Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34382e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e34382e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          AMaVgfyNlCQZu9jwpbc4hIkJbh4h2ev39algVgC/+Pc=
Subject key identifier:   35:29:1E:86:B8:DD:A2:F8:5D:13:95:38:BF:D2:3D:AE:F5:A5:B9:ED
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       7B8FC1D0826FF9572A2ABB0DF3C7B56752290A9E
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34382e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:48:02 +0000
ROA not before:           Tue 04 Feb 2025 18:43:02 +0000
ROA not after:            Tue 03 Feb 2026 18:48:02 +0000
asID:                     32098
IP address blocks:        201.174.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8f:c1:d0:82:6f:f9:57:2a:2a:bb:0d:f3:c7:b5:67:52:29:0a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:43:02 2025 GMT
            Not After : Feb  3 18:48:02 2026 GMT
        Subject: CN=35291E86B8DDA2F85D139538BFD23DAEF5A5B9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:ec:e9:18:9d:25:dd:fb:b3:44:7a:eb:4c:
                    3f:d7:03:c6:4c:4b:c1:64:90:40:7d:79:03:32:e2:
                    e5:c9:67:d7:b8:01:5a:1f:69:0e:99:ab:93:03:96:
                    26:3c:ae:64:1d:4a:78:26:5b:7f:a9:23:ec:dd:3b:
                    b6:5a:2b:09:a3:4f:93:99:1c:fe:d7:38:6d:5a:b8:
                    25:ee:ae:ee:a3:8f:ef:ab:01:18:2a:8d:5b:74:25:
                    87:f3:6d:06:d4:8d:bc:18:64:ea:d3:8d:b9:31:56:
                    db:b6:ed:2f:37:a0:5d:0d:83:c8:82:7b:57:b5:fc:
                    21:a0:f9:3d:9a:80:0d:cf:5e:12:c5:46:0e:e1:db:
                    af:8f:a6:f0:7d:6a:8b:dc:ec:c7:e8:ca:eb:62:f5:
                    c5:a7:ca:fb:8c:2f:66:e0:41:32:b0:6c:14:1b:a0:
                    19:17:16:bf:84:c4:e0:57:08:92:ce:0c:fc:e8:ec:
                    4d:d7:c7:13:bb:b1:23:0c:24:e1:17:59:0c:ec:0e:
                    e9:87:ac:d1:6b:93:fe:5e:57:b1:71:bf:d7:96:4a:
                    fb:dd:f8:60:69:6a:7f:34:9b:44:9d:16:20:37:c9:
                    a6:21:19:7f:ac:de:8d:ae:2a:f0:82:21:6d:1d:2c:
                    6e:a9:18:83:1b:f3:55:fc:04:70:0e:91:c4:3a:31:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:29:1E:86:B8:DD:A2:F8:5D:13:95:38:BF:D2:3D:AE:F5:A5:B9:ED
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34382e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:2d:f3:9f:28:08:da:02:13:20:3f:85:44:69:72:89:f3:
         45:9a:9c:87:46:33:0a:97:b9:ca:9b:01:4d:51:bf:a7:36:5a:
         78:4c:d3:2f:ae:1f:08:07:ec:1b:75:f1:35:fb:e1:2d:f0:0a:
         32:91:e8:81:87:7a:bf:1e:d6:5f:1a:41:3d:a8:ab:a0:e6:a1:
         50:f6:8a:91:7d:a9:9d:dc:58:a2:f9:17:9d:c2:45:9d:6a:ef:
         03:67:3a:f1:72:4f:0f:b3:31:9b:9f:4f:a4:2b:60:c4:d8:29:
         ac:a9:10:52:f3:28:23:98:03:80:ec:75:74:de:bc:31:1b:7b:
         73:62:c3:6f:31:3e:15:3c:12:b9:a1:b0:21:5c:62:72:80:0e:
         21:9d:80:08:67:ee:95:50:f8:e3:6f:d9:93:97:52:dd:41:99:
         f7:4a:16:c1:c0:ee:34:de:4a:2f:4d:10:a2:c9:43:43:fb:80:
         0f:e4:0d:13:93:af:b1:75:23:73:4c:53:d7:57:9d:f2:db:a8:
         25:90:de:90:18:05:26:96:f4:34:d9:75:93:75:01:76:12:17:
         8d:38:4e:d8:7e:32:4a:8c:f2:e0:75:59:02:16:b8:7f:26:54:
         2e:8c:32:92:15:c4:70:09:c8:c4:63:5a:6c:18:b7:bf:3c:8e:
         d2:99:44:74
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUe4/B0IJv+VcqKrsN88e1Z1IpCp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNTAyMDQxODQzMDJaFw0yNjAyMDMxODQ4MDJaMDMxMTAvBgNV
BAMTKDM1MjkxRTg2QjhEREEyRjg1RDEzOTUzOEJGRDIzREFFRjVBNUI5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvi+zpGJ0l3fuzRHrrTD/XA8ZM
S8FkkEB9eQMy4uXJZ9e4AVofaQ6Zq5MDliY8rmQdSngmW3+pI+zdO7ZaKwmjT5OZ
HP7XOG1auCXuru6jj++rARgqjVt0JYfzbQbUjbwYZOrTjbkxVtu27S83oF0Ng8iC
e1e1/CGg+T2agA3PXhLFRg7h26+PpvB9aovc7Mfoyuti9cWnyvuML2bgQTKwbBQb
oBkXFr+ExOBXCJLODPzo7E3XxxO7sSMMJOEXWQzsDumHrNFrk/5eV7Fxv9eWSvvd
+GBpan80m0SdFiA3yaYhGX+s3o2uKvCCIW0dLG6pGIMb81X8BHAOkcQ6MScjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNSkehrjdovhdE5U4v9I9rvWlue0wHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzNDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8muMDAN
BgkqhkiG9w0BAQsFAAOCAQEAj5Yt858oCNoCEyA/hURpconzRZqch0YzCpe5ypsB
TVG/pzZaeEzTL64fCAfsG3XxNfvhLfAKMpHogYd6vx7WXxpBPairoOahUPaKkX2p
ndxYovkXncJFnWrvA2c68XJPD7Mxm59PpCtgxNgprKkQUvMoI5gDgOx1dN68MRt7
c2LDbzE+FTwSuaGwIVxicoAOIZ2ACGfulVD442/Zk5dS3UGZ90oWwcDuNN5KL00Q
oslDQ/uAD+QNE5OvsXUjc0xT11ed8tuoJZDekBgFJpb0NNl1k3UBdhIXjThO2H4y
Sozy4HVZAha4fyZULowykhXEcAnIxGNabBi3vzyO0plEdA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:01 2025 by rpki-client on console.sobornost.net