Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          GWpM/BbNDCzwMc/UVMS1Y2JHLXBMDt/M1O4xvQLHwoU=
Subject key identifier:   F3:53:99:40:1C:D3:AA:24:34:C2:7E:C0:E6:B4:FD:67:27:0C:37:05
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       6FC283F96887146C838628174A4A87AECC193094
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:03 +0000
ROA not before:           Tue 04 Feb 2025 18:43:03 +0000
ROA not after:            Tue 03 Feb 2026 18:48:03 +0000
asID:                     32098
IP address blocks:        201.174.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c2:83:f9:68:87:14:6c:83:86:28:17:4a:4a:87:ae:cc:19:30:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:03 2025 GMT
            Not After : Feb  3 18:48:03 2026 GMT
        Subject: CN=F35399401CD3AA2434C27EC0E6B4FD67270C3705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:da:9f:79:2f:e1:07:64:c4:99:19:c0:fe:
                    91:5e:85:2b:ac:31:f5:cb:30:e3:f0:5c:2b:4d:e1:
                    ea:3f:b3:3c:bc:77:32:2e:a7:1f:21:c4:72:e2:3a:
                    f9:0c:5d:26:b8:ec:ed:17:7e:7a:4a:b7:c7:5e:25:
                    16:13:e9:3f:8b:d5:fe:6c:82:ba:33:fc:96:41:21:
                    9b:6d:5c:4c:03:c8:8b:3f:b3:a8:2f:ee:f1:64:1c:
                    ff:8b:79:07:b9:55:b0:9e:14:b2:b5:33:da:bb:45:
                    cf:66:22:54:94:fc:ad:84:2b:d6:e8:30:e2:10:87:
                    c9:ce:1a:72:83:03:b9:6c:01:91:4b:5f:f0:12:2f:
                    ca:67:e0:76:3a:16:33:9d:e2:c4:dc:3b:52:02:ca:
                    ba:32:39:f4:d2:50:77:97:59:81:1f:a8:17:7a:3e:
                    79:31:92:21:84:8d:69:8d:16:ab:0f:c8:17:61:1e:
                    0b:87:e0:6f:45:9f:7e:ce:70:ff:49:8e:6e:5e:c9:
                    77:61:4b:c2:d6:09:0f:0c:c2:c8:2d:00:9c:db:7c:
                    94:4e:2e:54:db:31:4c:b5:37:9a:ba:1b:ad:f1:a5:
                    2b:90:88:67:a1:0f:ac:77:4c:2a:2e:0f:7f:83:bd:
                    d5:d3:c3:6d:b3:09:77:d1:4b:ef:05:a4:cf:d4:62:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:53:99:40:1C:D3:AA:24:34:C2:7E:C0:E6:B4:FD:67:27:0C:37:05
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:6e:e3:c5:bc:71:61:95:5e:7e:b4:a4:23:14:f1:5c:a7:
         80:7c:b2:52:41:3b:37:a9:aa:03:7e:fa:1e:5a:fb:35:fd:47:
         0b:fa:25:61:f5:82:f3:82:da:b8:37:6d:10:37:68:17:76:f3:
         76:4b:55:8a:87:e2:44:1d:2e:21:dc:34:1c:90:52:51:6b:00:
         d1:ec:d1:bb:e1:57:1a:d7:f5:a1:ff:8d:54:e9:09:60:eb:7a:
         4e:84:4d:5a:fb:e1:e5:e9:4c:30:0e:2c:3d:9a:7b:e8:63:6b:
         ee:c7:db:28:0a:e9:ce:f2:ee:c1:fb:cb:92:d1:53:8b:de:3f:
         0b:d2:fd:96:ac:0e:6d:36:f2:fc:9b:bb:b6:50:0a:98:be:a0:
         6f:64:54:3b:82:e0:97:13:c0:bb:45:16:60:0f:b9:df:06:92:
         06:11:9b:a3:25:2b:fa:24:3b:c9:57:4c:e6:10:57:82:2f:f4:
         c3:9c:8d:8d:3b:ec:fa:fb:34:86:a3:16:52:d9:4d:14:99:e8:
         e3:4e:f3:4a:6a:16:1a:4a:67:49:08:76:a6:10:80:48:95:e1:
         05:14:d5:c2:31:56:51:06:f2:07:00:85:d1:de:70:1d:66:8a:
         71:65:c8:cf:39:18:96:46:8b:52:ec:0b:4a:2f:1d:87:eb:15:
         94:11:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:20 2025 by rpki-client