Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
File:                     3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa (raw, json)
Hash identifier:          JgGVqGlq4lHRng+CXkn5nyRcVqvdNP8f0PN6ACtvdMU=
Subject key identifier:   41:A4:0A:66:86:CE:77:BC:0B:F1:9C:78:86:58:99:63:43:CD:48:14
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       71947EA436D5514F0E683E6C5A4A1D838CFEE46F
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:47:57 +0000
ROA not before:           Tue 04 Feb 2025 18:42:57 +0000
ROA not after:            Tue 03 Feb 2026 18:47:57 +0000
asID:                     32098
IP address blocks:        201.174.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:94:7e:a4:36:d5:51:4f:0e:68:3e:6c:5a:4a:1d:83:8c:fe:e4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:42:57 2025 GMT
            Not After : Feb  3 18:47:57 2026 GMT
        Subject: CN=41A40A6686CE77BC0BF19C788658996343CD4814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:05:c3:ee:80:d2:b2:50:e7:c6:31:e5:b4:
                    8c:c2:13:1a:ed:f4:c4:c0:3c:16:7e:32:e9:74:bb:
                    da:4c:38:4d:a7:c5:60:32:ae:e1:66:b1:da:4c:7a:
                    c7:a8:dc:61:ab:b6:06:1a:38:46:24:3a:39:6c:92:
                    07:57:e0:b3:56:28:dc:79:35:69:21:4d:07:38:12:
                    75:64:4f:e2:45:4f:fe:14:a9:a3:2f:01:27:1a:fa:
                    49:5e:31:04:26:69:97:c2:e8:91:ff:12:a3:8d:39:
                    14:a4:f8:11:99:14:0a:5c:9c:03:7a:0f:fc:e1:89:
                    9f:d1:79:5e:fb:ba:0d:28:e4:48:34:a2:93:e5:ee:
                    b3:e7:96:93:f5:bf:d6:4e:c0:43:85:73:d5:f7:e8:
                    e5:ca:45:0c:a0:14:b9:08:ea:f6:e0:62:95:86:0b:
                    05:2b:24:7c:5f:2e:ce:f4:9f:59:8d:1a:a2:8c:a7:
                    6e:2e:03:fb:74:c9:d8:b4:cf:3c:4d:cb:b8:d3:04:
                    d1:e6:3e:98:52:db:16:c5:5d:8d:a4:43:3f:a2:78:
                    8d:65:9b:e3:d1:3e:99:44:78:d6:7f:49:7b:9f:85:
                    bb:a6:0c:fd:fe:57:c1:43:fe:29:c4:a9:bd:e5:34:
                    9e:49:87:cb:ec:cc:59:d2:45:67:39:cd:48:1f:3e:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A4:0A:66:86:CE:77:BC:0B:F1:9C:78:86:58:99:63:43:CD:48:14
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:b2:d5:d4:57:53:96:5c:de:0f:ea:da:f3:a5:92:03:e8:
         c3:72:99:5f:af:bf:f8:c8:69:5b:9a:84:3a:93:f2:4d:80:6f:
         1f:83:85:be:9c:c8:d0:9a:31:4f:e7:70:3d:26:a4:8c:6e:a3:
         a0:03:08:8d:4a:48:08:0c:cb:fb:8e:c3:e5:3f:dc:eb:35:a8:
         26:40:c5:76:c4:17:8d:53:19:38:65:ec:57:e3:2f:c9:ab:71:
         19:d8:5d:33:5a:15:c5:74:50:bf:a2:cb:82:24:49:10:95:9a:
         1f:cf:15:c8:d3:49:c1:e0:79:d7:2f:5c:db:50:a6:49:e2:a9:
         d9:ec:1b:10:da:a9:ab:fc:84:09:e4:22:24:1d:f2:e7:af:56:
         27:3d:db:55:bb:93:26:09:a4:81:8d:9a:a4:f4:8c:0e:de:cf:
         02:a2:5b:ed:f8:8d:4d:77:ef:33:83:7b:e0:5c:9c:55:0c:23:
         05:2b:4e:5d:6d:26:a2:ab:4c:c1:a1:09:5e:56:47:00:6d:17:
         70:98:da:c3:ca:c4:d0:5e:80:6d:ea:56:a4:df:bd:a2:40:80:
         8d:75:bf:ee:50:25:d6:4f:f4:c1:16:5c:64:b4:08:3d:f7:40:
         5f:5e:b7:27:ff:47:24:a1:88:77:18:11:80:4d:e4:36:d9:c2:
         30:31:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:56 2025 by rpki-client