Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3230312e3134302e3232342e302f32322d3234203d3e203532333132.roa
File:                     3230312e3134302e3232342e302f32322d3234203d3e203532333132.roa (raw, json)
Hash identifier:          RU31YBsHhxbMqTVUx+btRlHq4W1jeAf7G8B1fDe21kM=
Subject key identifier:   00:B1:F9:41:8E:B5:83:54:02:B5:05:58:62:2F:DA:FC:0C:E5:97:DB
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       4C16A64E6258334DD1D30CDAE854CEE7313BDD73
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3230312e3134302e3232342e302f32322d3234203d3e203532333132.roa
Signing time:             Tue 04 Feb 2025 18:15:02 +0000
ROA not before:           Tue 04 Feb 2025 18:10:02 +0000
ROA not after:            Tue 03 Feb 2026 18:15:02 +0000
asID:                     52312
IP address blocks:        201.140.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:16:a6:4e:62:58:33:4d:d1:d3:0c:da:e8:54:ce:e7:31:3b:dd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Feb  4 18:10:02 2025 GMT
            Not After : Feb  3 18:15:02 2026 GMT
        Subject: CN=00B1F9418EB5835402B50558622FDAFC0CE597DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:9f:22:31:74:6f:c7:03:f3:1a:3b:a2:51:
                    bd:17:3e:b7:57:07:c2:4b:c1:a2:cf:4d:1f:0b:8d:
                    cc:35:d5:be:00:a3:30:77:89:77:ab:b0:71:42:31:
                    e0:51:be:be:43:94:b2:7f:4e:69:4f:75:9b:68:fb:
                    c8:42:1e:5d:f7:a9:19:b1:21:77:9d:43:97:29:41:
                    18:c9:ac:db:9d:72:73:92:a8:62:9c:95:49:e1:eb:
                    c5:9d:fd:8c:d0:9e:c3:1b:45:42:be:f6:d4:c8:d5:
                    c7:35:c2:ea:5d:59:de:24:cc:fd:eb:e7:81:9c:f2:
                    c0:74:a3:50:37:48:ab:47:bf:6d:a4:86:5e:6c:7f:
                    90:84:33:79:97:6a:1b:29:ca:84:f0:29:c6:15:a7:
                    5c:af:00:4f:cb:58:0d:55:59:4b:4b:67:59:b4:f4:
                    1b:65:08:3b:4f:a1:ea:2f:e1:79:aa:bb:8a:2c:a5:
                    1c:66:0e:db:9c:08:0e:03:90:57:05:ce:07:84:6d:
                    e4:cd:f1:8c:ec:ed:18:63:e4:8c:70:ca:90:00:8e:
                    be:15:e7:88:3a:ae:3c:73:43:95:f3:f5:08:4f:57:
                    3a:d9:2b:c9:2c:c5:22:ca:01:4d:82:15:86:4f:79:
                    c0:b9:17:53:e8:95:17:32:93:9a:19:f1:52:ca:44:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:F9:41:8E:B5:83:54:02:B5:05:58:62:2F:DA:FC:0C:E5:97:DB
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3230312e3134302e3232342e302f32322d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:97:26:d1:25:10:8c:3d:cb:8a:87:2c:46:7a:14:4c:97:05:
         3a:62:3d:36:0a:1d:84:b5:f3:d4:76:7d:a8:1b:7b:27:ba:98:
         88:37:26:30:93:0d:f8:98:b4:98:87:9c:21:aa:14:45:64:39:
         f0:f3:e6:df:38:7c:9b:f1:1d:a6:d8:b4:79:c2:57:12:47:ec:
         9a:61:d1:cc:62:80:16:86:3f:ba:3e:cb:ac:a6:92:c5:a1:2b:
         c0:c4:c1:25:cb:37:39:01:61:a2:a2:08:f2:75:75:44:98:4c:
         9b:cd:c2:62:39:e3:b7:66:20:1c:b2:42:36:76:22:41:53:9e:
         12:46:16:d1:cd:5f:18:b7:38:41:dd:cb:eb:44:2d:fc:05:b7:
         50:64:d0:2b:3a:80:58:d7:05:9e:d4:32:06:90:6c:47:7c:cd:
         8d:95:61:ee:37:50:73:85:da:ad:72:d3:c3:80:e9:bc:38:c0:
         cb:66:b6:4b:76:8a:90:ea:75:21:9f:40:83:67:28:cc:46:87:
         ad:79:1a:fa:7c:ab:94:48:a5:6b:22:12:c4:40:56:70:38:67:
         47:9e:2f:27:f0:01:2a:32:c1:a4:6f:a8:0d:12:c2:62:95:aa:
         c6:63:66:59:4b:66:26:df:ed:95:84:c0:7d:de:b3:51:16:48:
         05:8f:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:18:25 2025 by rpki-client