Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          tHqvjc+Hq3b61FHSDOpUADD255zuTC9dcG8GJl6QR88=
Subject key identifier:   80:C9:63:3B:AF:8A:37:71:61:A9:DE:F8:28:20:AF:DA:6B:6F:2C:0C
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       40A0B9C1B1E55EB85CD200D8B290CD0B4A00E05D
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:05 +0000
ROA not before:           Tue 04 Feb 2025 18:43:05 +0000
ROA not after:            Tue 03 Feb 2026 18:48:05 +0000
asID:                     32098
IP address blocks:        201.174.104.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a0:b9:c1:b1:e5:5e:b8:5c:d2:00:d8:b2:90:cd:0b:4a:00:e0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:05 2025 GMT
            Not After : Feb  3 18:48:05 2026 GMT
        Subject: CN=80C9633BAF8A377161A9DEF82820AFDA6B6F2C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:7d:05:6b:a3:5d:5f:de:02:2f:6a:90:6e:
                    2b:29:dd:21:90:50:0d:b5:76:ce:a5:4d:68:c1:ca:
                    ff:bb:aa:1b:a3:3d:eb:82:02:04:75:81:99:8d:61:
                    88:17:0d:ac:d8:e7:1e:66:a3:e7:ec:b0:22:91:e7:
                    67:cc:61:39:69:34:a0:22:36:5c:c9:65:96:77:1d:
                    f7:04:36:f2:16:67:5b:6e:9e:61:6f:fd:40:b1:ec:
                    4b:99:07:9a:17:b8:87:5b:92:64:fa:63:7f:e1:5f:
                    b6:d0:d5:a3:e3:90:c9:7a:1e:de:8b:1b:f9:32:52:
                    6d:3d:ba:96:40:db:79:e8:73:f9:be:ff:0b:34:75:
                    49:ec:7f:4d:58:1c:e1:61:98:e2:79:95:cd:dd:33:
                    e1:6b:4b:81:1a:3d:8f:7d:92:66:5d:12:a9:70:18:
                    1e:f1:f3:dc:ad:31:01:8e:4f:b4:a0:43:fc:0a:7b:
                    f7:66:cd:2e:93:47:57:93:f1:18:de:f6:84:16:7a:
                    24:af:90:5b:b1:a3:86:0c:c3:44:f6:7f:67:45:f4:
                    0b:70:7d:a2:f6:82:13:2d:81:f3:aa:da:fa:fa:ac:
                    09:32:f5:ee:f1:63:98:eb:bc:4d:d5:15:11:b2:a7:
                    84:9b:78:c4:1a:c7:3c:6f:f5:cb:57:65:c8:15:4e:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C9:63:3B:AF:8A:37:71:61:A9:DE:F8:28:20:AF:DA:6B:6F:2C:0C
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:df:f5:fd:78:ca:f9:40:3a:64:6a:f8:38:dc:07:b3:f4:56:
         6b:16:78:86:e8:e7:ef:81:4f:81:32:40:33:22:33:2b:cc:9c:
         f0:8c:d1:c6:64:ba:3e:d4:0f:97:4e:33:38:29:95:66:73:cb:
         bb:60:ea:c3:0a:c9:d7:91:f6:1a:83:4e:2b:3e:1f:7e:3c:ab:
         fb:9e:ca:07:7a:8b:db:be:56:6e:a3:e2:17:62:67:3a:4a:a4:
         fc:30:56:53:40:63:61:9d:c7:e2:44:08:3a:67:1d:09:1c:8c:
         db:d4:b4:2d:32:5e:a1:b3:70:5e:f9:9b:83:e9:a5:10:23:4b:
         e3:f1:2c:91:46:17:81:06:fd:6b:7d:7b:57:7b:df:19:78:ba:
         fb:42:ad:ea:56:a8:dc:1a:f9:de:6f:33:74:0c:36:6e:93:97:
         b4:f1:76:b4:fe:6a:bd:1b:fd:67:78:1f:10:27:50:5c:4e:00:
         16:56:4b:d3:5f:07:36:23:72:dc:89:13:44:67:c1:ee:d1:37:
         08:14:35:8c:9c:03:8d:cc:91:02:b9:99:bc:cf:ed:93:14:8f:
         f7:dc:30:00:b8:b1:71:cf:8f:e2:18:5e:3d:45:fb:50:e6:70:
         51:fb:69:04:d3:9e:b7:34:8e:70:c2:03:f3:1c:e8:20:1f:69:
         7f:92:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:01 2025 by rpki-client on console.sobornost.net