Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e34342e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          o7JxJsz8r7znV9BJc2Wcu5rWWSZsTE/zYbMPFgYEZN0=
Subject key identifier:   F6:51:B3:B6:04:B3:CC:25:D5:32:DA:74:DC:BD:CD:DD:3A:B0:96:22
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3D39377D36AA852422EE5D6F1A02096D0B6AC397
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:09 +0000
ROA not before:           Tue 04 Feb 2025 18:43:09 +0000
ROA not after:            Tue 03 Feb 2026 18:48:09 +0000
asID:                     32098
IP address blocks:        201.174.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:39:37:7d:36:aa:85:24:22:ee:5d:6f:1a:02:09:6d:0b:6a:c3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:09 2025 GMT
            Not After : Feb  3 18:48:09 2026 GMT
        Subject: CN=F651B3B604B3CC25D532DA74DCBDCDDD3AB09622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:af:98:c1:23:de:f2:4e:8e:88:3d:ff:c2:
                    8d:0c:57:c2:3c:d4:f7:3e:27:8f:e4:8f:52:8d:46:
                    05:8e:da:5e:69:9b:fb:d4:bc:ef:82:44:24:e1:1b:
                    d0:e4:71:e8:20:25:68:8e:04:87:ed:87:bc:f7:2f:
                    26:18:5a:93:98:59:f4:91:ab:48:ed:2e:68:b2:45:
                    70:dc:92:d7:61:72:bd:df:2d:e4:42:68:e0:be:ad:
                    13:03:c1:c1:2c:26:7b:89:22:54:ae:f2:10:39:0d:
                    7c:57:7f:c7:7b:4a:8f:a4:02:ab:5d:74:5a:92:d6:
                    b6:70:07:0d:c6:5e:ab:8f:f8:b4:7a:92:cb:c0:7b:
                    8f:3e:99:91:66:6b:3c:97:3f:e7:1e:aa:00:ec:94:
                    35:eb:51:09:3d:56:65:a8:ef:4b:77:cb:c5:9a:ad:
                    21:1a:37:a5:13:75:c8:51:89:7a:71:4b:a0:41:88:
                    6b:ca:8e:4c:b4:65:cb:76:89:91:e5:62:6d:51:d3:
                    36:5d:4c:8d:02:5f:5c:f4:da:1c:5b:ae:ee:42:c0:
                    21:a1:ff:6f:7a:ad:55:e7:9d:28:21:42:44:bc:f5:
                    c2:f4:c6:bb:46:8a:2a:74:73:94:59:3f:87:0c:d4:
                    1e:ea:d0:bb:6b:b9:fd:2c:b4:56:e5:41:04:4c:12:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:B3:B6:04:B3:CC:25:D5:32:DA:74:DC:BD:CD:DD:3A:B0:96:22
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:bc:ea:ce:3e:a8:c0:82:98:09:53:9e:02:5a:28:46:72:
         be:91:a8:0b:40:de:b7:d6:33:43:37:41:10:2a:f9:c8:e9:28:
         43:be:2e:66:28:7a:0f:40:33:9f:f7:36:7d:39:a2:f3:70:47:
         da:bc:de:82:e4:47:b8:d7:89:ce:91:0f:37:a5:74:51:f5:b1:
         42:01:e6:56:d9:cf:08:36:f0:60:0c:8b:f8:b4:cc:09:1e:bf:
         1f:c3:e9:ce:41:7c:51:cb:ad:1a:10:a5:fb:59:ab:9d:74:cf:
         9b:ce:2d:03:aa:60:0a:ef:fe:52:9b:cc:12:8d:1e:52:1b:70:
         af:e2:a2:d7:51:4d:d7:06:6f:00:63:ac:6b:95:63:39:a3:43:
         08:9e:92:80:3f:9e:d2:10:47:80:12:94:34:f3:57:a4:5f:db:
         02:6e:14:cc:6c:6f:bb:47:60:0d:c5:24:63:7b:3b:7a:86:b5:
         8e:5a:84:0c:65:dc:94:f1:ae:4b:16:e1:8c:19:78:ab:6e:71:
         95:0f:ef:7c:f3:46:c0:25:c1:dc:f8:b1:ef:8e:bc:39:3f:c1:
         9b:8f:d8:96:47:9c:98:91:f0:8e:dc:1b:cb:ec:21:0f:f3:4c:
         b3:cb:d3:63:b8:e5:b8:f1:6f:05:1e:18:81:23:7e:19:9a:dd:
         3d:4b:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:01 2025 by rpki-client on console.sobornost.net