Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA58B2EA4098AA715D92D34AB9A41947A64C0D4D4E3782427D00B30A8D410EA0/0/3230312e3133312e34352e302f32342d3234203d3e20323633373039.roa
File:                     3230312e3133312e34352e302f32342d3234203d3e20323633373039.roa (raw, json)
Hash identifier:          vy8nG2jF2MKfWVjsk1+mgF2ix0FTlmNZ+s3y+JNGmRI=
Subject key identifier:   BC:15:1C:18:A7:D1:BA:C8:E5:4D:19:CC:6A:2D:8C:D6:DA:0E:F2:33
Certificate issuer:       /CN=0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8
Certificate serial:       33645B187FB34E88CC161730C3507C99781594A8
Authority key identifier: 0C:30:08:F8:C8:7B:FA:61:F7:34:1B:13:E1:2C:5A:6C:EB:9F:F5:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA58B2EA4098AA715D92D34AB9A41947A64C0D4D4E3782427D00B30A8D410EA0/0/3230312e3133312e34352e302f32342d3234203d3e20323633373039.roa
Signing time:             Tue 04 Feb 2025 18:30:55 +0000
ROA not before:           Tue 04 Feb 2025 18:25:55 +0000
ROA not after:            Tue 03 Feb 2026 18:30:55 +0000
asID:                     263709
IP address blocks:        201.131.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA58B2EA4098AA715D92D34AB9A41947A64C0D4D4E3782427D00B30A8D410EA0/0/0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA58B2EA4098AA715D92D34AB9A41947A64C0D4D4E3782427D00B30A8D410EA0/0/0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:5b:18:7f:b3:4e:88:cc:16:17:30:c3:50:7c:99:78:15:94:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8
        Validity
            Not Before: Feb  4 18:25:55 2025 GMT
            Not After : Feb  3 18:30:55 2026 GMT
        Subject: CN=BC151C18A7D1BAC8E54D19CC6A2D8CD6DA0EF233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:86:e5:5d:dd:cd:9f:bb:6e:da:ce:47:ea:
                    61:34:d9:69:38:54:7f:55:22:7a:85:1d:54:d9:fb:
                    ba:08:20:26:a5:6b:10:b3:e9:96:9d:df:cd:88:1e:
                    9c:37:5b:ee:35:04:dd:e4:99:b4:13:e6:c9:6d:6a:
                    e4:4a:1a:00:af:9a:b9:50:e1:8a:4b:63:73:98:b6:
                    3e:ef:18:6c:c6:65:26:f7:05:70:e2:d0:57:9e:29:
                    87:67:42:1b:1d:dc:3b:69:66:00:8e:96:b6:3e:0d:
                    55:00:56:a0:aa:87:0f:8a:15:46:62:67:cb:a5:34:
                    eb:43:37:45:cc:38:92:c6:e8:36:25:18:14:9f:8e:
                    2b:6a:35:b2:f8:e3:70:26:ba:00:70:6c:5d:64:84:
                    6a:26:8e:d7:a3:20:a0:60:98:76:18:c7:f1:1b:58:
                    24:90:82:be:42:2b:d4:15:69:d2:7a:13:59:4d:9a:
                    5e:26:26:a3:d4:04:ae:4e:c9:57:6c:be:17:b7:a8:
                    9d:f8:3a:e3:80:21:9e:df:ff:eb:17:09:d3:73:97:
                    c4:b8:4e:b7:f6:1e:e3:6e:d1:14:96:ff:ae:f8:ca:
                    ae:75:48:4c:ce:d5:63:59:79:67:e6:37:b0:95:9e:
                    bb:6d:7c:b6:c4:b3:53:c5:20:f2:7a:6d:03:f8:2f:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:15:1C:18:A7:D1:BA:C8:E5:4D:19:CC:6A:2D:8C:D6:DA:0E:F2:33
            X509v3 Authority Key Identifier:
                keyid:0C:30:08:F8:C8:7B:FA:61:F7:34:1B:13:E1:2C:5A:6C:EB:9F:F5:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA58B2EA4098AA715D92D34AB9A41947A64C0D4D4E3782427D00B30A8D410EA0/0/0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3008F8C87BFA61F7341B13E12C5A6CEB9FF5F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA58B2EA4098AA715D92D34AB9A41947A64C0D4D4E3782427D00B30A8D410EA0/0/3230312e3133312e34352e302f32342d3234203d3e20323633373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:c7:ef:6f:3f:3c:63:9a:cc:c8:21:ac:2e:95:9d:75:34:
         99:78:36:c6:87:26:9e:aa:e1:f6:95:6d:55:5e:ad:7e:19:77:
         6d:5a:59:b7:d9:0a:a6:e3:5a:d3:e9:ac:8e:28:8c:59:8e:be:
         26:8d:7a:38:61:b8:b2:31:e7:46:6c:eb:f1:47:aa:ff:d0:78:
         5a:35:7d:3c:ab:35:3a:dc:e1:fb:72:e7:66:78:df:d1:1b:0e:
         28:9d:c0:23:f9:68:7c:c3:24:be:92:c7:b4:d5:90:ea:1e:ab:
         86:02:f8:35:ed:df:50:d2:9a:4d:f2:0e:16:2f:0c:cd:a5:0b:
         d9:2a:92:cb:f1:30:91:bf:38:21:1b:30:99:4c:b5:b0:81:3a:
         8f:e7:4c:ac:ea:60:0a:47:00:24:12:32:7d:fa:9c:e5:c8:45:
         d4:6e:d8:16:76:84:50:eb:10:58:59:6c:e5:c2:dc:9f:cb:b3:
         df:39:5c:40:09:e4:c7:e6:3f:e4:cf:92:fa:f5:1d:85:f8:be:
         75:86:9a:9d:75:70:97:00:d4:83:d5:f8:e3:78:e5:80:fc:e9:
         70:2c:49:23:fa:16:3d:b5:b5:7e:10:23:fa:90:db:5d:73:6e:
         0d:d3:28:93:9e:00:ca:4c:6f:cc:ba:96:69:83:e1:d3:67:93:
         15:b4:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:45 2025 by rpki-client