Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3138372e302e302f31372d3234203d3e203134313137.roa
File:                     3230312e3138372e302e302f31372d3234203d3e203134313137.roa (raw, json)
Hash identifier:          t3BKTjdmjl1THSD8neV3b7bKnKXwwO5C1gv8jdjGHBI=
Subject key identifier:   E3:30:A1:46:A5:03:62:D6:76:EA:53:A5:74:7A:56:1B:1A:68:CB:81
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       13B32AA02F64427FAEBE2C0881D2FC2375C1577C
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3138372e302e302f31372d3234203d3e203134313137.roa
Signing time:             Tue 01 Jul 2025 19:15:00 +0000
ROA not before:           Tue 01 Jul 2025 19:10:00 +0000
ROA not after:            Tue 30 Jun 2026 19:15:00 +0000
asID:                     14117
IP address blocks:        201.187.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:2a:a0:2f:64:42:7f:ae:be:2c:08:81:d2:fc:23:75:c1:57:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jul  1 19:10:00 2025 GMT
            Not After : Jun 30 19:15:00 2026 GMT
        Subject: CN=E330A146A50362D676EA53A5747A561B1A68CB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:ab:d1:b4:f3:65:14:27:17:63:1f:2d:da:
                    b7:f6:43:2f:86:13:9a:a8:d3:58:93:5c:eb:d3:0a:
                    1b:da:28:44:55:99:5e:95:65:72:bc:55:e3:7b:c6:
                    81:a0:0a:88:59:4d:b9:02:f9:aa:f4:d7:d9:c7:8f:
                    ed:6a:c9:15:41:bc:34:7f:ae:ed:2f:ec:84:fd:10:
                    8e:dc:b5:ba:5d:96:ed:ad:eb:eb:53:2b:5b:9e:59:
                    4d:6a:e5:f5:84:39:e7:91:2a:d4:dc:11:91:bd:cd:
                    ac:7d:9e:b0:1c:1c:9e:48:82:03:54:d7:78:1e:2a:
                    5a:9e:8b:c4:7d:72:2a:ed:a1:4f:94:14:36:2c:7f:
                    cd:2b:d8:90:f7:fc:c3:33:b8:f6:40:53:41:83:64:
                    fb:eb:27:f1:ba:5b:1c:9e:8a:c7:22:ab:45:49:78:
                    88:05:8e:f9:6c:c5:ce:14:8f:95:6e:11:5f:9a:b8:
                    33:04:22:af:da:dd:94:a4:66:50:3e:9d:2d:90:a2:
                    eb:e7:69:e4:67:a0:07:d2:01:ee:7b:95:91:5f:74:
                    87:70:d0:a2:fd:14:07:88:8a:59:d0:8f:a8:05:7e:
                    3f:e9:b4:b4:0e:19:4c:43:3d:99:a6:53:d5:88:ba:
                    2c:84:28:b3:e7:3c:2c:27:69:5f:9d:ff:41:5b:b4:
                    41:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:A1:46:A5:03:62:D6:76:EA:53:A5:74:7A:56:1B:1A:68:CB:81
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3138372e302e302f31372d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.187.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:75:8b:87:c7:97:48:47:76:b0:ac:38:8f:f0:7d:18:08:2e:
         ba:1e:44:f0:44:1e:cf:ca:8e:50:d3:4b:05:20:c9:16:cd:fe:
         37:e4:38:da:b4:c3:8d:e3:8a:37:d0:bf:9d:9e:24:1c:7d:91:
         8f:62:64:63:10:33:0e:60:2a:4f:4e:27:73:21:10:52:bd:71:
         14:dd:1f:ab:24:03:f7:49:96:8c:07:58:b5:36:7b:40:8e:0e:
         db:00:9c:96:31:41:66:a7:77:5f:b5:f0:21:34:86:8c:81:b9:
         10:66:f9:b2:84:f0:58:d2:96:16:95:e4:74:cf:ee:75:76:f3:
         0a:9e:ac:a3:df:03:85:7f:d7:f8:5f:48:15:5a:b1:d1:9d:53:
         e4:1e:28:c1:c8:86:56:6b:54:35:59:a7:81:25:79:f7:d7:98:
         f1:01:fd:6f:c8:22:89:cb:4e:3f:48:53:04:17:f9:69:7d:12:
         e9:09:3b:35:09:e3:29:fe:2d:ee:00:71:78:04:bc:b5:30:22:
         e7:15:c5:9d:bd:c0:44:85:17:9d:f7:a8:31:a9:94:cb:62:fe:
         5b:93:52:cf:90:83:a9:8e:c4:ed:7c:51:03:04:f1:bd:3a:16:
         e8:97:9d:0f:a6:89:4f:16:90:64:e4:b2:74:c5:47:b7:c4:1b:
         18:1b:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:50:46 2025 by rpki-client