Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa
File:                     3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa (raw, json)
Hash identifier:          dQf69XBgnWT3Bwj/4xsDROl10oGPRQNrWf33h0oLASE=
Subject key identifier:   A4:F2:08:F7:25:66:7A:2F:1F:44:EA:CE:37:FB:CA:EF:AD:2D:D1:6A
Certificate issuer:       /CN=1932D1177B6B1B833DA0B0BFDA867C3E41569172
Certificate serial:       5A0487745EB96E4A2200ADA4A5C1A77F8E950BF7
Authority key identifier: 19:32:D1:17:7B:6B:1B:83:3D:A0:B0:BF:DA:86:7C:3E:41:56:91:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa
Signing time:             Tue 04 Feb 2025 18:50:20 +0000
ROA not before:           Tue 04 Feb 2025 18:45:20 +0000
ROA not after:            Tue 03 Feb 2026 18:50:20 +0000
asID:                     265793
IP address blocks:        201.182.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:04:87:74:5e:b9:6e:4a:22:00:ad:a4:a5:c1:a7:7f:8e:95:0b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1932D1177B6B1B833DA0B0BFDA867C3E41569172
        Validity
            Not Before: Feb  4 18:45:20 2025 GMT
            Not After : Feb  3 18:50:20 2026 GMT
        Subject: CN=A4F208F725667A2F1F44EACE37FBCAEFAD2DD16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:d7:78:a4:f3:79:dd:51:e0:cf:d2:49:0e:
                    45:c2:3a:ea:96:ab:61:c0:6b:86:33:6a:a8:4b:a9:
                    cc:ee:37:77:08:51:02:4f:26:83:83:f0:97:93:84:
                    dd:09:ba:09:a7:a3:c7:c0:1e:d2:a7:13:80:30:ad:
                    34:dc:4e:47:02:4e:df:d8:fa:15:0c:d6:c3:c3:21:
                    ac:1b:44:38:0f:53:30:19:a2:bc:18:1f:91:a0:77:
                    7c:09:33:c3:c7:76:ae:3e:41:38:79:f6:ec:af:cf:
                    5b:c9:49:36:f2:b2:e5:81:bb:1f:64:0a:e2:86:0f:
                    d0:1b:fc:8b:b8:28:33:ff:fa:0b:a4:f3:82:8a:5c:
                    f0:07:4d:39:1a:20:3d:b9:0c:c7:9c:e3:f2:32:88:
                    f0:83:83:7d:07:35:62:2a:8a:23:ad:92:98:21:58:
                    2b:bb:5e:f6:68:9e:9d:b6:82:70:e4:26:c0:75:46:
                    7c:ac:f5:ae:0a:7a:7f:ca:c5:02:31:b0:01:a0:c6:
                    e4:16:cc:79:df:7e:15:68:8c:bf:64:65:ab:54:40:
                    f8:f5:94:4f:ee:3e:12:3c:06:5c:68:44:d9:b8:49:
                    c9:21:bf:6d:09:c8:54:15:1a:2a:89:38:6e:d9:ce:
                    ef:11:e5:f2:64:28:2c:15:b1:dc:b5:22:fc:e4:97:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:08:F7:25:66:7A:2F:1F:44:EA:CE:37:FB:CA:EF:AD:2D:D1:6A
            X509v3 Authority Key Identifier:
                keyid:19:32:D1:17:7B:6B:1B:83:3D:A0:B0:BF:DA:86:7C:3E:41:56:91:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:5b:1e:9a:28:8d:d4:70:12:f8:30:18:a7:d9:77:0f:b2:
         9c:55:df:c3:18:e2:b7:ee:c2:2b:be:1a:bf:47:db:a9:f0:1a:
         9f:54:1f:20:76:83:98:dd:54:7c:5f:d5:ce:45:72:3d:57:13:
         f1:de:af:25:d9:18:2e:14:58:d3:0d:9e:b9:3c:1b:b1:22:df:
         4f:24:6f:a4:a4:be:f8:f5:9d:91:f2:c7:65:74:d4:de:42:1e:
         b6:9f:58:6e:8e:ed:94:8c:bd:27:c5:48:bb:ba:9d:ac:99:c4:
         72:54:04:e7:d4:15:15:56:6d:7e:0d:b2:b0:1a:02:ea:07:80:
         62:bc:a8:f5:84:cf:7c:f9:27:3b:76:45:4d:14:97:49:92:08:
         7e:a7:93:5c:9e:cc:2b:75:16:da:a4:20:74:7e:fd:63:ed:9b:
         1a:9e:b8:ae:cd:fe:02:da:30:99:82:1e:d9:09:2d:8e:11:8a:
         9a:ab:24:81:ee:35:68:bb:db:d2:86:42:5e:e4:0d:0c:f7:19:
         87:c9:be:19:49:a3:4e:60:5f:d7:e5:90:ad:00:7f:cc:e9:c6:
         1d:86:6e:b1:92:1e:fb:05:6f:06:94:90:95:fc:00:d3:1f:ff:
         92:0d:57:e3:d5:5d:a6:c2:9a:50:d8:a8:8d:48:4b:bb:6e:3e:
         70:56:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:55:04 2025 by rpki-client