Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e33302e302f32332d3234203d3e203330313637.roa
File:                     3230312e3137342e33302e302f32332d3234203d3e203330313637.roa (raw, json)
Hash identifier:          h/AHEih4UTt5bZeuz1purovbDlqG5I8Pwpior9Blecs=
Subject key identifier:   A7:DD:DF:2A:22:DF:0B:94:C8:CB:83:59:8B:54:45:8F:80:11:09:23
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       36C74E900F3D7664B63E0871652366D7C187CEF7
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e33302e302f32332d3234203d3e203330313637.roa
Signing time:             Tue 04 Feb 2025 18:47:56 +0000
ROA not before:           Tue 04 Feb 2025 18:42:56 +0000
ROA not after:            Tue 03 Feb 2026 18:47:56 +0000
asID:                     30167
IP address blocks:        201.174.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c7:4e:90:0f:3d:76:64:b6:3e:08:71:65:23:66:d7:c1:87:ce:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:42:56 2025 GMT
            Not After : Feb  3 18:47:56 2026 GMT
        Subject: CN=A7DDDF2A22DF0B94C8CB83598B54458F80110923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:24:43:3c:b0:fc:7c:72:a1:fd:1f:c1:42:
                    a3:46:b9:95:76:65:df:0c:c8:36:c7:d2:33:ae:45:
                    15:cf:c4:92:f9:3d:8d:3b:c4:97:59:36:e7:fb:00:
                    d1:ac:6c:1a:1b:52:b7:f8:2a:a2:45:e1:18:23:a1:
                    c1:49:f7:ad:1b:ec:8a:ee:67:e6:90:4c:d1:f5:2d:
                    30:3e:81:a9:b4:2a:28:cc:c2:f3:9a:ce:25:0d:06:
                    65:97:b3:a2:d3:02:8a:25:36:c0:9a:a5:b8:fd:26:
                    2c:f9:23:4f:17:2f:ad:a1:4e:45:51:45:48:00:bf:
                    77:25:aa:4e:9e:23:2b:eb:90:1e:74:9a:ae:f4:a3:
                    1a:14:61:b9:47:e3:13:f4:f1:1b:6a:a8:13:af:0f:
                    af:ce:33:ff:f2:a6:58:d4:5b:6c:52:cf:6b:6f:0b:
                    80:8e:19:17:5e:c1:1d:8f:f9:ac:66:74:32:63:fc:
                    60:c1:e6:2b:c0:fd:ef:a5:7e:ef:d8:ee:ad:68:8c:
                    cc:68:44:f5:d5:95:2f:ad:19:0a:df:95:d2:8d:b0:
                    b5:72:e8:8f:13:66:fe:0d:90:81:8c:f8:16:1a:5c:
                    40:6c:2b:76:54:8b:06:b5:df:ac:aa:41:19:ac:19:
                    c2:f1:07:45:7a:a9:6b:d6:cd:c9:ba:fd:29:6e:21:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:DF:2A:22:DF:0B:94:C8:CB:83:59:8B:54:45:8F:80:11:09:23
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e33302e302f32332d3234203d3e203330313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:89:4a:d8:4b:94:c0:d4:93:0c:f6:82:9e:24:bf:0c:13:
         42:ea:1a:10:3f:3a:44:35:e1:36:cd:e5:e5:c7:86:3d:da:f0:
         3c:48:d9:89:b0:c3:b2:91:34:ba:a1:71:37:31:d3:65:71:6f:
         46:dc:5e:2f:e2:69:05:d7:09:4f:71:51:70:01:12:33:91:e8:
         a5:98:fc:97:da:1c:36:94:95:af:47:c8:c2:ab:cf:cc:b1:7b:
         c6:b7:24:61:4a:2a:d7:64:a1:52:32:4b:17:97:ac:e6:ce:bb:
         5c:ab:5b:c3:e1:fe:88:ae:88:f1:04:cb:a2:1a:fa:e8:13:e0:
         f1:94:07:82:23:45:d1:19:e5:2c:db:0c:d4:ff:67:31:34:4a:
         2b:16:08:4d:2e:46:a3:07:12:8b:da:fb:74:af:f3:4f:55:a3:
         b2:f8:8a:40:84:b7:00:25:e4:05:cd:d2:2f:86:70:7c:86:2a:
         54:69:29:d0:bf:26:86:18:27:80:3f:9d:d3:57:6b:ac:08:c3:
         a6:d1:82:76:87:94:ff:90:b9:06:78:6f:d0:0c:4e:32:09:df:
         38:de:61:16:1d:79:3c:0b:49:ff:6d:8b:6d:77:fd:0d:3e:36:
         2a:16:a5:c1:1d:ba:f2:58:92:0d:b3:66:b0:31:33:e4:de:fd:
         4a:e9:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:09:56 2025 by rpki-client