Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e322e302f32342d3234203d3e20323635383130.roa
File:                     3230312e3138322e322e302f32342d3234203d3e20323635383130.roa (raw, json)
Hash identifier:          fKTFm4oKPXKidGowiacmwe10jvTWc4MSNg1Jm0so3gU=
Subject key identifier:   C0:C8:11:2F:C5:53:83:68:DF:67:BA:FF:77:59:E0:2E:9B:D0:FC:A9
Certificate issuer:       /CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
Certificate serial:       4B1F70B70190F4D2D6EDC30D086F351FD572AC43
Authority key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e322e302f32342d3234203d3e20323635383130.roa
Signing time:             Tue 04 Feb 2025 18:47:14 +0000
ROA not before:           Tue 04 Feb 2025 18:42:14 +0000
ROA not after:            Tue 03 Feb 2026 18:47:14 +0000
asID:                     265810
IP address blocks:        201.182.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1f:70:b7:01:90:f4:d2:d6:ed:c3:0d:08:6f:35:1f:d5:72:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
        Validity
            Not Before: Feb  4 18:42:14 2025 GMT
            Not After : Feb  3 18:47:14 2026 GMT
        Subject: CN=C0C8112FC5538368DF67BAFF7759E02E9BD0FCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:de:0a:1f:41:50:41:25:88:8a:17:57:1f:
                    7d:e0:6f:18:c0:42:0d:eb:ca:49:16:62:f2:cd:66:
                    54:2e:2a:4c:8d:29:50:9a:ab:76:4b:66:c7:59:71:
                    a3:f8:c2:e9:c5:77:77:37:03:06:6c:21:1f:69:73:
                    78:b3:38:6f:e9:84:b2:60:b4:5b:d8:10:35:46:4d:
                    e6:c8:fa:fb:e8:1c:46:6d:7e:04:6a:36:f2:01:9e:
                    43:c9:d5:0d:36:ca:0f:18:1c:4f:b0:f9:73:35:06:
                    8b:fb:3a:f2:b9:03:38:4f:42:11:4f:27:0b:40:ef:
                    5d:8e:3f:79:67:94:e5:f6:04:a3:ac:4c:67:16:18:
                    0f:a0:e6:a7:e5:c1:c0:e7:9c:82:29:15:ac:06:10:
                    e2:da:10:77:df:f7:2f:44:74:63:56:5a:5a:26:e4:
                    ac:28:2f:40:11:05:bb:53:2d:ed:53:18:6a:14:93:
                    3e:8a:a7:ff:ae:3f:2f:69:70:ee:de:6b:33:4b:1c:
                    a2:64:24:ee:fa:26:30:4e:e9:85:02:f8:4f:9d:27:
                    0b:20:61:2a:dd:a6:5a:8a:09:aa:18:6e:2b:fc:d3:
                    1f:79:06:62:0a:7e:7c:e0:c8:4e:9c:e3:db:d8:ad:
                    34:b9:8d:ce:d4:23:33:14:57:e4:b5:c9:63:9d:84:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:11:2F:C5:53:83:68:DF:67:BA:FF:77:59:E0:2E:9B:D0:FC:A9
            X509v3 Authority Key Identifier:
                keyid:19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e322e302f32342d3234203d3e20323635383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:b8:bf:81:3f:8d:06:dc:9f:54:09:39:f1:0d:a8:03:b7:
         22:b7:93:5d:69:2e:c4:fe:cd:ac:3a:ef:cd:e0:52:31:7e:14:
         e8:9f:d1:d7:d6:87:a8:26:59:33:12:5d:0f:fc:41:eb:36:58:
         ab:0b:2b:fb:6c:26:33:de:d4:6a:4b:8b:d1:ce:00:bd:c1:24:
         be:d6:d3:38:c6:f9:6e:47:9c:c1:44:12:3c:ee:70:8a:34:63:
         4d:2f:a1:d8:ef:7c:6a:10:67:80:5a:21:40:c4:e3:7f:00:59:
         ff:16:ff:71:91:13:93:8b:36:fc:13:32:c5:a3:e5:fc:2c:e5:
         24:f2:34:f8:6e:03:91:7e:b6:e4:a8:a5:fd:ba:ce:a4:41:2f:
         f7:ab:09:ab:27:62:35:56:c4:83:29:00:87:b8:14:3c:49:44:
         45:76:a7:74:c7:9d:fd:d9:90:3b:d6:e3:6f:7f:1a:10:bf:2b:
         0e:22:ca:4d:93:cd:c2:f9:28:31:8d:c6:df:bc:6b:77:c4:50:
         2b:0e:53:69:69:83:a0:90:85:e8:3c:af:1b:51:d5:0f:8f:92:
         3b:0e:ac:d1:d1:3e:72:02:85:6c:20:c1:7e:2e:c6:a2:9c:ec:
         11:33:15:7d:32:cc:8d:d0:2b:cf:1f:25:cf:3c:da:00:ad:f1:
         fd:9b:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:59 2025 by rpki-client