Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/3230312e3133312e33382e302f32332d3234203d3e20323633363838.roa
File:                     3230312e3133312e33382e302f32332d3234203d3e20323633363838.roa (raw, json)
Hash identifier:          UMY4/NKxbAueNQRZYRgYmIgDKPjTRiSXYIXOG6OCh4Q=
Subject key identifier:   08:14:E0:BB:CA:96:0C:04:2E:3A:62:C3:C7:53:E8:6D:6D:A0:86:87
Certificate issuer:       /CN=835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0
Certificate serial:       193FCCA200822EEB54FC658AD8E9C317C3A8E5BA
Authority key identifier: 83:5C:8A:E5:6B:D6:00:0A:EB:AD:C7:EB:0A:F3:E1:F1:38:C7:26:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/3230312e3133312e33382e302f32332d3234203d3e20323633363838.roa
Signing time:             Tue 04 Feb 2025 18:40:55 +0000
ROA not before:           Tue 04 Feb 2025 18:35:55 +0000
ROA not after:            Tue 03 Feb 2026 18:40:55 +0000
asID:                     263688
IP address blocks:        201.131.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3f:cc:a2:00:82:2e:eb:54:fc:65:8a:d8:e9:c3:17:c3:a8:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0
        Validity
            Not Before: Feb  4 18:35:55 2025 GMT
            Not After : Feb  3 18:40:55 2026 GMT
        Subject: CN=0814E0BBCA960C042E3A62C3C753E86D6DA08687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:da:3a:a1:4d:fa:ea:3d:e1:b1:70:7f:67:c4:
                    eb:27:94:be:ac:e0:c4:27:98:2f:8a:01:9c:3a:bb:
                    bb:c2:e5:f2:7e:76:d6:ae:41:86:fb:5d:a6:3a:be:
                    42:55:30:88:9d:9a:80:32:64:cd:f7:4d:d9:56:19:
                    d7:1d:8b:7c:9b:fe:a9:49:50:f5:9f:9f:00:a6:2b:
                    3f:6f:27:16:8b:62:1f:ce:90:21:fd:7d:4a:e2:d9:
                    f4:93:f1:22:cd:93:1b:12:1f:21:d1:ed:d7:b5:40:
                    d2:3f:4e:9a:87:f3:0d:17:48:09:1c:03:b0:a0:a9:
                    7b:22:97:81:19:8a:4e:b0:49:c7:dc:57:8e:5a:91:
                    80:19:34:b2:6c:09:d8:80:51:97:85:55:4c:d9:ee:
                    c4:4f:32:a1:a9:43:de:21:9e:89:6b:31:a7:1a:95:
                    b0:76:a5:9c:6d:15:9f:60:49:56:61:29:f0:eb:c6:
                    7f:09:d3:5c:5d:b4:25:61:df:ba:26:1e:25:9c:1b:
                    f2:db:cd:b5:c0:f2:16:3a:13:9e:85:e2:64:21:7e:
                    2f:a1:93:19:36:1c:15:f4:6b:0b:40:8b:30:9b:fc:
                    d1:2a:07:b9:21:1e:17:0c:a5:48:98:5f:55:dc:a0:
                    d9:39:0a:65:c5:08:af:f3:45:86:71:29:58:66:93:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:14:E0:BB:CA:96:0C:04:2E:3A:62:C3:C7:53:E8:6D:6D:A0:86:87
            X509v3 Authority Key Identifier:
                keyid:83:5C:8A:E5:6B:D6:00:0A:EB:AD:C7:EB:0A:F3:E1:F1:38:C7:26:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/3230312e3133312e33382e302f32332d3234203d3e20323633363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:0e:27:56:0c:a1:45:4d:a7:0a:e0:fc:a0:ce:97:fe:37:20:
         0a:7a:18:c8:7e:a7:00:0d:e1:1b:d7:4d:a3:6f:94:06:b7:39:
         5f:7e:90:38:41:e3:83:3f:06:e1:b7:2c:0d:c5:81:af:cf:58:
         b3:11:38:6c:24:8c:21:95:6a:a2:7b:09:7a:56:95:00:a1:85:
         8c:b6:17:55:45:b4:ee:ef:88:89:41:43:af:f4:23:55:e0:90:
         98:c8:c7:2c:21:91:6b:2b:9f:d5:9d:ec:9e:9f:30:d0:ae:9d:
         6b:26:c9:47:a3:36:b4:03:eb:dc:59:81:96:1e:ca:d8:ea:89:
         5e:76:5e:5b:23:59:45:6b:22:04:ae:ca:67:e7:15:29:41:9d:
         d4:2a:cf:47:c1:8f:8d:db:c1:f6:76:4c:2d:90:11:00:49:8b:
         2c:fb:b4:95:95:8f:c3:ec:b9:9b:6c:a4:2d:7d:fa:9a:36:b4:
         70:f2:5f:9a:59:6c:c2:84:20:9f:ba:af:97:94:d9:7d:99:a0:
         bb:aa:ff:29:ad:e4:98:85:0e:e8:cc:33:39:0e:b2:0c:c4:51:
         f9:20:f5:c9:a3:95:33:96:a9:e2:fd:f1:4b:c6:4b:56:d9:3e:
         63:52:f9:48:14:0a:4a:71:63:84:9f:46:c3:6f:e9:9f:d0:81:
         e1:4d:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:13 2025 by rpki-client