Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130362e302f32342d3234203d3e203330313637.roa
File:                     3230312e3137342e3130362e302f32342d3234203d3e203330313637.roa (raw, json)
Hash identifier:          P1ZrynQFXx3Gng/A3nOSxy76WLOKLzEGrotiBujgK8k=
Subject key identifier:   2F:C9:50:C8:16:0B:2F:92:8C:70:4F:56:AC:2B:F4:A7:81:AA:24:68
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       70A3C3DB46B23AE67D1C32B73C21AD51425523DB
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130362e302f32342d3234203d3e203330313637.roa
Signing time:             Tue 04 Feb 2025 18:48:04 +0000
ROA not before:           Tue 04 Feb 2025 18:43:04 +0000
ROA not after:            Tue 03 Feb 2026 18:48:04 +0000
asID:                     30167
IP address blocks:        201.174.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a3:c3:db:46:b2:3a:e6:7d:1c:32:b7:3c:21:ad:51:42:55:23:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:04 2025 GMT
            Not After : Feb  3 18:48:04 2026 GMT
        Subject: CN=2FC950C8160B2F928C704F56AC2BF4A781AA2468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:02:ae:61:8a:64:29:ca:f5:4e:92:e0:0c:
                    8f:fb:5b:81:97:1a:8f:36:f3:ac:0c:6c:3d:9e:4d:
                    09:b1:0b:b3:6f:9e:3f:13:f1:58:c8:5d:de:1b:14:
                    56:e5:80:fd:ca:66:0c:88:08:d9:5c:b9:97:01:79:
                    44:7c:cd:30:31:c7:21:cf:a1:33:5f:ff:c2:20:3e:
                    f3:50:48:39:dc:ad:f2:97:9e:e8:cc:49:19:0b:bf:
                    76:c5:4d:3b:23:3c:e5:8f:d2:f2:34:28:6d:33:32:
                    5b:4f:cb:31:8b:20:5d:7d:71:ad:64:44:44:87:89:
                    13:6b:d3:17:30:12:b5:47:8b:5c:6d:5e:1b:c7:c0:
                    1e:39:b9:41:69:6f:8d:e8:fd:11:f7:d9:09:0e:aa:
                    1a:a6:55:dd:73:69:4b:1f:4f:17:46:23:8c:54:20:
                    b8:7d:8c:a6:e6:aa:94:98:22:e3:41:89:51:b0:93:
                    e0:ba:2a:cb:be:a2:19:c1:6b:c5:15:36:14:5b:90:
                    c5:a1:44:7a:e7:3e:cb:58:3c:9f:01:5d:72:3d:90:
                    71:63:ca:ab:ab:1f:e5:73:f4:cd:69:fd:33:96:c4:
                    65:fc:ca:0a:13:b1:4d:ba:bc:2b:e7:da:8b:01:fe:
                    0b:6c:e4:4f:2c:8e:90:5b:96:db:d4:1b:6c:ed:5e:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C9:50:C8:16:0B:2F:92:8C:70:4F:56:AC:2B:F4:A7:81:AA:24:68
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130362e302f32342d3234203d3e203330313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:50:0c:8d:1a:22:72:88:49:8d:17:74:f5:11:bc:f2:8f:f0:
         16:a5:cf:d0:f2:e5:13:c2:cd:af:45:ad:e6:a6:d5:c1:97:fb:
         d5:f5:90:12:1e:5a:3a:42:28:db:ae:13:35:14:25:53:6b:c5:
         9d:fc:e7:23:9c:38:5f:92:3e:2e:53:8f:e7:44:b3:7a:4d:b1:
         ee:1a:6c:df:af:9b:f7:74:3e:01:be:76:c7:79:06:7a:9b:52:
         3f:0e:53:47:dc:6a:90:51:10:e5:db:e8:99:31:b5:c7:27:e8:
         12:1a:5f:06:6c:ad:83:aa:cb:1e:00:d9:56:9e:c1:6a:2f:54:
         ae:b3:88:5c:ba:68:c5:4f:54:d4:d3:00:bd:19:40:01:ee:da:
         cc:db:db:1d:74:1f:ea:c5:e3:f8:90:30:98:9e:d8:06:14:7e:
         9b:d8:ba:7e:18:47:81:cd:18:a7:62:3f:7d:1b:5c:71:81:0a:
         fa:dd:ba:21:af:f0:0b:ba:7d:e3:d0:8f:75:ca:2b:a2:2e:61:
         be:f0:14:3f:a4:0f:9d:55:35:b0:92:a7:fe:79:58:4a:ec:10:
         75:eb:cb:87:b5:34:2c:75:7a:7e:e9:9d:9b:2b:2e:53:4b:6a:
         d2:6a:5b:21:b2:a0:92:92:e7:0a:87:ce:8b:c4:05:3f:c2:43:
         1a:cf:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:09:50 2025 by rpki-client