Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa
File:                     3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          MCWYUjIuTfR3doN9S+AAJYccXKwQJjroN9wEFk3s9to=
Subject key identifier:   AA:13:76:0C:39:E0:D2:DC:A4:CE:B0:CE:90:F4:D7:D1:A4:65:95:D4
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3D11FF1EBE75559B35F87D3D68085C73A9BB49C6
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:47:58 +0000
ROA not before:           Tue 04 Feb 2025 18:42:58 +0000
ROA not after:            Tue 03 Feb 2026 18:47:58 +0000
asID:                     32098
IP address blocks:        201.174.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:11:ff:1e:be:75:55:9b:35:f8:7d:3d:68:08:5c:73:a9:bb:49:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:42:58 2025 GMT
            Not After : Feb  3 18:47:58 2026 GMT
        Subject: CN=AA13760C39E0D2DCA4CEB0CE90F4D7D1A46595D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:9e:92:02:96:a9:7e:3d:e9:0d:c3:53:d9:
                    0d:a1:8a:2b:e0:bf:c4:ec:64:d0:c1:fc:c7:16:c5:
                    e9:75:e9:05:86:f1:a3:a1:ef:fe:26:72:0a:37:53:
                    bb:e9:a5:c5:db:ff:2d:e3:1f:c4:f0:d5:08:e5:89:
                    c4:1e:af:8a:3a:53:d4:b4:7e:08:41:f3:58:6e:39:
                    98:26:9d:6d:dc:a6:90:ee:40:eb:b8:c9:b7:37:34:
                    e2:fb:8f:43:04:ac:70:8f:b0:88:c6:14:5b:c6:e4:
                    ef:4d:53:24:bb:7b:70:ab:88:de:e7:7f:29:c4:92:
                    b2:8e:b1:fd:36:c2:e2:d3:e8:d0:31:ce:6f:93:fc:
                    cf:cc:0e:8c:ee:f3:9f:8f:66:a9:dd:b7:03:a0:ae:
                    8c:72:46:6c:e6:45:9c:b4:23:32:26:69:26:32:62:
                    7d:26:c9:35:22:b6:de:b6:38:f8:d6:6d:6b:61:bf:
                    6c:36:17:16:0b:81:4e:ef:9b:9c:a8:6d:b4:0c:d4:
                    bc:05:36:2b:b6:bb:80:de:aa:48:f9:c3:e9:c6:9f:
                    86:8e:6d:66:cd:4c:e6:7b:64:68:77:f7:95:01:bc:
                    b2:90:78:e9:74:8b:af:40:8b:a2:2d:59:79:2d:76:
                    ad:3f:32:ec:c2:16:6c:f8:e3:db:32:47:ce:55:c4:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:13:76:0C:39:E0:D2:DC:A4:CE:B0:CE:90:F4:D7:D1:A4:65:95:D4
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:95:9e:4b:c3:8a:27:2c:cc:dd:89:71:2d:3a:2a:4a:12:9f:
         48:41:b8:56:44:e2:20:b5:8c:9f:47:6f:92:fe:b1:e6:f5:4c:
         07:d5:84:9f:26:6d:17:e3:23:b8:1b:bc:ac:f2:0c:2a:a3:50:
         79:a1:d4:ac:1f:88:7b:8e:39:03:90:44:93:3c:69:e9:26:14:
         7d:96:19:e9:ab:31:e7:40:43:a3:95:55:74:81:f5:d7:5c:c2:
         0d:7c:46:87:c5:a2:34:36:e0:b6:e0:f4:b9:59:0e:b1:6e:7b:
         04:0f:d3:6f:d4:9f:fa:09:cf:f5:5a:8b:df:6d:f5:02:3c:d9:
         9f:a8:84:15:10:58:de:c3:07:49:bb:fd:1d:48:b1:2f:c4:5a:
         91:69:72:b2:37:3d:18:3a:c5:33:b8:a2:61:8f:19:36:dd:bf:
         a0:21:3b:a0:d3:67:20:2b:cb:f1:8a:cc:b9:bc:1e:14:db:3b:
         42:ca:6c:96:82:d6:ea:90:ea:f2:cd:9f:3e:60:a5:5c:44:ef:
         ec:cd:97:c5:85:50:a0:39:61:79:af:0b:ab:b1:e4:a6:32:18:
         b6:a8:d8:94:9f:6b:00:80:44:4a:10:99:09:f8:33:9b:65:f2:
         46:dc:10:0c:02:cd:73:99:57:18:42:df:d0:56:5d:64:28:0f:
         cf:38:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:21 2025 by rpki-client