Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36312e302f32342d3234203d3e203332303938.roa
File:                     3230312e3137342e36312e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          FggzbMZm7gL3R+fRZvjTiSzq8aOpSWniMALXNM+w33s=
Subject key identifier:   37:89:91:BA:6A:EF:D3:25:C0:75:33:A1:3B:77:87:5C:24:9A:BB:0D
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       6CA936F0112ECAE586F0C973094F9A1A0485A59F
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36312e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:47:57 +0000
ROA not before:           Tue 04 Feb 2025 18:42:57 +0000
ROA not after:            Tue 03 Feb 2026 18:47:57 +0000
asID:                     32098
IP address blocks:        201.174.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a9:36:f0:11:2e:ca:e5:86:f0:c9:73:09:4f:9a:1a:04:85:a5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:42:57 2025 GMT
            Not After : Feb  3 18:47:57 2026 GMT
        Subject: CN=378991BA6AEFD325C07533A13B77875C249ABB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:7a:f3:d5:39:e2:ab:b5:ea:5e:53:69:d2:
                    d9:bc:e1:be:66:ec:7e:70:20:07:67:36:9a:ad:e8:
                    51:40:23:26:87:25:c1:2c:61:6e:a5:c1:b5:40:6d:
                    63:ea:71:e4:32:e8:c1:7b:bb:e5:dd:bb:00:9d:5d:
                    f2:46:7c:3b:c2:8c:e3:9e:8b:b3:02:75:bc:82:5f:
                    75:58:3b:c3:fc:1a:f8:af:4f:0d:0c:6d:67:ea:04:
                    ce:79:f1:6a:e2:0a:2e:0b:8b:c5:06:97:6b:bf:85:
                    88:ea:bd:6f:e1:db:74:b2:f4:d3:b0:d1:10:06:fc:
                    60:0f:13:5d:89:59:1a:76:9a:ce:1c:af:fd:e2:6a:
                    3a:21:5c:f8:86:9c:93:e5:2e:56:2e:5b:67:ee:b2:
                    a4:55:1f:b4:cb:0d:c1:c2:a1:67:79:3a:67:f9:95:
                    4f:f0:41:0d:1e:9f:26:a2:42:74:2f:31:d3:85:95:
                    55:96:11:20:b4:f0:85:ac:7f:fc:cd:3f:f3:ec:30:
                    c8:c9:06:e1:9a:f6:f1:eb:11:28:90:bc:3d:3e:64:
                    8e:86:80:ff:17:62:75:41:61:0b:6c:58:1f:96:35:
                    3c:1a:90:a7:78:3c:c5:ea:a5:ca:a7:7c:61:8c:1b:
                    be:fc:1e:7e:e9:49:a4:29:7f:23:a9:bb:1e:bb:7a:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:89:91:BA:6A:EF:D3:25:C0:75:33:A1:3B:77:87:5C:24:9A:BB:0D
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36312e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:65:4f:03:57:30:6d:40:4d:e4:e6:c8:ae:cd:5f:34:8f:
         53:00:38:6e:d1:a2:c8:fa:0c:c2:e0:24:b0:1e:c2:10:10:43:
         fd:e8:bb:ef:46:a1:a4:00:7f:82:2e:2e:10:d3:a8:62:ff:87:
         65:e1:3f:9f:fc:86:57:e1:b3:58:94:69:56:5e:3f:b7:18:9d:
         3a:e1:56:22:2a:64:4a:ae:fa:e6:a7:2f:ea:fe:95:5e:a1:e6:
         7e:6b:2c:23:aa:6d:7a:86:3a:94:d0:88:37:a0:09:85:73:d8:
         4f:fa:5a:3a:da:d5:a0:be:ca:1d:f4:e2:3f:76:d4:e3:57:e1:
         1b:ff:1e:ca:e0:3f:ae:b0:a9:f5:a6:5b:62:04:ec:e2:e8:9f:
         49:89:27:a8:0c:99:cc:fc:d8:ae:06:d6:7f:c8:06:14:e2:5e:
         ed:c0:46:53:42:b1:d9:8e:b9:e9:ae:6a:ec:6d:e2:ad:ad:82:
         41:9b:3e:e4:28:ad:ce:8a:98:c3:f1:d4:97:95:3a:8e:d6:c7:
         68:33:20:86:e0:5e:9b:47:1f:ed:a8:19:c4:7b:2a:bc:3d:aa:
         2d:11:5d:82:b6:ce:95:1a:ba:28:56:97:69:f2:37:36:41:02:
         21:57:74:ef:92:2e:e3:d2:95:87:22:89:75:11:44:2a:00:80:
         45:7c:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:22 2025 by rpki-client