Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e203631343634.roa
File:                     3230312e3133312e33372e302f32342d3234203d3e203631343634.roa (raw, json)
Hash identifier:          A6mvBNbhUVYSYMCIreo1GQjtn1/V/mnhXfoQTh/q1zo=
Subject key identifier:   B2:36:35:F3:68:DD:1A:64:EC:77:85:3F:15:3D:A5:80:D0:AE:63:A4
Certificate issuer:       /CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
Certificate serial:       4D32357DA18D1B7A9D7079EF9055BF6E76BBF0D1
Authority key identifier: D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e203631343634.roa
Signing time:             Tue 04 Feb 2025 18:46:10 +0000
ROA not before:           Tue 04 Feb 2025 18:41:10 +0000
ROA not after:            Tue 03 Feb 2026 18:46:10 +0000
asID:                     61464
IP address blocks:        201.131.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:32:35:7d:a1:8d:1b:7a:9d:70:79:ef:90:55:bf:6e:76:bb:f0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
        Validity
            Not Before: Feb  4 18:41:10 2025 GMT
            Not After : Feb  3 18:46:10 2026 GMT
        Subject: CN=B23635F368DD1A64EC77853F153DA580D0AE63A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:95:c8:df:95:8e:0a:f1:2b:f3:74:47:59:
                    a2:a7:04:7d:62:86:a9:23:2a:79:88:a7:a5:01:9a:
                    42:72:71:23:1f:57:da:ba:1f:25:ae:03:47:f4:f5:
                    73:3d:3e:ef:b5:db:c3:cc:de:39:b4:7a:ba:35:44:
                    ce:c0:65:1b:3c:d4:51:2b:82:8b:53:7b:a0:be:00:
                    2e:60:37:64:e8:05:8d:a3:f8:73:00:22:c7:63:b2:
                    3a:42:d6:74:d2:f0:0c:64:60:5a:9c:24:d3:88:0d:
                    4f:e0:52:61:7d:2a:1a:ff:42:d1:b1:47:ad:d2:8c:
                    bc:98:54:1f:7e:25:c9:d3:3a:36:84:87:06:b5:77:
                    f0:a4:73:35:23:a2:55:bb:14:b6:00:e4:72:1c:4f:
                    b6:23:4a:4a:e5:4c:d1:2e:a6:fa:33:ed:a1:28:a0:
                    37:ae:d1:c7:58:0f:d2:01:7e:0b:b9:56:6e:b0:fe:
                    c9:05:90:a1:32:11:d6:32:70:d4:4e:66:e1:14:a6:
                    3d:9d:05:2e:dd:70:62:d0:7c:bb:c9:99:b9:4b:88:
                    84:f1:a1:c7:10:8d:a5:6c:95:a8:0f:ec:9e:d7:4a:
                    77:65:07:fd:76:11:83:6f:6d:37:43:6b:2e:ee:c1:
                    bc:64:c9:29:4b:b8:d3:ab:16:7e:3b:88:55:5e:e3:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:35:F3:68:DD:1A:64:EC:77:85:3F:15:3D:A5:80:D0:AE:63:A4
            X509v3 Authority Key Identifier:
                keyid:D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e203631343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:84:67:d5:b1:9e:ed:67:ea:8c:cc:cb:cb:5b:fb:ae:14:ec:
         7d:a6:b3:9f:bd:ee:42:67:ae:c6:b8:7f:df:68:37:43:ed:d6:
         89:ef:76:f2:24:b9:5c:92:6d:29:31:43:24:ee:ca:6d:a8:35:
         f7:75:0f:35:4e:38:eb:69:28:74:76:e9:64:a5:a2:f2:d9:53:
         bb:62:99:00:86:02:94:cc:05:02:73:62:ba:e0:60:59:a2:e0:
         d0:38:4e:a2:a4:ae:2d:3e:db:53:2e:b3:31:6f:dd:e5:19:f4:
         ff:83:56:0c:2b:cb:b0:41:1e:97:52:df:c8:a3:41:35:f8:72:
         38:71:c0:cd:e1:06:4e:b6:cd:12:a3:77:c8:d5:f6:63:5c:07:
         ba:9e:24:c8:1f:17:fa:d4:39:dc:c9:28:95:a8:f4:ea:83:24:
         c8:1b:6d:eb:20:ea:af:09:05:89:1a:61:f5:09:d5:2c:35:9a:
         81:f1:83:bf:c1:58:2a:6d:c6:dd:a4:79:1b:65:9b:26:65:26:
         83:33:17:93:e8:39:25:74:49:58:e3:b9:68:eb:18:da:2a:29:
         ca:44:d8:50:a8:f8:2a:8c:d7:0b:e1:8e:64:f1:df:9f:04:5e:
         c5:df:fb:44:e4:15:86:88:a5:e4:31:06:a5:39:49:00:f1:38:
         21:46:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:39 2025 by rpki-client