Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130302e302f32342d3234203d3e203330313637.roa
File:                     3230312e3137342e3130302e302f32342d3234203d3e203330313637.roa (raw, json)
Hash identifier:          /bjs1b5jFQ7gB1enyYWuLpBJ/8Sah4ff1sOn0R7iMsE=
Subject key identifier:   7B:75:27:C2:53:6C:60:F3:6B:D8:DB:0E:E8:E9:BB:51:A0:BE:6A:AB
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3F5B26940DFDC8E98905507165E51BAAB4DCCE46
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130302e302f32342d3234203d3e203330313637.roa
Signing time:             Tue 04 Feb 2025 18:48:04 +0000
ROA not before:           Tue 04 Feb 2025 18:43:04 +0000
ROA not after:            Tue 03 Feb 2026 18:48:04 +0000
asID:                     30167
IP address blocks:        201.174.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:26:94:0d:fd:c8:e9:89:05:50:71:65:e5:1b:aa:b4:dc:ce:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:04 2025 GMT
            Not After : Feb  3 18:48:04 2026 GMT
        Subject: CN=7B7527C2536C60F36BD8DB0EE8E9BB51A0BE6AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:62:79:e4:b9:86:3a:bf:0f:c8:ed:81:84:
                    fc:1f:9a:4a:d7:06:5f:c6:a5:84:c6:ce:2c:ae:c2:
                    09:c3:e8:8a:76:f5:40:f7:fb:e0:c9:43:8e:b4:46:
                    33:3a:b3:e5:cf:25:1c:17:41:c5:4f:b5:da:05:68:
                    51:d6:e4:29:64:d8:b8:44:d0:88:63:96:53:68:e7:
                    5a:e9:ea:01:de:2e:2e:e2:f6:6e:65:11:c0:ee:7f:
                    c5:bc:4e:e1:f6:7f:01:fc:c4:b2:c0:5a:a6:e5:da:
                    d6:37:33:73:2f:50:e9:44:45:ca:07:2b:8c:7e:56:
                    b2:2a:0d:7a:3c:37:7d:c2:2d:2c:cc:78:11:7d:16:
                    52:84:e8:95:14:3a:af:81:3f:9c:50:eb:8f:24:95:
                    c9:01:34:e2:da:00:8c:c1:29:ce:c4:82:41:7c:90:
                    6a:ef:8d:2e:61:0e:e1:86:ea:94:65:6c:bd:bf:e1:
                    6e:25:3e:85:62:13:ec:cd:44:76:62:ba:40:a5:06:
                    98:56:06:3c:21:b5:ee:b4:60:ab:62:34:bb:98:47:
                    d1:aa:50:43:73:b6:ce:19:45:bb:1a:0a:f3:d5:a2:
                    d2:a0:66:8f:df:78:f1:93:71:22:f0:51:a5:f8:74:
                    78:d3:86:13:56:2b:db:f6:91:58:ad:ba:c2:bc:3e:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:75:27:C2:53:6C:60:F3:6B:D8:DB:0E:E8:E9:BB:51:A0:BE:6A:AB
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130302e302f32342d3234203d3e203330313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:32:4b:3d:92:cb:ac:ed:a6:99:02:5c:75:4b:2c:f9:08:14:
         d8:1d:a5:c7:4f:6d:d7:de:29:b0:fe:d4:f1:39:a0:00:27:d5:
         37:da:f6:42:c1:e6:94:6a:ad:86:2b:a3:03:64:e6:0a:a7:af:
         d6:a6:a4:f5:23:1a:74:8f:77:75:c7:7a:62:e3:0b:6e:c9:ed:
         7c:e8:09:9b:55:82:3e:70:d3:a6:e8:9c:a5:64:d4:4d:f0:19:
         4d:97:ba:13:e6:db:37:52:3e:9a:23:95:db:84:92:0e:b2:79:
         11:11:8e:1a:0e:df:28:c4:4b:26:22:c4:20:c0:26:9d:8b:73:
         e1:14:ec:9c:83:3f:c8:8c:31:77:1e:0c:32:cb:36:4c:a5:1c:
         05:68:f0:d9:2d:55:20:c7:91:59:d9:37:98:4b:d3:4c:d0:29:
         09:3b:ac:fb:92:9f:3d:ab:1b:36:af:bc:59:9f:3f:89:f2:90:
         bf:6d:d3:96:7b:1f:88:bd:5a:60:6c:9f:b8:dc:6c:d2:d3:28:
         2a:a2:28:b8:d7:17:f2:38:74:97:cd:da:14:ab:0c:46:ea:31:
         b6:e3:f4:43:cc:5f:b3:15:62:a8:bc:20:b8:94:1b:b8:05:69:
         4a:4b:10:25:7a:02:a9:78:ac:e8:f0:85:c1:92:89:93:4e:a0:
         ea:80:b4:db
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUP1smlA39yOmJBVBxZeUbqrTczkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNTAyMDQxODQzMDRaFw0yNjAyMDMxODQ4MDRaMDMxMTAvBgNV
BAMTKDdCNzUyN0MyNTM2QzYwRjM2QkQ4REIwRUU4RTlCQjUxQTBCRTZBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2GJ55LmGOr8PyO2BhPwfmkrX
Bl/GpYTGziyuwgnD6Ip29UD3++DJQ460RjM6s+XPJRwXQcVPtdoFaFHW5Clk2LhE
0IhjllNo51rp6gHeLi7i9m5lEcDuf8W8TuH2fwH8xLLAWqbl2tY3M3MvUOlERcoH
K4x+VrIqDXo8N33CLSzMeBF9FlKE6JUUOq+BP5xQ648klckBNOLaAIzBKc7EgkF8
kGrvjS5hDuGG6pRlbL2/4W4lPoViE+zNRHZiukClBphWBjwhte60YKtiNLuYR9Gq
UENzts4ZRbsaCvPVotKgZo/fePGTcSLwUaX4dHjThhNWK9v2kVitusK8Pn/rAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUe3UnwlNsYPNr2NsO6Om7UaC+aqswHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMTMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMwMzEzNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAya5k
MA0GCSqGSIb3DQEBCwUAA4IBAQBVMks9ksus7aaZAlx1Syz5CBTYHaXHT23X3imw
/tTxOaAAJ9U32vZCweaUaq2GK6MDZOYKp6/WpqT1Ixp0j3d1x3pi4wtuye186Amb
VYI+cNOm6JylZNRN8BlNl7oT5ts3Uj6aI5XbhJIOsnkREY4aDt8oxEsmIsQgwCad
i3PhFOycgz/IjDF3HgwyyzZMpRwFaPDZLVUgx5FZ2TeYS9NM0CkJO6z7kp89qxs2
r7xZnz+J8pC/bdOWex+IvVpgbJ+43GzS0ygqoii41xfyOHSXzdoUqwxG6jG24/RD
zF+zFWKovCC4lBu4BWlKSxAlegKpeKzo8IXBkomTTqDqgLTb
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:09:35 2025 by rpki-client