Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e31362e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          bq9bZ89KBTYUbZOXnXshG/j/ZHHBOBot4cKuSuI6u70=
Subject key identifier:   4B:79:41:8E:63:86:0B:36:3F:E2:2B:53:B7:68:C4:F2:5A:99:B5:27
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       386AC2ED8D8665760D61744AD8B62036EEA224D5
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:00 +0000
ROA not before:           Tue 04 Feb 2025 18:43:00 +0000
ROA not after:            Tue 03 Feb 2026 18:48:00 +0000
asID:                     32098
IP address blocks:        201.174.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6a:c2:ed:8d:86:65:76:0d:61:74:4a:d8:b6:20:36:ee:a2:24:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:00 2025 GMT
            Not After : Feb  3 18:48:00 2026 GMT
        Subject: CN=4B79418E63860B363FE22B53B768C4F25A99B527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:d1:55:4e:bd:c5:87:bc:6c:25:d9:a4:56:
                    15:85:fa:d8:94:c4:e4:a0:14:27:91:c5:ab:15:f2:
                    7a:6a:cf:40:e9:49:47:03:bf:d0:7d:78:04:2a:b6:
                    34:9b:c7:c0:59:9b:ab:37:cb:b1:a1:57:5b:42:56:
                    08:12:27:aa:8b:fa:07:b2:9f:e6:30:a3:8c:2b:dc:
                    ad:4f:40:56:7a:68:c0:bf:52:c4:37:57:f4:e7:e0:
                    70:03:7b:23:72:43:78:30:43:fd:e2:8a:15:da:05:
                    52:e1:bc:67:5d:ed:95:21:3e:96:6e:d6:64:39:c3:
                    35:5d:94:51:7f:64:73:c6:9c:2f:02:e9:2b:f7:3f:
                    bc:bb:bd:14:f6:57:0c:5d:6f:d0:04:32:bb:bb:7d:
                    06:cf:be:33:95:d1:3f:7b:fe:bd:2d:50:6e:94:7f:
                    dc:30:fb:b0:0d:e9:ef:4a:bf:9b:cd:f8:59:20:3a:
                    d8:29:12:ea:a1:49:c1:99:54:6b:7e:e4:99:a8:eb:
                    e7:d5:e7:93:fc:97:b8:41:87:f8:33:ad:e3:66:dc:
                    42:2c:cb:97:e1:6f:a5:99:d2:3f:f9:3d:c1:f8:02:
                    9f:23:24:b6:58:98:03:e0:7c:fe:31:a0:72:21:16:
                    b4:b8:13:59:20:19:f8:ff:80:a4:99:25:fd:05:8f:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:41:8E:63:86:0B:36:3F:E2:2B:53:B7:68:C4:F2:5A:99:B5:27
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:c0:52:1b:d7:56:5f:49:0e:2e:df:33:ac:8c:a7:05:24:
         d3:83:68:e2:ec:a1:77:bc:9d:35:01:47:5d:c7:6d:d5:04:12:
         f8:4e:de:72:15:23:1c:a9:59:3c:48:4d:5b:cd:6b:c7:3f:8e:
         12:54:a0:df:f0:17:70:54:2c:90:b3:7b:de:06:54:24:ce:24:
         a8:1c:21:ce:d5:5e:27:75:f5:64:49:4f:77:5a:a9:ab:e1:bb:
         e1:fa:fc:f8:f0:3f:6c:8a:73:7b:10:73:0d:6f:58:6e:89:79:
         09:a9:4d:72:0a:a7:17:b4:66:d4:88:46:22:f2:d7:35:b0:76:
         3b:5a:38:66:4f:ad:7c:c7:f6:a2:f8:9e:ad:11:2f:06:8b:d0:
         c2:ed:55:3d:d5:49:aa:e8:ab:b0:d0:9f:ae:7b:f9:04:b0:82:
         d3:51:26:c3:4d:a2:c3:8f:05:b3:b4:0b:44:27:54:56:51:1e:
         d7:76:df:f9:a4:be:0c:59:f9:a6:18:55:5f:8f:17:7c:90:76:
         28:47:1d:85:fe:8a:32:9b:1a:8d:50:0a:7e:1d:9d:da:b3:fc:
         03:e2:75:84:fa:d0:18:c8:5f:81:f7:9e:8b:da:31:72:c5:87:
         27:2a:26:8e:c0:e8:f6:6e:85:8f:d3:80:03:75:90:f9:c7:da:
         8f:7a:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:56 2025 by rpki-client