Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32342d3234203d3e203330313637.roa
File:                     3230312e3137342e34342e302f32342d3234203d3e203330313637.roa (raw, json)
Hash identifier:          j2gQYxBA8wFhs7RBH/Y9ObXdleR/NbWRyY7owVLzHNg=
Subject key identifier:   B7:60:06:DB:65:0B:16:99:42:AD:07:7C:27:80:F6:57:53:B8:79:10
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3C5532EC686290BE0B850E635430B1749021243E
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32342d3234203d3e203330313637.roa
Signing time:             Tue 04 Feb 2025 18:48:04 +0000
ROA not before:           Tue 04 Feb 2025 18:43:04 +0000
ROA not after:            Tue 03 Feb 2026 18:48:04 +0000
asID:                     30167
IP address blocks:        201.174.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:55:32:ec:68:62:90:be:0b:85:0e:63:54:30:b1:74:90:21:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:04 2025 GMT
            Not After : Feb  3 18:48:04 2026 GMT
        Subject: CN=B76006DB650B169942AD077C2780F65753B87910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:fe:57:01:0c:6b:63:46:2e:c5:81:c9:5b:
                    8c:23:26:1f:ed:84:f9:ff:f9:af:0f:eb:7c:24:4c:
                    74:d1:e6:f4:d6:65:f5:e4:9e:c7:db:cf:ab:64:6f:
                    6d:4e:4e:30:09:5d:be:18:4a:8e:fe:29:03:7b:a2:
                    f0:9d:34:59:c2:61:97:b6:ea:95:d9:59:0c:fe:a1:
                    57:3b:3c:1b:7d:f8:2e:4e:e0:60:27:fb:25:6e:66:
                    b6:3a:39:59:da:2b:30:bd:71:92:cf:97:c9:8f:53:
                    b9:8f:ea:fe:58:2f:44:f2:ad:73:d3:7e:24:14:f5:
                    60:14:5b:9b:42:fc:14:98:50:37:81:d0:e4:cb:2f:
                    e0:6b:29:80:93:ba:08:93:4f:32:8d:a7:f9:60:62:
                    e5:1d:15:e1:47:12:f9:f9:93:e9:7c:db:6a:de:26:
                    1f:bd:89:4a:36:2d:59:52:ce:7f:9f:4a:08:ba:29:
                    a0:06:c6:cb:fe:eb:f9:99:32:30:46:b6:3b:31:96:
                    3b:98:b5:55:20:ae:36:6d:a6:71:55:72:4c:13:99:
                    b1:8b:3d:b5:26:d7:a6:2e:85:94:eb:8f:71:dd:57:
                    f5:d9:8d:26:d0:58:35:53:f9:d6:e5:16:b3:ed:c4:
                    20:4b:6e:75:9c:ec:04:c1:35:11:90:81:6f:ac:a2:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:06:DB:65:0B:16:99:42:AD:07:7C:27:80:F6:57:53:B8:79:10
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32342d3234203d3e203330313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:66:cb:30:49:e5:e9:10:fe:b7:d9:09:82:ec:23:e5:8e:
         ee:e2:c9:82:e1:49:5c:e8:25:6d:c8:60:a2:97:06:fe:d1:4a:
         4f:64:0e:0c:3f:b1:a7:cd:2c:26:a0:df:86:83:26:6d:dd:5f:
         ef:da:26:79:31:34:80:a6:eb:68:17:02:70:6c:28:f9:4c:4d:
         da:1d:bd:2e:fd:22:78:57:30:85:cf:47:85:8a:b6:88:c3:e4:
         3d:b7:8e:b5:4c:82:5c:8d:da:1a:db:ac:02:f3:d0:34:6f:06:
         8f:a2:4c:61:ed:47:7b:ae:65:b1:84:ae:90:c7:57:ef:bc:ca:
         81:3f:09:29:e6:00:99:93:2e:9b:70:cb:70:88:f1:d3:61:43:
         bc:97:8e:20:51:5a:e5:ef:a8:82:bd:dd:c7:59:ee:ed:71:5b:
         dd:6d:96:51:56:ed:e2:af:ed:a7:7e:36:71:29:c7:a3:49:d1:
         b3:27:b0:29:e8:ed:97:11:72:5f:fb:c4:41:f7:d7:01:74:7b:
         d5:e0:29:70:2e:cb:65:06:66:44:13:6c:c1:01:fa:35:f8:44:
         4c:10:03:04:45:4b:06:be:81:1b:31:da:fe:df:f9:0f:76:6c:
         e8:d8:00:a9:08:91:a2:93:88:1f:05:7d:ae:f4:d9:57:ad:63:
         25:4e:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:21 2025 by rpki-client