Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e35362e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e35362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          DWqsVh+fkwGwsCxl9EpYUI30dHBdWGAvXz4MeuKB9sE=
Subject key identifier:   58:D0:E2:CE:4F:52:2D:45:2D:DD:54:E5:45:9A:8E:CE:7D:67:D0:42
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       29A36A0B05D6E48D565C1492CD1ADC0E85E2560F
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e35362e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:02 +0000
ROA not before:           Tue 04 Feb 2025 18:43:02 +0000
ROA not after:            Tue 03 Feb 2026 18:48:02 +0000
asID:                     32098
IP address blocks:        201.174.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a3:6a:0b:05:d6:e4:8d:56:5c:14:92:cd:1a:dc:0e:85:e2:56:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:02 2025 GMT
            Not After : Feb  3 18:48:02 2026 GMT
        Subject: CN=58D0E2CE4F522D452DDD54E5459A8ECE7D67D042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:e7:72:60:3b:8a:fa:74:e0:14:c3:3f:bc:
                    ca:f7:5d:14:d7:f4:94:49:7d:66:58:1b:fd:ea:e0:
                    0d:ac:bc:2d:78:2a:28:a9:60:a2:11:e4:62:8f:f1:
                    16:ec:96:2f:4f:7f:df:18:f0:d4:b1:03:0c:79:77:
                    15:68:ed:ac:b7:52:8e:50:4f:12:d7:09:66:b2:61:
                    63:03:4e:69:96:c5:2f:57:ef:19:c5:c5:92:01:9b:
                    2e:f7:63:fb:c1:41:fd:11:d1:c2:7e:34:22:48:7e:
                    f8:b2:23:de:95:4e:5e:d8:a8:7c:8a:ca:b0:28:95:
                    34:f4:9d:7b:92:49:d0:9c:db:70:8f:da:3a:22:76:
                    84:9a:98:1a:47:03:b7:0a:fb:65:99:44:8f:08:85:
                    f7:22:8c:d7:e5:16:03:9b:c5:09:b3:92:22:5b:4e:
                    ed:28:32:7b:08:a0:0a:5c:9c:a2:0d:c5:0f:24:87:
                    a8:c7:c7:0d:40:76:a3:2e:39:64:c7:68:cb:bc:c4:
                    64:91:23:1a:ba:68:b2:21:6f:49:1d:0a:a6:d1:f1:
                    5d:38:58:27:8e:d4:32:c1:92:f7:31:77:68:79:2d:
                    31:8b:8f:bf:8b:2a:36:d1:57:b2:52:59:5f:ee:05:
                    23:82:9c:8a:65:59:bd:91:ae:ee:f7:05:64:62:27:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:E2:CE:4F:52:2D:45:2D:DD:54:E5:45:9A:8E:CE:7D:67:D0:42
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e35362e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:11:53:bd:39:b2:eb:d4:d4:b0:3f:3c:b1:44:ee:c9:ae:4a:
         8e:ba:38:d0:ff:1b:7f:38:22:ae:91:04:80:9b:ea:66:b9:ee:
         79:fd:3f:85:fa:76:23:99:ed:b1:c4:6e:1d:06:85:3e:4e:60:
         6e:29:de:83:f2:61:74:34:b1:5d:36:1a:d1:4e:69:b0:4a:bc:
         1a:67:47:ef:32:9c:cf:f2:6f:a8:ba:aa:71:91:47:57:8e:cd:
         20:66:13:ef:32:8d:8a:95:ac:b5:5f:b9:b5:29:c6:b2:f3:96:
         80:72:be:8b:9b:a4:11:73:d0:53:48:31:3e:98:9e:b5:1e:71:
         50:61:44:a1:77:9f:d0:78:f4:36:77:8b:49:98:23:2b:51:7d:
         25:22:f1:74:34:e0:5d:db:ff:3b:0e:1a:7c:35:99:72:2e:eb:
         2e:1a:51:ea:15:d2:17:49:c5:99:ee:8d:e8:b2:24:07:87:7b:
         fc:a7:cf:a0:f4:b7:d5:55:09:56:a9:9a:78:1a:47:84:89:c8:
         38:f0:64:19:f0:67:d3:c4:76:99:f6:b9:f3:4a:6c:f7:bb:c6:
         ea:1f:77:8f:08:af:79:fa:95:92:0e:75:6c:b1:53:12:ba:fb:
         62:7e:ab:1e:f4:0a:45:8a:48:b6:27:07:b5:33:bb:fd:e7:91:
         1b:4d:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:23 2025 by rpki-client