Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230312e3138332e302e302f31362d3234203d3e203237373338.roa
File:                     3230312e3138332e302e302f31362d3234203d3e203237373338.roa (raw, json)
Hash identifier:          2bmWTOsawyEe4nP53T/8U6IYXPR0ynok82II2fgwXZ8=
Subject key identifier:   A1:C1:DC:B1:9C:06:CE:30:C2:18:22:44:06:1B:88:BF:37:5D:39:1C
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       1B9F52EEE48C31BC97B12163103C17070C4E19FB
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230312e3138332e302e302f31362d3234203d3e203237373338.roa
Signing time:             Tue 04 Feb 2025 18:31:06 +0000
ROA not before:           Tue 04 Feb 2025 18:26:06 +0000
ROA not after:            Tue 03 Feb 2026 18:31:06 +0000
asID:                     27738
IP address blocks:        201.183.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:52:ee:e4:8c:31:bc:97:b1:21:63:10:3c:17:07:0c:4e:19:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Feb  4 18:26:06 2025 GMT
            Not After : Feb  3 18:31:06 2026 GMT
        Subject: CN=A1C1DCB19C06CE30C2182244061B88BF375D391C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:74:46:61:1a:b4:a7:6f:9f:3d:99:d5:8f:
                    7e:7c:0f:13:ed:56:3f:3a:b9:d3:b0:59:2d:a1:87:
                    2e:03:14:3b:c1:a5:fb:1d:da:bc:7b:48:fb:80:0b:
                    bb:0a:11:30:bb:b6:1b:8b:80:39:da:5a:c8:93:45:
                    7b:2f:dd:a3:40:f3:99:b9:6f:f2:95:97:47:3c:c9:
                    23:14:a8:93:82:3c:25:3d:7d:3b:84:b6:a0:b7:7e:
                    2e:87:e6:1e:3b:9a:d7:71:ef:d6:37:e8:81:63:37:
                    11:1b:60:0d:55:05:18:81:d8:3b:fc:61:85:c7:70:
                    7a:c1:91:a7:dc:bd:3b:27:b9:3f:10:04:33:f9:ae:
                    ac:ea:22:74:2e:df:4f:49:5b:9a:c6:1b:a3:f3:43:
                    04:05:36:3f:33:a7:ed:c4:07:df:ad:6e:2b:f2:fc:
                    86:2f:ad:0a:c9:9e:b1:31:bf:40:0f:31:e9:c6:cf:
                    fa:5b:99:e4:82:22:31:ea:04:31:62:f8:18:20:f2:
                    b3:ab:89:4c:c7:05:b8:8c:fe:75:dd:d3:62:5e:12:
                    7b:ab:d3:55:83:18:1f:40:c3:2e:85:73:36:10:bf:
                    62:0e:3e:13:12:f3:3c:85:15:5c:c1:5f:73:b7:a5:
                    d6:71:00:16:ec:74:86:a6:a5:73:31:e2:bc:c1:c5:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:DC:B1:9C:06:CE:30:C2:18:22:44:06:1B:88:BF:37:5D:39:1C
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230312e3138332e302e302f31362d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:8d:a9:36:72:da:ae:34:bc:58:73:5f:1a:aa:cb:a3:be:
         70:dd:8f:23:24:60:79:8c:cd:b1:74:54:7c:91:e4:48:90:97:
         55:6e:ee:13:1b:88:4d:36:b9:fc:3e:c7:8b:e6:69:e8:2f:43:
         e4:e3:53:34:2a:cf:83:b4:2c:5e:cc:dc:f1:2e:ba:20:8a:54:
         4e:f4:d5:ee:45:a8:68:ae:a0:37:57:25:bb:fc:3e:5f:4d:8b:
         f8:c4:02:8b:21:86:5a:72:46:20:7f:8a:24:56:41:c9:06:a2:
         8b:78:e4:8b:45:c9:c9:de:d3:8c:16:7c:af:bf:a5:9b:08:df:
         10:ce:43:74:92:e3:aa:37:f3:0e:0f:5b:79:af:1a:7f:b7:63:
         6d:ab:f5:f8:1f:1a:a9:8a:a2:c2:88:12:79:f3:54:71:0f:b5:
         77:d5:f9:63:61:2d:02:a5:d2:d4:6a:cf:f1:06:2a:b9:99:03:
         b3:7a:f9:31:7e:55:55:e0:65:03:36:3a:9c:d4:a4:5f:35:5d:
         e7:d7:36:d2:8e:02:09:03:a7:b9:ba:b5:bb:a0:15:b1:4b:8a:
         cd:0d:9d:3d:c0:f8:2d:28:87:2d:da:83:33:27:55:15:e2:26:
         f4:af:87:1c:f4:88:de:a8:49:d9:47:4e:c2:86:4b:ba:2d:64:
         5a:9f:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:19 2025 by rpki-client