Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32382e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e32382e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          N4Zjl8wx/61DtSyxJgY11i/o+bftxZSlMyw42MirqU4=
Subject key identifier:   54:5D:BA:F8:D3:5A:C9:27:2A:A0:DA:7E:C5:DD:55:42:E1:55:26:4B
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       79C4B5B641B5FF5994F71BFC5DBEA96F82A4A442
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32382e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:07 +0000
ROA not before:           Tue 04 Feb 2025 18:43:07 +0000
ROA not after:            Tue 03 Feb 2026 18:48:07 +0000
asID:                     32098
IP address blocks:        201.174.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c4:b5:b6:41:b5:ff:59:94:f7:1b:fc:5d:be:a9:6f:82:a4:a4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:07 2025 GMT
            Not After : Feb  3 18:48:07 2026 GMT
        Subject: CN=545DBAF8D35AC9272AA0DA7EC5DD5542E155264B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:d4:99:fc:5a:39:de:20:42:a7:28:5e:ff:
                    1c:ba:5d:ef:3d:88:f7:bb:06:9a:11:71:26:85:0a:
                    21:97:ae:af:9a:1c:c8:16:f4:51:18:8e:3e:72:c3:
                    e1:7a:55:29:78:50:18:cd:c6:eb:c3:65:b2:1c:d5:
                    a9:60:a2:18:ba:94:17:5d:6c:07:aa:e6:fd:e9:36:
                    be:04:32:17:b7:15:f0:95:2b:18:06:24:08:b1:ed:
                    51:77:cf:23:df:5e:d6:ba:7b:87:8e:0f:45:c4:22:
                    b5:7a:08:cb:85:0f:e9:61:0d:ee:95:b4:41:0f:d3:
                    fb:a2:aa:38:ef:2b:d3:5a:94:3f:ed:ff:b6:21:83:
                    50:a1:2e:7e:42:83:bf:ab:16:f7:89:41:58:27:62:
                    19:30:b1:49:f5:00:de:ae:35:8d:23:61:11:72:25:
                    34:94:90:e3:18:94:7c:9c:14:e1:9d:46:f3:3e:2a:
                    6b:1f:b4:7d:d8:0b:d8:bf:32:ed:05:c3:3d:c3:36:
                    d2:e3:28:00:30:63:5f:08:ae:67:80:64:75:df:6a:
                    bb:12:eb:16:64:19:70:f6:de:1e:11:6d:45:c8:31:
                    37:a2:53:57:87:0a:bd:45:ce:41:35:f3:67:f4:0a:
                    e5:b2:e8:b0:af:3f:7c:13:30:83:51:47:18:80:23:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5D:BA:F8:D3:5A:C9:27:2A:A0:DA:7E:C5:DD:55:42:E1:55:26:4B
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32382e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:1b:43:d3:cc:e9:5e:38:16:dc:0f:39:b3:64:51:dd:14:22:
         1f:15:09:4d:f5:47:0d:64:e4:48:9a:16:f1:d7:77:16:dc:5e:
         24:c9:d3:d0:07:a2:eb:63:6a:d9:62:99:6a:b3:6b:21:ae:f8:
         5a:c0:84:c2:83:f4:c7:e9:13:40:d8:0f:09:36:fc:8f:81:46:
         2e:d3:d8:89:f9:86:3b:b3:6e:9a:52:bd:d0:a3:fa:b8:b7:a7:
         ab:31:16:d1:65:54:25:e8:6c:8a:c5:b5:b6:2a:85:9a:de:55:
         ee:6e:84:a4:a6:9c:07:5e:af:c1:6e:cf:98:7e:04:a9:44:41:
         5b:d6:61:01:ad:45:ad:36:b7:bd:22:f8:4b:79:d2:40:a2:8f:
         b1:98:c6:49:e7:cb:7f:90:c4:30:08:ff:fb:53:16:84:d3:1c:
         25:89:c8:ed:5e:a2:39:9e:c1:62:6f:ee:b4:71:23:94:d6:d0:
         2e:ea:bd:15:f1:19:a3:26:92:db:9d:a7:e6:36:ac:35:a7:7a:
         41:86:29:cc:c9:76:0a:a4:94:0a:3d:95:41:ed:06:67:27:16:
         49:76:5d:1f:0a:d1:08:16:1e:2b:b6:e1:e8:e1:04:f8:98:85:
         90:71:a7:e2:73:ae:60:31:29:84:89:fe:52:7d:3b:04:d5:6a:
         71:5c:a4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:21 2025 by rpki-client