Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa
File:                     3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          kUx7ZC/Avh4F/D6K24kJ0nu91aTs1NFQuO+O+sND8Wc=
Subject key identifier:   07:8D:22:FC:65:0C:7D:0F:D3:29:91:7C:9E:4B:82:06:45:28:33:D5
Certificate issuer:       /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial:       2BEAA495A390A38E24AA217CE3E887D0E62C5B48
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:50:29 +0000
ROA not before:           Tue 04 Feb 2025 18:45:29 +0000
ROA not after:            Tue 03 Feb 2026 18:50:29 +0000
asID:                     264668
IP address blocks:        201.182.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ea:a4:95:a3:90:a3:8e:24:aa:21:7c:e3:e8:87:d0:e6:2c:5b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
        Validity
            Not Before: Feb  4 18:45:29 2025 GMT
            Not After : Feb  3 18:50:29 2026 GMT
        Subject: CN=078D22FC650C7D0FD329917C9E4B8206452833D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:42:d5:05:51:6a:c9:f8:d1:7f:b9:6d:dc:
                    12:68:51:7e:3c:ea:eb:8b:01:f1:89:a3:b3:ec:91:
                    2d:05:1e:4a:46:af:e7:f2:8c:e1:ce:2f:90:8a:87:
                    93:9a:0c:7b:ae:dd:85:9d:12:7a:ea:f4:4e:29:3d:
                    75:b1:2c:71:2d:4b:19:cf:ad:83:cf:ee:f6:02:0d:
                    a4:58:f3:6a:dc:4f:bb:ad:f4:21:ad:29:10:90:49:
                    56:02:f2:f2:80:a0:fc:d7:ed:e8:94:6e:91:47:e9:
                    f5:13:74:77:35:05:cc:f2:4a:c6:47:15:6c:1c:3a:
                    2f:23:d2:ed:b1:5f:60:4d:86:13:83:b4:88:96:92:
                    9f:a5:7f:aa:d3:17:3b:a5:1c:e8:30:fd:3c:5b:65:
                    9d:55:21:37:33:82:f6:53:a1:d0:bb:61:62:1f:25:
                    11:91:03:30:da:99:33:92:a3:7e:a7:9f:c3:ce:a7:
                    e6:96:90:02:1c:2d:2a:04:89:40:59:65:02:2b:50:
                    84:6f:7d:f9:e7:bd:b9:c0:c2:f1:97:d0:4b:d6:90:
                    64:22:a2:1b:24:1b:3b:38:ac:51:ff:2a:c0:55:a2:
                    35:2c:1a:f2:bb:9b:51:75:9a:9b:36:2a:8b:c7:b3:
                    03:c4:fb:ad:2b:43:36:99:bb:ab:ed:df:f5:fe:03:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:22:FC:65:0C:7D:0F:D3:29:91:7C:9E:4B:82:06:45:28:33:D5
            X509v3 Authority Key Identifier:
                keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:02:07:31:88:bb:2e:eb:a6:1f:88:4d:44:83:09:18:c7:a9:
         49:5f:35:4d:0f:b0:29:36:81:60:29:80:83:f0:5a:b7:35:f2:
         c5:fe:41:f1:28:b9:11:73:e8:d2:bc:47:11:63:7f:e4:cb:f1:
         ab:51:28:ab:3d:cf:8c:df:f2:46:e0:e6:62:c5:2f:ed:cd:35:
         7c:68:51:f2:5a:49:41:77:92:e1:d2:e9:17:86:cb:c7:fc:14:
         c6:ba:fa:30:00:ac:cb:01:73:da:be:51:74:6e:8d:7c:ad:16:
         a2:eb:ed:b8:97:48:10:83:db:41:75:16:1e:fe:cb:14:f4:ab:
         22:e5:8d:f7:69:85:1d:f4:97:c6:cc:41:59:1d:20:38:71:54:
         bf:c1:8f:ab:63:95:26:84:83:19:c5:11:d6:f7:57:21:de:be:
         1d:3c:69:9b:91:81:98:c7:0d:0a:f5:5a:d6:ec:9a:d3:6e:29:
         b5:6a:cb:e1:6e:be:54:e9:ed:6d:a2:03:38:52:86:db:57:5c:
         9d:16:88:39:62:54:05:8d:60:87:00:06:af:c5:f6:35:f7:59:
         93:6b:d9:c4:ca:a6:1b:d2:0f:5e:bc:35:76:06:b3:dc:eb:9d:
         0e:03:f1:62:f4:65:16:c6:27:b7:3d:b4:8b:7e:76:22:26:4e:
         32:a2:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:42 2025 by rpki-client