Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36322e302f32342d3234203d3e203332303938.roa
File:                     3230312e3137342e36322e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          4dTyaP2/qa5Qw63gfi/3EVSKdkw0WYhWBqHwzf7OI4Y=
Subject key identifier:   BC:20:AD:E5:71:E8:3B:A1:D5:AD:A3:1B:8D:DC:00:E5:08:67:99:7F
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       24AA07AA854389168E83DB220E11EF5DF9956B05
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36322e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:03 +0000
ROA not before:           Tue 04 Feb 2025 18:43:03 +0000
ROA not after:            Tue 03 Feb 2026 18:48:03 +0000
asID:                     32098
IP address blocks:        201.174.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:07:aa:85:43:89:16:8e:83:db:22:0e:11:ef:5d:f9:95:6b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:03 2025 GMT
            Not After : Feb  3 18:48:03 2026 GMT
        Subject: CN=BC20ADE571E83BA1D5ADA31B8DDC00E50867997F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:db:d6:94:c0:a3:2b:72:6a:8f:14:5e:a3:
                    30:70:9b:9d:17:22:47:9e:57:d7:8a:e7:00:2a:0a:
                    0f:d2:7e:86:c2:4c:2c:25:35:a5:0d:a4:c6:d7:37:
                    02:62:7a:63:e5:3b:ad:8c:3e:3c:f1:13:20:49:1d:
                    5b:41:1e:4a:dc:d4:b4:26:34:ee:d2:48:54:67:a8:
                    cc:1c:69:89:b9:14:0c:b5:0f:4b:d3:92:40:c6:f6:
                    43:49:0a:8c:48:ea:43:e6:f4:12:ba:9a:04:8e:d4:
                    14:c0:82:4d:20:32:15:8b:d1:f0:74:5a:8b:e5:e2:
                    72:c6:a6:e7:ab:12:ad:59:00:cb:cb:ff:93:8e:ab:
                    d9:c4:d9:ac:f6:c0:43:57:bf:52:43:34:c0:b4:e8:
                    3d:db:47:2f:0f:5d:1b:09:b3:2f:29:9f:72:78:cf:
                    82:a2:c5:50:63:6b:3d:6d:7a:33:72:d5:11:ea:13:
                    aa:9c:4c:06:1f:89:43:58:6b:51:84:52:e5:39:b1:
                    f0:f4:2b:81:0d:0f:be:dc:19:51:c1:c4:ca:62:13:
                    37:7b:75:5a:5d:83:15:83:dc:48:76:0e:5b:39:bd:
                    a1:c4:06:c7:f6:1a:2c:ee:da:24:9c:7d:90:20:d6:
                    25:15:ea:b0:11:b7:a4:ef:40:db:01:cb:07:3b:87:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:AD:E5:71:E8:3B:A1:D5:AD:A3:1B:8D:DC:00:E5:08:67:99:7F
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36322e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:cf:71:a0:9b:83:6e:6b:5f:ce:36:cb:af:f4:20:03:1d:
         fc:e3:79:70:36:07:fc:4d:5b:b2:2d:d9:bb:bc:e5:78:f7:e5:
         fa:9f:dd:25:18:7b:84:d0:54:0d:3c:36:fa:5d:1b:74:6b:65:
         79:90:d1:68:cf:00:c7:c8:ba:83:b6:ba:df:10:c5:a0:a4:c4:
         26:e3:2e:5b:ca:7f:e1:62:5c:bb:84:ec:cd:a7:20:62:d4:3d:
         f4:80:2b:b5:dc:2f:7e:c5:87:d8:88:3e:50:b5:d3:4f:7e:06:
         3e:22:a4:7f:bc:a2:31:35:e5:61:e4:01:21:2c:7b:cf:7c:a0:
         8b:ee:d1:9e:9b:fd:82:ac:84:2b:83:41:28:5e:88:08:be:35:
         76:ce:da:76:1c:a1:d8:ed:24:2f:86:6b:36:a3:f8:91:88:a8:
         1d:41:ce:13:a5:3c:73:8e:8c:99:6d:5f:e7:62:fc:17:d3:38:
         42:9a:8c:ae:7f:62:f3:e7:68:79:3e:a5:a0:bc:b7:26:00:be:
         1a:4b:22:94:1b:d8:08:de:f6:f3:9c:68:00:9c:92:14:7e:95:
         f7:23:cc:08:e9:73:17:0a:a2:8e:c3:0c:a9:f6:f8:79:6c:4a:
         d7:b9:0f:9e:20:45:8c:08:51:9a:f3:3e:c2:73:7f:ac:3a:9e:
         ac:b1:3e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:21 2025 by rpki-client