Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e39362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          HygKjcylBi26DnEqCcbqooXOxACgRKULlbPthn+Q83M=
Subject key identifier:   27:30:6B:B7:68:F8:4D:05:09:44:00:DD:38:C4:60:A1:26:AE:29:AC
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       02014FEC0C5A2E3F5C8BE75AF195EFE6F419BCAA
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:06 +0000
ROA not before:           Tue 04 Feb 2025 18:43:06 +0000
ROA not after:            Tue 03 Feb 2026 18:48:06 +0000
asID:                     32098
IP address blocks:        201.174.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:01:4f:ec:0c:5a:2e:3f:5c:8b:e7:5a:f1:95:ef:e6:f4:19:bc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:06 2025 GMT
            Not After : Feb  3 18:48:06 2026 GMT
        Subject: CN=27306BB768F84D05094400DD38C460A126AE29AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:d1:9a:7c:bb:8e:a7:44:96:47:0a:41:9c:
                    d4:bd:bb:9f:ff:9d:8e:49:cf:7a:2e:89:a7:eb:2b:
                    78:07:34:51:d8:f5:0a:19:16:43:1e:01:fe:8d:16:
                    75:bf:6b:25:7f:6c:98:6c:20:c1:39:66:b2:b9:21:
                    e3:f9:ff:7b:ff:f9:11:65:2a:8b:5f:a3:31:7a:0a:
                    c4:2c:6e:6a:32:81:54:ed:40:3f:19:a4:03:f7:62:
                    02:f0:ad:46:2d:79:da:89:eb:db:af:fb:a4:06:69:
                    f6:2a:a4:13:9a:70:6d:84:07:05:57:4b:1f:b4:d4:
                    24:e4:aa:1d:d2:5c:ee:b0:4f:61:5e:59:fa:32:3c:
                    f7:7f:55:28:0e:77:52:d7:ac:6f:b6:81:90:e7:e2:
                    fd:45:10:ad:db:6f:0b:58:c5:68:2a:88:f1:61:52:
                    3b:8a:d6:b0:bb:a0:86:12:75:95:ea:66:97:c3:ba:
                    b6:3f:95:dd:2e:1b:e3:e7:05:fd:81:28:35:58:2d:
                    ff:ad:e1:8e:dd:61:c2:75:e8:b2:b0:74:28:14:dd:
                    47:5a:8d:7b:da:73:e8:01:82:96:bf:1d:a7:02:f6:
                    66:9e:b4:7b:0b:f5:55:85:62:dd:74:c1:ea:64:68:
                    19:c3:8b:72:d4:94:14:37:4b:5e:e5:a5:c9:d3:20:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:30:6B:B7:68:F8:4D:05:09:44:00:DD:38:C4:60:A1:26:AE:29:AC
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:4c:ba:a6:00:49:c2:b4:bc:1e:97:04:16:2e:00:9f:c8:
         29:16:e2:1e:4d:80:e6:17:44:2d:54:f2:70:5b:06:ed:ab:b7:
         14:c5:89:4c:02:82:2a:63:ed:2a:74:c6:1d:de:ac:86:ae:bb:
         de:b7:4d:25:8a:7c:60:8b:0d:31:89:9a:45:57:45:31:a0:1e:
         2c:2c:a1:be:73:54:8c:8e:62:a7:2d:42:36:8b:19:36:c5:10:
         8f:89:b3:4f:3a:a4:5d:0b:4b:57:20:53:7e:07:4f:f8:aa:21:
         f6:9a:8a:1e:bd:ca:55:e6:72:cd:49:ea:83:e5:fb:91:94:d2:
         4e:fc:77:ce:b8:3b:d9:d8:e2:71:7f:c2:83:bd:77:98:72:46:
         28:ca:7d:6a:40:a8:73:28:00:6e:6a:8e:c8:c0:e1:c0:1c:ed:
         6f:74:cf:00:82:33:5b:1a:a7:04:ff:6e:c6:1c:30:e1:ef:0b:
         ec:78:db:dd:d4:14:19:12:ac:92:2a:5f:6d:7b:e3:f3:05:a5:
         74:69:37:e1:bb:e4:25:32:cb:c8:8e:cc:26:fb:c8:69:aa:22:
         29:04:95:17:58:82:ac:13:c1:de:cd:89:bb:64:e5:bc:ed:ec:
         43:b7:72:77:5e:05:5a:2d:b9:ef:9f:c9:c2:8b:37:8f:41:d3:
         d0:09:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:10:23 2025 by rpki-client