Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa
File:                     3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa (raw, json)
Hash identifier:          K1oJlj2bsR8CjHV+WnHTvNZcgrENdoK4NbSZ1vfb+y8=
Subject key identifier:   68:FE:87:88:D2:BE:3B:B1:8E:49:D7:8C:80:10:2F:05:E7:35:AB:E4
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       5A298279AA333964E89A7B6B7FE7A821E759890B
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:00 +0000
ROA not before:           Tue 04 Feb 2025 18:43:00 +0000
ROA not after:            Tue 03 Feb 2026 18:48:00 +0000
asID:                     32098
IP address blocks:        201.174.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:82:79:aa:33:39:64:e8:9a:7b:6b:7f:e7:a8:21:e7:59:89:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:00 2025 GMT
            Not After : Feb  3 18:48:00 2026 GMT
        Subject: CN=68FE8788D2BE3BB18E49D78C80102F05E735ABE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b5:1f:11:98:1b:89:3d:30:cc:9c:19:7b:b2:
                    f5:95:1e:e2:27:7f:ce:9b:98:cf:48:cc:2f:6f:2e:
                    e8:51:9d:ef:8e:2e:23:bb:d0:95:97:e2:2f:22:5d:
                    82:f2:cc:01:2c:45:76:cb:3f:f6:fc:02:c0:f2:33:
                    73:71:4c:64:cf:9e:fd:3a:8e:e9:41:3a:35:b1:f9:
                    e9:73:f4:7e:58:79:cd:be:3f:9e:3c:14:ca:8c:d3:
                    26:1c:90:ac:c8:18:72:76:08:a7:e4:9f:57:a9:58:
                    a1:67:6e:ff:f7:bb:b8:56:ce:b0:7d:9c:fc:a2:19:
                    17:b0:95:95:ae:bc:44:bb:12:60:b4:c6:00:18:d3:
                    f8:6a:e7:45:87:b2:81:33:a8:58:81:af:e3:59:88:
                    ca:84:e2:0c:f4:69:3c:6a:5e:14:67:fe:a3:83:ff:
                    d4:08:03:bd:09:7c:2a:82:d4:98:c9:09:92:5e:48:
                    50:14:a1:0d:a2:e1:8a:c8:2a:43:04:d6:e2:07:aa:
                    db:25:6e:d0:e7:36:c4:8a:da:9b:04:ab:26:67:44:
                    c9:ca:2e:06:96:5b:7c:74:9c:1d:fe:17:3c:4b:ad:
                    af:0f:e1:71:1c:51:4e:3b:63:6a:c2:c2:0e:85:33:
                    9f:71:5d:1f:8d:49:44:52:d1:34:4a:7a:4c:fa:5e:
                    42:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FE:87:88:D2:BE:3B:B1:8E:49:D7:8C:80:10:2F:05:E7:35:AB:E4
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:c8:09:08:58:83:04:51:5a:ad:a4:49:a0:6b:1e:b6:1c:bd:
         ff:12:60:b2:07:31:c2:5c:4a:40:72:87:fb:f0:57:59:98:12:
         65:7a:b0:31:fc:65:46:65:ab:e8:8d:8d:69:16:27:dd:a5:3c:
         e5:33:8a:61:f6:7e:a8:ff:5e:b7:ae:b9:44:12:67:a6:be:e1:
         fd:1e:38:e1:e7:e9:35:f8:9a:39:85:f1:68:67:61:80:8e:1d:
         b1:4f:dc:b4:a9:c5:95:d4:95:ca:4f:1a:0e:86:e1:2a:63:58:
         fc:8a:35:c7:62:44:a7:c5:a6:a9:79:84:4b:4c:c7:af:25:60:
         8b:ac:af:fc:a0:94:20:9d:cb:5d:ad:65:dc:1c:93:6f:8d:61:
         b4:7e:3d:82:d1:b8:ad:cb:eb:7a:69:70:6d:7a:21:0b:00:aa:
         93:c2:84:b7:a4:e7:9e:27:b2:b6:20:bf:c0:35:b8:69:5c:5d:
         38:96:05:3a:e1:de:da:6d:95:69:f5:fa:ec:95:00:9e:e0:a1:
         df:e4:d0:08:4e:5e:38:df:2d:87:b2:74:2e:71:be:61:1b:ee:
         ca:ab:7e:1f:c8:e8:04:d9:e4:44:92:39:61:93:62:f6:ba:e5:
         df:88:b2:e1:a5:8a:b4:07:56:06:f3:d0:94:ee:83:f0:5b:48:
         3a:26:5d:64
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWimCeaozOWTomntrf+eoIedZiQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNTAyMDQxODQzMDBaFw0yNjAyMDMxODQ4MDBaMDMxMTAvBgNV
BAMTKDY4RkU4Nzg4RDJCRTNCQjE4RTQ5RDc4QzgwMTAyRjA1RTczNUFCRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtR8RmBuJPTDMnBl7svWVHuIn
f86bmM9IzC9vLuhRne+OLiO70JWX4i8iXYLyzAEsRXbLP/b8AsDyM3NxTGTPnv06
julBOjWx+elz9H5Yec2+P548FMqM0yYckKzIGHJ2CKfkn1epWKFnbv/3u7hWzrB9
nPyiGRewlZWuvES7EmC0xgAY0/hq50WHsoEzqFiBr+NZiMqE4gz0aTxqXhRn/qOD
/9QIA70JfCqC1JjJCZJeSFAUoQ2i4YrIKkME1uIHqtslbtDnNsSK2psEqyZnRMnK
LgaWW3x0nB3+FzxLra8P4XEcUU47Y2rCwg6FM59xXR+NSURS0TRKekz6XkJrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUaP6HiNK+O7GOSdeMgBAvBec1q+QwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMzMyMzAzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFya7g
MA0GCSqGSIb3DQEBCwUAA4IBAQCFyAkIWIMEUVqtpEmgax62HL3/EmCyBzHCXEpA
cof78FdZmBJlerAx/GVGZavojY1pFifdpTzlM4ph9n6o/163rrlEEmemvuH9Hjjh
5+k1+Jo5hfFoZ2GAjh2xT9y0qcWV1JXKTxoOhuEqY1j8ijXHYkSnxaapeYRLTMev
JWCLrK/8oJQgnctdrWXcHJNvjWG0fj2C0bity+t6aXBteiELAKqTwoS3pOeeJ7K2
IL/ANbhpXF04lgU64d7abZVp9frslQCe4KHf5NAITl443y2HsnQucb5hG+7Kq34f
yOgE2eREkjlhk2L2uuXfiLLhpYq0B1YG89CU7oPwW0g6Jl1k
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:57 2025 by rpki-client