Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa
File:                     3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa (raw, json)
Hash identifier:          cGYxDcim+BklBOMhoGuqbADRyvrqWeZw42rjyXy16/o=
Subject key identifier:   58:D9:7C:87:74:5F:DC:77:FE:70:E7:7D:AA:43:D9:38:63:5B:9F:E7
Certificate issuer:       /CN=B905CE8CB484116258141F2BAF5032F468106BF3
Certificate serial:       1C24A86C51E39B7BE734E1EFF1F8A9AAEEC2ED7D
Authority key identifier: B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa
Signing time:             Tue 04 Feb 2025 18:08:44 +0000
ROA not before:           Tue 04 Feb 2025 18:03:44 +0000
ROA not after:            Tue 03 Feb 2026 18:08:44 +0000
asID:                     265811
IP address blocks:        201.182.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:24:a8:6c:51:e3:9b:7b:e7:34:e1:ef:f1:f8:a9:aa:ee:c2:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B905CE8CB484116258141F2BAF5032F468106BF3
        Validity
            Not Before: Feb  4 18:03:44 2025 GMT
            Not After : Feb  3 18:08:44 2026 GMT
        Subject: CN=58D97C87745FDC77FE70E77DAA43D938635B9FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:46:c3:fc:18:7d:75:3a:29:0c:54:81:83:2a:
                    19:ef:20:31:d8:98:43:26:35:4b:00:88:36:ba:3b:
                    b9:51:79:5b:33:ae:45:a8:5a:7f:ac:3f:1b:59:89:
                    d6:dc:cc:ae:f6:ad:59:a6:2d:ba:74:89:41:b4:36:
                    26:14:99:c1:61:29:31:45:45:0c:06:5a:cb:ce:5e:
                    1e:82:a5:9c:13:af:cd:52:29:5d:76:b9:ee:b1:59:
                    28:a5:ee:15:63:f1:72:4f:17:6a:81:28:b6:aa:da:
                    00:16:11:ce:4e:64:fe:4d:8d:42:53:6d:91:ac:b1:
                    b7:10:e7:6f:df:82:3b:4d:73:83:47:36:45:0d:91:
                    38:e7:fa:3d:76:92:e9:59:0f:2d:06:5f:d0:74:7e:
                    ed:96:ed:a4:0f:d4:d2:31:fa:95:0f:fd:10:ef:04:
                    42:9c:d8:48:34:ed:42:56:f1:b0:8f:34:7b:87:83:
                    be:b7:fb:0c:e4:b7:51:96:39:96:c5:8c:dd:b9:b5:
                    7c:c9:e5:80:7b:52:2f:f5:56:1f:bc:6a:f9:7e:0f:
                    65:fb:33:7a:f7:d0:0d:da:bf:63:85:55:3e:a8:10:
                    45:8f:37:90:8e:ee:8f:54:7e:7b:6b:66:d4:83:88:
                    3a:ff:70:4e:48:77:3f:cb:09:c5:c2:f4:b0:4c:ec:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:7C:87:74:5F:DC:77:FE:70:E7:7D:AA:43:D9:38:63:5B:9F:E7
            X509v3 Authority Key Identifier:
                keyid:B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:48:c9:95:3e:90:ce:0e:8d:1a:92:a4:c4:36:b4:c3:06:f4:
         9c:e0:b1:42:99:26:8f:fd:a3:e7:43:e0:e1:95:f3:00:e5:2d:
         e5:b3:c6:eb:0e:3d:8d:1d:8c:48:4c:5d:ef:cf:8b:fe:22:1b:
         2f:cc:6d:c4:cb:f3:a7:1b:e1:f3:a9:90:e4:ce:a3:82:aa:15:
         a7:61:af:3a:21:2f:ec:0e:51:36:bd:1f:41:07:88:33:e3:d8:
         80:65:94:8a:62:ff:13:f5:93:ab:36:0b:30:87:f3:92:df:97:
         5f:24:8e:8a:b9:13:c6:4b:19:81:14:85:99:54:3a:7f:c4:31:
         c5:a9:8e:b4:2d:d3:77:8a:fe:e4:2c:7a:2e:99:7d:01:e8:19:
         7c:a3:e6:f9:cd:6c:4c:43:e4:9f:fe:05:89:9e:d5:7f:13:0f:
         cc:35:2f:f8:fc:4b:4f:34:5b:ec:aa:99:6a:79:db:34:d1:da:
         50:6a:c6:82:af:b3:38:45:fd:60:e3:2f:f7:38:1d:10:70:bb:
         e5:b5:00:eb:f4:87:ef:1d:73:70:66:3d:48:d3:18:50:26:21:
         3b:9f:e7:ce:f3:9b:83:9b:33:f0:95:4e:91:9b:9d:a6:74:1a:
         e6:45:ba:88:76:4e:3d:fb:40:4b:4a:16:11:32:62:f3:f4:d1:
         a9:49:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:59 2025 by rpki-client