Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3230312e3133302e31362e302f32322d3232203d3e203237393531.roa
File:                     3230312e3133302e31362e302f32322d3232203d3e203237393531.roa (raw, json)
Hash identifier:          abImvvbFsudfph5qw211U6DBVARt/+FYVfAAbpcdAJc=
Subject key identifier:   82:E0:3F:CF:7F:F3:DB:3D:B4:3A:81:7C:99:8E:63:92:83:13:BC:47
Certificate issuer:       /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
Certificate serial:       0A04169042C8527EB5D368BFD9F09041DCD2407E
Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3230312e3133302e31362e302f32322d3232203d3e203237393531.roa
Signing time:             Sat 07 Jun 2025 23:25:00 +0000
ROA not before:           Sat 07 Jun 2025 23:20:00 +0000
ROA not after:            Sat 06 Jun 2026 23:25:00 +0000
asID:                     27951
IP address blocks:        201.130.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 23:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:04:16:90:42:c8:52:7e:b5:d3:68:bf:d9:f0:90:41:dc:d2:40:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
        Validity
            Not Before: Jun  7 23:20:00 2025 GMT
            Not After : Jun  6 23:25:00 2026 GMT
        Subject: CN=82E03FCF7FF3DB3DB43A817C998E63928313BC47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:3c:fd:b9:74:b5:eb:4d:5a:96:37:3b:2a:
                    51:c6:8b:00:a4:58:43:21:e0:5b:6d:26:c8:c4:3b:
                    74:94:b8:62:5d:b2:16:99:19:4c:db:5f:58:49:47:
                    f6:c7:7a:e3:a3:76:b6:6a:01:e2:4c:5f:80:65:ea:
                    fd:d1:21:85:35:39:0d:a5:ba:20:98:ab:cc:70:38:
                    8a:2a:aa:b9:52:9f:e1:fd:87:e7:00:7e:ac:22:3b:
                    16:0d:15:6a:58:e8:2f:c1:ff:74:17:22:78:ce:22:
                    c9:02:75:05:de:a4:62:ff:ab:bf:84:a1:22:d3:51:
                    5f:41:36:5f:94:33:db:c4:dc:01:1a:ab:7a:00:31:
                    a3:4b:36:f3:fe:16:13:d9:c8:63:f4:ff:f3:10:15:
                    a4:47:09:80:ae:1d:73:b5:73:c8:36:3e:df:91:87:
                    a9:3e:63:32:c9:5d:05:79:57:66:b5:45:9b:f1:4b:
                    8d:8b:e4:7a:9c:8f:ec:b7:f2:6c:a8:f3:80:34:a8:
                    8d:ab:62:cb:35:65:ae:c1:83:95:f9:24:1e:84:f4:
                    4e:b1:a4:09:80:4d:41:1c:12:5c:b8:b9:e0:13:c7:
                    46:ac:99:19:7e:84:2b:88:41:b0:cf:b1:ff:51:85:
                    eb:e4:e0:aa:50:d4:15:27:3f:51:a1:ce:ee:1c:ae:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E0:3F:CF:7F:F3:DB:3D:B4:3A:81:7C:99:8E:63:92:83:13:BC:47
            X509v3 Authority Key Identifier:
                keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3230312e3133302e31362e302f32322d3232203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:b0:ea:db:ea:24:7f:ca:5a:18:f2:92:8c:64:62:cf:a6:
         ad:89:cf:9b:f6:88:38:3f:e4:4a:62:30:fc:0d:2f:82:57:75:
         f3:73:44:b8:c9:4b:05:de:57:0b:ab:c1:c2:6a:2e:62:17:8a:
         9a:71:96:c0:ba:5a:cb:36:d9:4a:57:68:ff:96:e3:b3:93:fa:
         e3:5d:39:98:0d:2c:79:58:68:60:01:bc:6e:89:31:a2:94:c3:
         62:5d:88:c4:ee:24:16:ce:c9:bf:66:16:9b:2f:df:e7:8c:d2:
         df:f2:e8:66:34:6c:0f:a2:e3:57:30:77:65:bd:f1:3b:0a:71:
         ca:5c:f2:97:12:65:df:1f:14:0f:e9:53:b1:fb:fa:4d:b6:c8:
         78:8a:95:a9:e0:a4:b4:42:76:74:a2:6d:6e:a0:a9:20:19:6d:
         18:0f:56:03:83:22:90:20:74:16:78:79:92:8b:06:6c:8d:a9:
         34:6c:6e:e3:a3:f7:98:a3:3e:c5:32:06:a3:49:73:76:e1:ba:
         91:a5:94:19:66:e5:ec:68:44:b5:72:06:e9:1b:4c:8a:71:27:
         12:5b:b1:0c:c4:2a:3c:65:71:ef:c5:53:de:ac:b5:60:92:be:
         03:a8:71:3a:cb:0e:95:9e:af:4b:fb:f8:dd:e9:cc:56:5f:3d:
         8e:74:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:19:27 2025 by rpki-client