Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34302e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e34302e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          1EklsqxLNmOFzSYfI3GR/dX5fc9mtN/cX+uiZqNK+78=
Subject key identifier:   05:3C:E2:08:B9:E5:F6:56:D6:96:69:01:BD:EB:EA:72:B0:31:5D:31
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       218E8E808AEF2A213FC6F00889CACA9CF36A10D0
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34302e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:04 +0000
ROA not before:           Tue 04 Feb 2025 18:43:04 +0000
ROA not after:            Tue 03 Feb 2026 18:48:04 +0000
asID:                     32098
IP address blocks:        201.174.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:8e:80:8a:ef:2a:21:3f:c6:f0:08:89:ca:ca:9c:f3:6a:10:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:04 2025 GMT
            Not After : Feb  3 18:48:04 2026 GMT
        Subject: CN=053CE208B9E5F656D6966901BDEBEA72B0315D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:e2:7e:a6:4b:cc:cc:a8:7b:8d:d6:af:a2:
                    fd:1a:85:f9:7b:a2:41:e7:c8:b6:76:55:8e:ed:cc:
                    a7:63:34:05:8c:f8:3c:6c:9b:49:8b:83:c8:6c:85:
                    1d:b0:de:ba:c1:84:dd:ac:11:64:4e:26:02:74:17:
                    4c:e8:f5:a8:d8:29:b9:fb:35:3c:08:15:a7:0f:06:
                    4d:cb:ba:2e:7d:62:37:55:06:32:d9:67:d6:9d:0b:
                    f2:72:d2:83:5e:d4:6b:47:be:ef:f5:57:68:d1:a6:
                    08:92:e9:ed:93:50:46:40:e8:8c:67:6e:8a:04:26:
                    0e:4c:46:fe:88:bd:bd:bc:59:5f:37:f2:d1:66:a4:
                    b4:fb:d1:c2:c8:2e:19:c4:25:0f:40:80:63:36:8c:
                    87:0f:be:93:e9:75:33:ae:f9:73:4d:5f:e9:a8:1a:
                    24:48:ae:e4:b0:63:13:ed:e8:ec:b7:33:84:a5:e3:
                    be:49:77:74:44:a2:42:65:a9:5f:18:4c:32:28:0e:
                    f6:18:47:0a:39:6b:cd:03:51:42:7c:b0:7c:ad:21:
                    d0:fc:0e:af:08:85:dc:b9:cd:8d:eb:ae:fe:73:56:
                    9e:6f:0b:6e:ac:81:5f:2f:7a:46:57:8b:ee:2a:f8:
                    02:53:1c:83:03:51:85:96:ef:df:f0:db:0a:6e:d5:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:E2:08:B9:E5:F6:56:D6:96:69:01:BD:EB:EA:72:B0:31:5D:31
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34302e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:fa:d4:4f:3c:bc:06:d4:44:90:14:b9:f6:df:dd:a2:3a:
         58:a9:b0:27:29:6f:51:7a:ca:63:09:fd:58:5a:52:cb:2d:91:
         1e:40:3c:4e:a3:f7:c3:4f:5e:da:f8:4c:40:a8:45:1a:16:72:
         31:1b:46:a2:9f:28:15:bf:16:68:6e:1b:40:09:91:39:61:fd:
         be:b3:08:01:5d:d0:90:14:7e:51:5f:27:f7:ce:9f:48:92:7f:
         8c:1b:f6:9f:29:c4:40:5f:eb:ba:25:e5:7d:00:67:b5:1c:21:
         e2:8f:62:8f:df:39:56:fd:18:47:27:ba:e5:73:75:60:50:d8:
         b7:06:3f:a3:41:3b:24:80:af:ad:bf:05:c1:0a:ae:bd:35:ed:
         18:c4:70:e8:3d:3a:19:eb:2e:4c:11:4a:54:b9:6b:79:fa:12:
         75:dd:c7:90:86:e8:89:b4:a6:bb:be:85:4a:f4:18:df:2d:58:
         5a:4c:c5:4d:0e:03:1e:7d:5a:87:3c:59:e4:2c:46:e7:56:b0:
         1b:bb:76:35:ae:33:55:e2:46:fd:03:55:b9:bd:10:48:b9:b4:
         ac:dd:ee:7b:01:11:68:1a:aa:be:ff:9b:80:ed:ac:63:50:69:
         b5:3c:cc:d3:9c:7f:86:ab:a8:dc:9f:1f:a1:f4:78:01:37:84:
         54:75:ad:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIY6OgIrvKiE/xvAIicrKnPNqENAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNTAyMDQxODQzMDRaFw0yNjAyMDMxODQ4MDRaMDMxMTAvBgNV
BAMTKDA1M0NFMjA4QjlFNUY2NTZENjk2NjkwMUJERUJFQTcyQjAzMTVEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEh+J+pkvMzKh7jdavov0ahfl7
okHnyLZ2VY7tzKdjNAWM+Dxsm0mLg8hshR2w3rrBhN2sEWROJgJ0F0zo9ajYKbn7
NTwIFacPBk3Lui59YjdVBjLZZ9adC/Jy0oNe1GtHvu/1V2jRpgiS6e2TUEZA6Ixn
booEJg5MRv6Ivb28WV838tFmpLT70cLILhnEJQ9AgGM2jIcPvpPpdTOu+XNNX+mo
GiRIruSwYxPt6Oy3M4Sl475Jd3REokJlqV8YTDIoDvYYRwo5a80DUUJ8sHytIdD8
Dq8Ihdy5zY3rrv5zVp5vC26sgV8vekZXi+4q+AJTHIMDUYWW79/w2wpu1YdhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBTziCLnl9lbWlmkBvevqcrAxXTEwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzNDMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcmuKDAN
BgkqhkiG9w0BAQsFAAOCAQEAQ4361E88vAbURJAUufbf3aI6WKmwJylvUXrKYwn9
WFpSyy2RHkA8TqP3w09e2vhMQKhFGhZyMRtGop8oFb8WaG4bQAmROWH9vrMIAV3Q
kBR+UV8n986fSJJ/jBv2nynEQF/ruiXlfQBntRwh4o9ij985Vv0YRye65XN1YFDY
twY/o0E7JICvrb8FwQquvTXtGMRw6D06GesuTBFKVLlrefoSdd3HkIboibSmu76F
SvQY3y1YWkzFTQ4DHn1ahzxZ5CxG51awG7t2Na4zVeJG/QNVub0QSLm0rN3uewER
aBqqvv+bgO2sY1BptTzM05x/hquo3J8fofR4ATeEVHWtiA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:22 2025 by rpki-client