Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32332e302f32342d3234203d3e2037303439.roa
File:                     3132382e3230312e32332e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier:          VoQydPU5DEPjzB+MLhREvk1La0IFYEloHY8Kn0t5FAQ=
Subject key identifier:   08:53:8E:2F:AC:8E:6E:03:85:11:54:F8:16:A3:8E:C4:C8:51:A9:BE
Certificate issuer:       /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial:       01ACE04A4EEF49BD34F7F117D79C0DA6B3B5652B
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32332e302f32342d3234203d3e2037303439.roa
Signing time:             Tue 04 Feb 2025 18:34:58 +0000
ROA not before:           Tue 04 Feb 2025 18:29:58 +0000
ROA not after:            Tue 03 Feb 2026 18:34:58 +0000
asID:                     7049
IP address blocks:        128.201.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:e0:4a:4e:ef:49:bd:34:f7:f1:17:d7:9c:0d:a6:b3:b5:65:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
        Validity
            Not Before: Feb  4 18:29:58 2025 GMT
            Not After : Feb  3 18:34:58 2026 GMT
        Subject: CN=08538E2FAC8E6E03851154F816A38EC4C851A9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:65:29:d7:f4:09:fe:b9:7c:b6:34:a0:eb:
                    07:c1:9e:f9:76:a2:f3:a2:b5:36:7a:85:03:9a:1f:
                    af:1a:d7:ee:6d:92:a7:66:6b:78:c0:1c:4e:06:68:
                    ee:83:21:0e:29:ad:43:5c:1f:2a:b7:a2:bb:27:03:
                    96:a0:2b:6a:26:3a:37:06:5d:47:93:26:da:f2:6a:
                    a8:4d:d5:a3:ff:83:c7:09:cd:65:fe:86:45:8b:03:
                    f9:12:22:96:63:bb:14:01:68:53:0a:1b:e5:dc:63:
                    0c:9c:7a:cd:cf:1a:c7:04:7f:23:b2:5e:15:62:53:
                    33:75:46:48:4a:44:29:d0:96:23:6c:c5:03:12:0e:
                    d6:65:0b:20:aa:83:be:fd:0f:b6:13:21:84:3e:66:
                    c2:c8:af:cc:a5:93:3a:eb:3e:e7:de:c6:05:bb:9e:
                    cd:6f:be:e6:54:27:40:d2:45:15:81:9f:2b:99:ce:
                    b7:75:f7:d7:f7:b4:07:34:b3:c2:eb:53:04:f0:f4:
                    b4:d9:af:02:a9:d0:c8:40:a1:3e:86:c7:ca:9b:42:
                    68:4f:42:07:aa:20:db:c4:81:c3:c4:5e:59:8b:20:
                    ed:03:d0:36:cf:79:c8:95:18:8e:6b:35:ac:33:89:
                    e8:34:6c:32:a3:5a:31:31:71:ae:61:7e:dd:f4:10:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:8E:2F:AC:8E:6E:03:85:11:54:F8:16:A3:8E:C4:C8:51:A9:BE
            X509v3 Authority Key Identifier:
                keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32332e302f32342d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:1d:7a:0a:bc:1f:23:75:81:a0:ac:a8:d3:84:e6:e0:cf:03:
         21:1a:cd:71:56:35:07:4a:e9:25:e9:a7:f1:be:73:64:4d:88:
         60:87:31:0c:90:a4:0c:29:b8:ac:aa:97:4d:d2:a5:e0:4f:6e:
         54:d2:2d:f8:c8:8a:d8:a0:8b:1c:c5:82:53:c6:37:0a:b7:b8:
         01:3d:43:90:ef:55:76:c9:de:0b:05:90:c6:de:fc:94:c3:e7:
         f2:b8:97:b3:ab:ab:27:97:a6:a4:c4:c0:50:3d:cf:4f:e0:12:
         af:fb:be:9d:97:f6:03:73:3b:2e:50:97:e5:b4:8b:38:b8:53:
         15:b3:52:14:d7:dc:ae:c1:6a:98:38:6f:6f:9b:bb:a4:57:6b:
         14:2b:4c:ae:2a:f1:95:93:8a:b5:44:cb:ca:85:cc:b7:a7:0b:
         33:94:f6:2e:79:82:69:27:40:97:3f:2f:c1:e5:c0:85:9c:01:
         00:f7:04:55:07:7f:ad:a7:6c:f3:c7:14:fe:f5:a2:e5:5c:25:
         6d:be:02:23:a1:bf:42:ae:15:bc:07:61:1a:ef:f5:75:0d:9e:
         4b:c5:08:c4:57:70:4e:60:a3:2a:1c:e5:68:2a:17:3c:90:dc:
         7c:26:c8:70:9c:51:e4:44:28:f6:bc:0c:3e:2c:d5:4a:1f:92:
         4c:a5:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:08 2025 by rpki-client