Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32342e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e32342e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          dCMjiy7iMScvI+jpA3EPvbwekaC8OS1BNWNFB6FXgYI=
Subject key identifier:   74:3A:D5:71:35:80:A0:9C:89:B5:12:C7:CE:CB:3A:75:C1:4A:59:64
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       35119CFF6AC72DE722FD914C4B3AEA9EB18FBDB8
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32342e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:00 +0000
ROA not before:           Tue 04 Feb 2025 18:43:00 +0000
ROA not after:            Tue 03 Feb 2026 18:48:00 +0000
asID:                     32098
IP address blocks:        201.174.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:11:9c:ff:6a:c7:2d:e7:22:fd:91:4c:4b:3a:ea:9e:b1:8f:bd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:00 2025 GMT
            Not After : Feb  3 18:48:00 2026 GMT
        Subject: CN=743AD5713580A09C89B512C7CECB3A75C14A5964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:f6:13:b0:29:a0:ec:fb:13:1f:7e:5d:90:
                    92:c4:b9:76:99:64:70:65:f7:db:f6:34:9c:b2:99:
                    c9:38:4d:d4:ba:d6:bc:32:90:eb:b6:1a:7e:fd:91:
                    01:a9:b8:cc:82:f5:b0:01:20:20:fd:70:12:4e:9c:
                    80:68:81:a0:f8:a1:d2:62:92:56:a1:e1:54:54:07:
                    bd:fe:dd:5f:8a:5a:aa:3c:2a:fa:e1:08:3e:55:41:
                    ed:f7:d2:29:31:59:bd:13:f5:67:45:cb:97:26:7f:
                    34:68:f6:c9:59:d5:6c:64:81:f7:02:e0:65:29:e1:
                    e3:e4:18:61:80:a2:96:92:20:20:fc:e6:75:16:1c:
                    30:c7:b9:57:fe:41:97:da:cf:65:a9:f8:26:bb:33:
                    ee:6d:43:fc:63:3c:9c:27:66:a5:ab:e9:da:1f:01:
                    49:c2:5c:83:d6:1e:71:91:e7:af:46:15:b9:a4:e4:
                    95:92:6d:9f:96:fb:41:28:c1:ab:80:98:bb:3c:c4:
                    44:5d:9c:df:ad:3c:8c:22:af:f0:48:83:cd:88:7d:
                    91:5c:d2:4f:2c:6e:a1:41:6b:37:80:b8:e7:5e:1b:
                    36:59:2f:2d:dd:da:f7:34:aa:d6:c1:65:51:41:9c:
                    7e:78:d7:c5:7d:d4:28:f8:3c:19:15:5b:f4:6b:0a:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:D5:71:35:80:A0:9C:89:B5:12:C7:CE:CB:3A:75:C1:4A:59:64
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32342e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:a9:16:98:d6:94:55:08:89:71:10:40:6e:e6:85:4d:fd:
         aa:e1:49:d9:0b:ee:3a:75:93:bb:a1:05:e9:1c:12:58:f1:04:
         3b:fe:20:b3:55:66:5f:be:1a:55:1f:dd:4a:5d:f1:6d:d1:00:
         22:b8:0c:90:82:91:dc:c7:3d:12:e0:e1:e7:98:f0:5c:f5:1d:
         06:46:a2:d1:39:66:81:b6:c4:3d:01:0e:8a:66:6f:f3:f5:36:
         cd:33:a7:dc:7c:52:6d:6c:13:68:5c:0f:cd:f2:7d:b5:b4:4e:
         1d:2b:20:f8:2e:48:df:3a:40:88:7c:d6:69:4f:10:a6:04:65:
         35:aa:38:ce:37:5c:d6:c9:0c:58:24:46:b9:1a:9a:4f:4b:86:
         e3:0d:b4:d9:0f:5e:c9:e7:c8:d8:04:e6:5a:bb:c4:da:d0:62:
         71:82:5c:5d:ca:ff:ee:87:ba:ec:26:aa:07:d7:33:be:ea:14:
         5b:a7:3b:75:c5:e5:b4:b2:50:48:01:a8:61:bd:80:cb:46:80:
         cf:0b:74:2f:49:25:c1:14:86:9c:5a:cc:35:d3:e3:18:04:25:
         75:7e:27:18:43:8d:00:92:95:68:34:7d:d1:87:96:d9:33:79:
         66:c0:df:1c:7c:db:08:19:f0:e7:66:fa:14:80:99:81:d8:53:
         00:4d:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:22 2025 by rpki-client