Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32342d3234203d3e20323635383130.roa
File:                     3230312e3138322e302e302f32342d3234203d3e20323635383130.roa (raw, json)
Hash identifier:          XfoMQ/CCGLUnIdzW+20JAXds/4okasDIrmy90L6C3GQ=
Subject key identifier:   07:55:D7:EA:F5:27:2C:35:C5:BC:67:AD:3C:35:2D:3F:58:FE:FF:F4
Certificate issuer:       /CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
Certificate serial:       271BE08E3E72ECB08A690B7528F799E5F981A632
Authority key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32342d3234203d3e20323635383130.roa
Signing time:             Tue 04 Feb 2025 18:47:12 +0000
ROA not before:           Tue 04 Feb 2025 18:42:12 +0000
ROA not after:            Tue 03 Feb 2026 18:47:12 +0000
asID:                     265810
IP address blocks:        201.182.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1b:e0:8e:3e:72:ec:b0:8a:69:0b:75:28:f7:99:e5:f9:81:a6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
        Validity
            Not Before: Feb  4 18:42:12 2025 GMT
            Not After : Feb  3 18:47:12 2026 GMT
        Subject: CN=0755D7EAF5272C35C5BC67AD3C352D3F58FEFFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:26:68:7b:97:84:03:24:27:ce:54:41:02:
                    b1:d2:64:90:ee:49:53:22:50:56:a1:cd:2f:84:a8:
                    bf:ce:af:03:a1:b3:7f:f9:42:3a:f9:71:ce:21:b0:
                    57:f0:71:48:e4:91:52:f3:71:55:6c:d9:7f:ed:7d:
                    ca:79:85:1c:80:48:27:d2:87:63:fd:44:66:14:d0:
                    ba:13:26:a1:ff:c1:ef:aa:1b:a3:ac:f8:c9:7a:54:
                    fc:3a:9a:60:95:63:16:e4:9d:85:c4:4a:a3:30:4c:
                    b6:2c:ff:b5:6c:b8:3d:6a:8c:a0:2e:c6:b6:94:5e:
                    9d:0d:59:ea:62:71:14:89:c6:40:a5:0e:39:5f:d1:
                    79:2f:dc:c4:eb:ec:0e:99:b3:ac:a9:9e:e2:72:9d:
                    e2:21:9d:8f:13:4d:5e:a0:2b:12:a7:eb:05:0d:10:
                    85:2c:d9:ff:d4:63:79:a6:6f:d7:40:e4:5b:6b:44:
                    ef:be:70:5f:03:f6:7f:6b:0a:6b:9c:09:e2:e9:0d:
                    86:ca:ce:8c:84:e9:12:95:d6:61:ff:a9:de:61:99:
                    8d:75:7c:a9:53:d7:02:32:40:47:24:51:56:15:9e:
                    0b:ad:5b:71:5b:f3:ae:68:34:b2:a1:72:0b:7f:eb:
                    bb:1d:64:d4:60:45:ef:1a:2f:eb:41:4c:cb:e8:89:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:D7:EA:F5:27:2C:35:C5:BC:67:AD:3C:35:2D:3F:58:FE:FF:F4
            X509v3 Authority Key Identifier:
                keyid:19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32342d3234203d3e20323635383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:09:c3:46:63:a3:1c:ea:aa:a4:c8:af:d4:b0:1d:c3:b9:
         6b:83:f2:36:77:90:93:3e:b0:ca:7b:41:7f:e2:89:55:27:3c:
         cf:ff:e8:ee:a8:42:18:d9:74:7e:1b:c4:66:84:c7:74:ba:4a:
         18:22:39:59:24:05:68:19:91:08:9e:14:ce:37:87:dc:dd:4e:
         e7:26:b8:aa:f0:79:60:94:ca:25:c1:da:dc:f2:85:cb:fc:d7:
         08:4a:72:db:0b:e6:51:58:c4:16:94:61:69:64:98:71:0a:f4:
         fd:f8:f7:9f:d7:b9:c4:1b:77:66:ae:35:b4:0f:39:c7:56:38:
         dc:59:69:3c:39:aa:ef:3a:9c:47:2e:00:7a:7b:d1:8f:db:94:
         5f:aa:75:b6:84:63:ec:1c:ac:71:1a:a0:d5:2d:8e:2b:04:54:
         d2:f3:ad:d0:11:a5:ee:a0:a7:bc:92:31:15:b1:5c:f8:2e:cd:
         a7:b1:7c:c6:dd:fb:0d:c6:e6:c0:9e:57:82:cd:35:2b:6b:6b:
         05:e9:c4:7b:ca:97:82:c5:2f:5b:4b:e1:a3:7e:5b:2d:03:b8:
         12:8a:22:0f:ae:22:48:5f:d5:8a:9f:79:24:47:91:61:fc:4b:
         a9:6b:84:6b:c7:2a:0a:c7:ed:49:eb:1f:36:fa:da:e0:85:6d:
         11:23:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:39 2025 by rpki-client