Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/3230312e3133312e3131382e302f32342d3234203d3e20323633383130.roa
File:                     3230312e3133312e3131382e302f32342d3234203d3e20323633383130.roa (raw, json)
Hash identifier:          v31dxRvNAJNVYiDJ5iYEMUGzTokTRdw8qKb72CycLHM=
Subject key identifier:   72:32:EC:0F:12:64:A6:56:98:78:55:15:07:B0:5D:DB:65:44:E4:CE
Certificate issuer:       /CN=A7B8DED03E12C864EE6F1C50B966C80D93223151
Certificate serial:       24075DF14455444C71DD7BC0BB64456FCECA7DD4
Authority key identifier: A7:B8:DE:D0:3E:12:C8:64:EE:6F:1C:50:B9:66:C8:0D:93:22:31:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/3230312e3133312e3131382e302f32342d3234203d3e20323633383130.roa
Signing time:             Tue 04 Feb 2025 18:04:16 +0000
ROA not before:           Tue 04 Feb 2025 17:59:16 +0000
ROA not after:            Tue 03 Feb 2026 18:04:16 +0000
asID:                     263810
IP address blocks:        201.131.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:5d:f1:44:55:44:4c:71:dd:7b:c0:bb:64:45:6f:ce:ca:7d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7B8DED03E12C864EE6F1C50B966C80D93223151
        Validity
            Not Before: Feb  4 17:59:16 2025 GMT
            Not After : Feb  3 18:04:16 2026 GMT
        Subject: CN=7232EC0F1264A6569878551507B05DDB6544E4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b9:df:f7:87:1b:ec:71:7b:44:4e:09:7f:ef:
                    fe:99:f6:32:89:4f:89:72:75:7a:89:d6:6a:6b:69:
                    c7:50:e7:52:69:51:57:54:d0:9d:39:93:5d:a9:76:
                    84:cf:11:47:9a:30:c3:26:a2:19:c3:96:04:2a:ca:
                    1a:dd:b8:7b:9d:6a:dc:2a:93:1d:09:e0:6c:34:9d:
                    bd:34:a6:9c:34:79:a7:9c:81:d8:b6:f1:18:89:7d:
                    ac:35:56:6d:8f:d1:9d:e9:36:37:60:4f:fc:da:a6:
                    ab:5e:5d:5e:1f:57:61:f6:d8:53:e6:b8:2e:b9:60:
                    75:8a:f5:31:d6:12:18:dd:a6:43:81:6a:35:7a:e7:
                    e4:71:29:32:f9:0e:e8:46:0f:51:ab:a4:fc:40:43:
                    9c:18:9f:89:c8:37:c3:b0:b8:44:4a:c7:cf:4c:ca:
                    a9:b4:19:49:f3:8e:e1:e5:cd:f9:bc:04:22:1a:86:
                    95:29:1a:6c:93:a1:eb:58:27:88:11:f1:e5:c0:da:
                    fe:3e:91:2f:e8:9a:1b:a5:0b:c8:d0:11:3c:3d:be:
                    7f:62:c4:90:19:61:d6:9d:b4:94:d5:9f:cd:f0:84:
                    c8:89:5b:7b:21:02:c4:97:d1:5a:ed:a8:2d:0d:ce:
                    14:c5:95:b5:f6:ac:bf:66:59:15:a8:96:3a:25:9a:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:EC:0F:12:64:A6:56:98:78:55:15:07:B0:5D:DB:65:44:E4:CE
            X509v3 Authority Key Identifier:
                keyid:A7:B8:DE:D0:3E:12:C8:64:EE:6F:1C:50:B9:66:C8:0D:93:22:31:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/3230312e3133312e3131382e302f32342d3234203d3e20323633383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:9f:85:ed:d2:b8:87:5a:47:06:91:67:8d:2d:5f:9e:38:
         f6:b6:68:49:77:b7:08:38:d2:2d:5e:38:48:b8:91:2a:5e:e4:
         2f:4b:47:52:f0:88:d8:a8:b3:69:85:e5:7e:e0:1b:dc:2c:44:
         c0:39:71:16:15:01:d6:4d:02:ca:ad:5a:27:db:68:4c:f3:58:
         c1:e0:1f:2a:74:97:de:71:b7:0d:36:d8:4f:7d:44:62:32:8a:
         07:27:64:8b:27:cb:b3:92:ac:ab:2d:1d:13:2e:3c:1e:76:15:
         1c:59:b9:dd:16:36:0a:fa:24:cc:07:6e:19:0d:0c:ec:96:8c:
         57:9b:95:29:67:61:cf:8b:05:e3:62:11:fb:61:61:bf:05:cd:
         df:a7:0f:e7:3a:4d:5b:9a:bf:e7:c8:28:0e:d7:83:65:13:09:
         9a:75:5f:9a:7d:a5:39:21:2a:65:05:bb:aa:64:86:0a:2d:d7:
         eb:54:7d:f0:bc:77:93:8a:38:db:35:44:cf:44:7a:86:38:d8:
         7f:14:7c:e5:53:64:8a:5e:d6:f8:6d:e8:74:ea:cc:8d:e4:13:
         20:29:77:0e:d5:81:0f:2d:15:31:d5:b8:94:44:ab:f8:f0:4b:
         09:59:cd:49:47:31:b1:32:9d:91:e2:5d:a0:85:a3:f2:8e:b8:
         73:3c:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:53 2025 by rpki-client