56:cb:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FE:1C:E7:D5:BA:BC:71:F5:33:69:5F:F6:FA:18:F2:D5:0B:D8:66
            X509v3 Authority Key Identifier:
                keyid:08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3234203d3e20323636373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:14:93:4d:6b:5c:d1:57:77:13:17:72:e6:6e:17:15:fd:90:
         70:c9:cf:bd:fe:ac:b9:d5:00:e3:24:b0:3f:36:42:e9:37:dc:
         a0:b5:d0:65:51:e1:b9:10:19:51:e2:c1:6a:69:de:ae:8c:b8:
         04:c8:d4:8e:7e:4a:9d:30:0f:5a:ae:30:dd:d9:22:08:e7:28:
         8b:e2:48:a7:98:65:c3:e3:8a:3f:16:2d:7a:35:df:6f:36:12:
         b6:ea:8b:86:3b:0c:eb:13:c7:21:cb:23:21:69:87:72:2b:3c:
         eb:d3:3a:82:55:a4:cb:0b:4a:c6:c1:ba:f6:12:a4:e6:03:27:
         48:59:65:d0:23:72:b0:5e:3c:3b:2d:55:ed:7e:80:fa:fa:30:
         d0:4e:3a:7c:59:ca:4f:a9:6a:6b:50:86:b2:9d:88:2e:86:08:
         07:36:c8:b0:d4:53:11:08:6e:4a:39:17:98:6f:8b:92:a4:c0:
         87:75:d1:73:18:81:04:fd:52:bf:46:90:3f:14:f8:79:cb:f8:
         a8:0f:66:01:e7:50:3e:e0:9c:72:78:3c:bb:6a:9b:11:0c:ef:
         82:94:bd:4a:49:7d:74:6b:0e:5c:e5:de:b1:34:ab:bc:9e:1b:
         b2:99:8a:48:aa:f9:10:b6:dc:26:ba:b6:c6:34:1d:31:3e:09:
         75:38:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:12 2025 by rpki-client