Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34332e302f32342d3234203d3e203330313637.roa
File:                     3230312e3137342e34332e302f32342d3234203d3e203330313637.roa (raw, json)
Hash identifier:          XKAuROxECPjrHHmkpGXNDjkXSoBoc+FmxKpg30QfSAM=
Subject key identifier:   90:B0:30:B8:A9:BE:0D:13:A3:26:21:20:45:4B:A5:78:13:FC:C0:62
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       5978507B083D4B96A41435C22666281B994AFE6F
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34332e302f32342d3234203d3e203330313637.roa
Signing time:             Tue 05 Mar 2024 18:17:50 +0000
ROA not before:           Tue 05 Mar 2024 18:12:50 +0000
ROA not after:            Tue 04 Mar 2025 18:17:50 +0000
asID:                     30167
IP address blocks:        201.174.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:50:7b:08:3d:4b:96:a4:14:35:c2:26:66:28:1b:99:4a:fe:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:50 2024 GMT
            Not After : Mar  4 18:17:50 2025 GMT
        Subject: CN=90B030B8A9BE0D13A3262120454BA57813FCC062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:3c:37:94:c5:0a:60:38:39:bb:af:49:73:
                    e5:98:73:a3:8b:a8:f7:ea:82:2c:80:9b:ef:df:5f:
                    02:f2:60:80:a8:75:49:ab:5e:0f:86:c5:4b:8b:a5:
                    f4:b5:e4:88:6a:a7:9a:69:bd:0e:bf:c5:bd:2e:b6:
                    41:0e:6e:c7:1c:82:2f:78:60:80:02:62:70:b6:59:
                    02:99:5b:b6:59:b2:7e:34:55:2f:e1:24:50:fa:61:
                    77:17:b5:50:3f:61:67:9d:42:54:7d:25:a1:2f:a3:
                    71:90:5f:11:b1:b4:09:c8:74:d5:53:b6:33:73:23:
                    49:11:eb:ec:01:45:b6:68:10:59:b5:52:49:8d:50:
                    32:b5:7d:8f:b6:15:df:d7:48:2e:8f:5d:03:f5:c7:
                    a1:42:42:6c:54:da:b1:07:94:d7:4d:87:7e:10:72:
                    a4:20:6e:23:f7:dc:94:1c:08:53:db:12:55:1b:10:
                    39:e0:9f:13:f3:33:25:64:e3:29:9e:dc:06:91:ab:
                    bd:45:0d:51:6a:cd:5d:14:49:c8:6b:83:37:48:c3:
                    77:c2:b1:20:30:b8:99:a9:a4:c2:30:a4:7c:96:dd:
                    31:e0:8a:0c:da:15:73:e1:af:56:3e:72:78:51:0f:
                    3f:b7:f8:d4:10:8f:e8:7e:57:dc:07:aa:d0:cb:af:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:30:B8:A9:BE:0D:13:A3:26:21:20:45:4B:A5:78:13:FC:C0:62
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34332e302f32342d3234203d3e203330313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4f:0b:f0:d2:2a:62:6a:67:77:d9:cb:03:5c:dc:d6:9d:1a:
         db:90:36:2d:22:a7:7e:5d:89:b9:7f:ba:c6:eb:13:f2:3e:1a:
         74:d1:04:45:16:9e:2b:2f:e9:80:f5:4d:d6:9f:3e:9a:41:5b:
         14:b9:67:d9:d0:0d:b0:67:91:0a:ce:41:af:7f:51:c1:f6:12:
         b1:ae:89:1d:1b:61:fa:a3:73:18:e3:20:ab:21:57:4b:ac:df:
         2b:20:c8:8e:1c:7d:65:0c:e6:4b:d5:67:39:3c:8e:68:43:67:
         e9:6e:2e:8c:7d:84:dd:9d:56:55:fa:4b:b0:7d:0a:d9:26:8c:
         23:3d:ec:c4:47:5a:41:8e:32:af:44:88:c2:51:3d:5f:19:5b:
         7d:0d:27:fc:f0:89:ad:d4:e2:68:4d:26:18:92:1f:07:54:28:
         f4:74:91:25:df:a2:55:b7:01:8c:e6:b0:2a:98:03:df:81:4c:
         6a:14:eb:4a:e5:93:fe:6f:d7:81:39:27:7c:a8:eb:10:78:f2:
         73:88:3c:d7:a0:3c:05:9b:cd:fe:02:2a:7c:91:2f:2f:e5:db:
         d2:a8:40:e4:aa:1c:7b:40:b5:85:a0:e7:86:cf:7d:7b:79:f4:
         2e:22:b9:fd:b0:77:88:a8:0e:96:98:ac:af:3c:e1:2c:19:35:
         e4:c2:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:33:26 2024 by rpki-client on console-fra.rpki-client.org