Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa
File:                     3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa (raw, json)
Hash identifier:          xUYCO1v/JNRpvfpJ1LnRxRrEJS0VKQHWCOlT+8ciYec=
Subject key identifier:   A8:FA:47:C7:E9:26:BA:C5:2D:09:2E:D6:FB:55:58:4E:B2:98:73:E2
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       1503AF0111BE8CD938EF70D202711240EECD5C65
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:08 +0000
ROA not before:           Tue 04 Feb 2025 18:43:08 +0000
ROA not after:            Tue 03 Feb 2026 18:48:08 +0000
asID:                     32098
IP address blocks:        201.174.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:03:af:01:11:be:8c:d9:38:ef:70:d2:02:71:12:40:ee:cd:5c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:08 2025 GMT
            Not After : Feb  3 18:48:08 2026 GMT
        Subject: CN=A8FA47C7E926BAC52D092ED6FB55584EB29873E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:da:67:f7:77:22:08:ea:fd:ec:66:79:98:
                    20:a3:58:7e:d8:4a:3e:1e:f2:38:8f:15:96:57:61:
                    09:87:41:33:4b:54:8d:c2:4a:0f:01:e0:db:4a:44:
                    52:85:da:4f:ba:22:17:8e:00:04:54:0e:26:83:84:
                    b6:a9:2d:b8:a8:23:bd:99:c2:93:9f:7e:54:44:f3:
                    f7:39:8a:89:55:f8:e3:cf:28:9b:f4:01:c1:79:d6:
                    f9:06:07:b8:a1:3f:21:f1:48:08:6d:15:df:24:0c:
                    ff:13:38:64:11:5c:b1:47:21:66:1f:b7:09:6a:8d:
                    5d:ab:6e:d5:c4:c4:f9:3e:ed:cf:f2:77:aa:84:e4:
                    60:d5:32:0f:3b:4d:b7:14:31:21:25:ed:f4:7c:44:
                    e2:4b:80:8e:d1:85:99:cd:9f:d3:24:f7:99:d9:cf:
                    a9:59:c2:8e:13:9e:7f:8d:bb:20:e5:82:09:6e:c4:
                    80:a4:6c:75:45:7b:61:2c:a8:a8:61:48:2b:cf:f5:
                    1d:8a:cf:c1:9f:a8:3d:4f:e7:94:0d:49:b1:3e:3a:
                    46:b5:b8:e2:81:42:d3:c5:bb:1a:77:f6:bc:f6:59:
                    e9:fb:b6:46:02:98:9e:8e:64:25:2e:45:57:bb:6e:
                    f0:6c:9f:1b:4c:3b:97:f6:c5:24:2b:3f:96:6a:16:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FA:47:C7:E9:26:BA:C5:2D:09:2E:D6:FB:55:58:4E:B2:98:73:E2
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:23:64:8e:38:37:a7:c0:44:1a:40:5b:96:7e:3c:ad:ee:6a:
         f7:8f:86:98:c5:1e:65:bb:93:61:8e:3d:27:75:8a:07:8c:18:
         ff:71:a1:eb:60:4e:73:7e:aa:cb:3c:79:b6:e6:43:85:af:6c:
         78:9e:65:88:4b:73:12:45:b7:77:bd:1b:ae:97:08:4f:68:49:
         f5:79:ef:92:d7:ee:2e:79:d4:a4:f2:c2:b7:f0:cb:6f:61:0f:
         25:27:13:69:01:e5:f6:22:82:d0:5a:81:86:6c:66:26:1b:d1:
         55:16:ce:5a:3e:7e:4a:3e:89:f2:7b:e3:cd:d0:1b:c8:d6:d9:
         10:33:0a:29:8e:12:62:99:75:17:d3:38:31:13:db:5a:f6:ad:
         07:28:56:6a:10:83:4a:3a:4b:19:33:6f:0d:d2:57:f2:a0:15:
         8a:c8:15:d3:21:4e:22:9a:20:f4:1f:af:81:da:1f:87:51:9c:
         85:d3:04:15:eb:9d:5d:2d:fa:c0:89:3b:b5:fa:7d:61:e5:eb:
         b0:ea:e0:62:f5:0c:da:94:65:0b:51:df:74:ba:93:c4:5c:da:
         de:f9:7f:5e:fe:eb:f2:13:cb:59:46:98:a3:c8:df:79:0e:36:
         e7:14:0b:c0:61:70:2e:62:8e:ac:7d:c5:3b:5a:5c:0b:6d:fc:
         b3:49:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:59 2025 by rpki-client