Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          7nHfyZENAhn/EHX+Obu3RQ4nl8tDgn5T0gXVRVRa0hg=
Subject key identifier:   C5:C2:7F:E2:44:10:6D:50:16:7E:FB:B2:D5:9A:7C:E7:B2:23:A6:0C
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       351A312D100D89D69F9D5C0353838EF32533B573
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:04 +0000
ROA not before:           Tue 04 Feb 2025 18:43:04 +0000
ROA not after:            Tue 03 Feb 2026 18:48:04 +0000
asID:                     32098
IP address blocks:        201.174.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1a:31:2d:10:0d:89:d6:9f:9d:5c:03:53:83:8e:f3:25:33:b5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:04 2025 GMT
            Not After : Feb  3 18:48:04 2026 GMT
        Subject: CN=C5C27FE244106D50167EFBB2D59A7CE7B223A60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:16:41:89:76:65:26:75:b0:a1:cd:7c:e7:
                    96:fa:8a:06:f8:9c:5b:b7:f6:1f:8c:a4:1d:a5:2f:
                    d6:c8:ee:15:8f:46:f2:cb:a1:8e:21:56:82:20:df:
                    1f:6d:42:80:5d:f1:bb:9b:5d:d1:8f:80:cf:4c:c9:
                    fd:20:d6:4b:1b:7e:7a:01:73:75:23:cf:d9:41:1e:
                    dc:96:12:b9:20:21:0a:d8:94:9b:cd:ec:0e:dc:cc:
                    68:c5:49:2f:a5:36:54:fe:43:21:94:aa:b2:5f:55:
                    ed:c8:d9:e1:a8:d6:6f:e9:f7:f4:e4:7d:6c:3d:7d:
                    c2:5f:8a:e4:13:1b:9a:77:5a:12:71:58:31:f4:b4:
                    1d:a0:cc:0e:8b:fb:ee:28:ee:7b:d8:db:97:f3:e8:
                    f3:35:2e:eb:f5:c0:0b:81:bd:20:c7:8e:e3:0f:ff:
                    56:fe:b7:22:58:4f:eb:6c:02:d1:ab:9c:9e:e3:48:
                    40:6c:a5:40:cd:df:84:06:4d:27:3c:9f:88:f1:79:
                    0b:f6:eb:44:b9:e0:d0:6d:b3:97:2e:7e:04:1d:30:
                    69:d8:fd:a0:94:aa:e1:83:51:97:6b:55:1e:37:84:
                    d2:00:a7:6e:3f:99:68:2a:0f:a0:85:cc:d5:e2:24:
                    55:1d:cd:1d:f0:0b:b7:05:bb:45:40:cb:b2:fc:0f:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:7F:E2:44:10:6D:50:16:7E:FB:B2:D5:9A:7C:E7:B2:23:A6:0C
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:ea:06:55:17:f3:1d:1b:63:a1:09:41:42:66:90:90:45:
         cc:11:53:d5:e8:bd:8e:69:1e:85:cd:92:aa:08:e9:42:63:dc:
         dc:8a:14:06:f1:90:c9:d2:1f:0a:61:ad:e9:fc:a9:65:d0:b2:
         81:4e:eb:19:a3:c3:da:fa:73:48:42:61:a3:b4:ca:b4:1c:02:
         a1:f5:74:72:b2:a8:dc:a6:d2:86:67:78:ac:ba:b8:92:4d:24:
         2a:96:a9:64:c5:cd:d9:bd:87:34:79:f3:6e:68:81:ea:8a:56:
         b3:eb:fd:b9:71:64:0b:93:c7:f9:78:5b:7f:75:5f:8d:f2:19:
         45:c4:49:5f:bd:95:cf:ee:5b:3b:62:26:02:72:d1:aa:f0:31:
         7d:ef:22:a2:8e:f0:90:7d:91:f6:d3:03:ec:e9:19:88:9c:30:
         ca:51:b1:6a:da:92:61:07:11:59:69:f9:c0:7f:8a:5e:b5:fe:
         d6:2f:d4:1c:05:2c:77:8c:3e:fd:89:52:50:ed:2c:ab:46:cb:
         5d:a9:3f:69:5f:cb:7d:9b:46:1f:e0:ba:da:69:da:10:fa:2b:
         ac:72:ba:28:97:f1:c5:5d:4a:b0:f7:46:e5:ef:37:1f:64:40:
         a4:f0:ad:38:63:d8:03:59:75:12:c5:dc:b2:30:66:40:d6:cd:
         06:7e:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:58 2025 by rpki-client