Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa
File:                     3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (raw, json)
Hash identifier:          UxWVsSHgc7sCdCdtXfz5xPAdpgKquF6TGclmGWtYyus=
Subject key identifier:   72:89:11:FA:A2:29:61:82:46:2A:1C:95:C4:BC:3D:28:48:F7:99:E8
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       46FC9DDEF78A59D5A79D8C1946F9E67CECC41F21
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa
Signing time:             Tue 04 Feb 2025 18:13:09 +0000
ROA not before:           Tue 04 Feb 2025 18:08:09 +0000
ROA not after:            Tue 03 Feb 2026 18:13:09 +0000
asID:                     273006
IP address blocks:        201.131.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fc:9d:de:f7:8a:59:d5:a7:9d:8c:19:46:f9:e6:7c:ec:c4:1f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Feb  4 18:08:09 2025 GMT
            Not After : Feb  3 18:13:09 2026 GMT
        Subject: CN=728911FAA2296182462A1C95C4BC3D2848F799E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:03:39:aa:e5:e7:1f:e0:b4:00:3e:ab:9c:
                    a7:2a:c5:8d:f4:ae:6c:2e:d3:12:4f:e8:59:6f:51:
                    71:35:5e:10:5c:2e:be:5e:6a:dd:be:2e:1d:68:d7:
                    21:9e:4f:dd:af:5f:e7:8e:16:18:b6:bc:6c:ee:9b:
                    15:17:08:3c:b4:7a:77:d5:07:9f:37:06:37:a6:81:
                    ac:07:67:e4:08:75:b1:47:3e:f3:74:2d:be:be:71:
                    20:f5:92:54:8a:ee:a8:b7:76:e8:ae:c5:f3:50:97:
                    8f:a7:d1:cd:64:fb:27:e3:ed:16:8a:ef:0d:e5:9f:
                    d0:e3:1a:e0:85:df:5e:35:cc:d1:95:cc:44:db:a8:
                    a3:b0:5a:75:e1:8f:87:59:cf:99:e5:7d:af:43:27:
                    52:39:46:51:d8:ea:1f:60:bd:16:6f:79:c4:8c:08:
                    88:a4:7f:ec:a8:f1:cb:cd:1a:ef:96:d2:92:7f:cd:
                    91:8a:ce:95:47:82:51:b0:a3:95:0f:df:82:2f:91:
                    fe:4c:1d:81:d0:d1:b9:29:2a:39:97:ba:cb:5b:65:
                    17:3f:e8:60:e6:11:e0:0a:b8:9e:54:c1:7d:01:19:
                    83:9d:d6:d6:37:b3:c1:cc:67:be:e3:1d:ef:51:8f:
                    94:ed:43:b2:1f:80:73:ee:8f:3f:74:26:b5:91:32:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:11:FA:A2:29:61:82:46:2A:1C:95:C4:BC:3D:28:48:F7:99:E8
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:c5:42:73:95:bb:08:28:42:5d:a4:9a:f1:56:ae:39:1a:09:
         8a:3c:89:f3:e9:0c:43:f7:93:e2:88:a3:5a:cf:78:9f:41:ea:
         b1:11:11:18:4b:8d:5c:22:ab:5e:62:5a:3b:e0:bb:6a:f5:a5:
         91:7e:d8:fa:99:be:68:4f:d7:97:7e:79:5b:ce:ef:c7:45:0b:
         3a:21:f4:b5:52:a9:8d:a0:11:4f:56:07:ed:26:50:18:02:8d:
         dc:df:db:6e:8f:b0:72:cc:ac:fa:67:83:d8:fc:41:0a:2e:bc:
         7c:86:31:b8:39:02:1c:2d:9c:21:58:16:18:22:77:df:11:5b:
         de:e5:df:b2:31:bf:f4:17:dc:41:e9:60:34:42:05:35:b3:2e:
         1c:6e:09:b0:5a:b3:2e:1c:4e:49:31:a4:90:d3:96:b4:41:6d:
         49:49:95:1a:d0:af:de:d3:47:12:e8:01:97:a8:f5:a4:85:be:
         8d:03:bf:eb:e9:28:c0:bc:49:cc:f1:11:42:d8:55:bc:69:75:
         8e:bd:e8:b3:cf:c6:9c:78:b5:c9:40:86:15:f3:7e:78:0c:7c:
         2b:06:b8:8c:f2:41:94:e3:31:1e:98:dc:eb:e5:3b:1f:f3:b4:
         97:09:d0:02:d2:7c:00:1b:86:4e:84:8c:48:34:99:d1:90:00:
         9f:6a:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:12 2025 by rpki-client