Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133332e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133332e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          UnyFkVLlNClCf+CnF6Z7foWtuyqjD1Id8v3tjme9yTQ=
Subject key identifier:   99:49:C6:43:14:B8:5C:F1:2B:FC:17:E6:43:60:4D:11:1C:5D:B9:A4
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       45AB759D1A18A057604C3EAD4892A2AFB5032857
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133332e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 19 May 2025 16:19:35 +0000
ROA not before:           Mon 19 May 2025 16:14:35 +0000
ROA not after:            Mon 18 May 2026 16:19:35 +0000
asID:                     27964
IP address blocks:        201.49.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ab:75:9d:1a:18:a0:57:60:4c:3e:ad:48:92:a2:af:b5:03:28:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: May 19 16:14:35 2025 GMT
            Not After : May 18 16:19:35 2026 GMT
        Subject: CN=9949C64314B85CF12BFC17E643604D111C5DB9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:d8:49:4d:ce:48:97:14:72:75:96:95:13:
                    6c:dc:e3:53:c2:33:1a:29:fa:30:e5:92:f4:2e:07:
                    87:50:90:9d:c6:d2:1d:cb:b3:c2:03:82:09:60:15:
                    a5:98:f5:f4:f6:c3:7c:6e:81:e9:9a:f5:3c:72:4e:
                    b0:2f:02:b2:5d:60:b7:44:1b:ed:61:05:c9:93:45:
                    b3:1c:cb:aa:2d:45:f5:e2:83:51:42:a9:62:24:f9:
                    f7:b7:e9:a6:0b:71:a7:97:9b:0a:6e:b9:27:0d:66:
                    9e:2c:d7:b8:52:f0:cf:66:77:93:45:4f:b1:f8:66:
                    29:a1:74:46:76:36:f9:cb:05:59:2f:5d:0f:69:83:
                    5b:8a:3a:78:76:7f:67:32:35:01:de:d6:ac:db:23:
                    71:bd:21:50:94:1a:2b:fc:69:29:6f:0a:05:93:60:
                    79:4f:a2:43:7b:47:a2:10:27:30:71:1e:e6:b0:86:
                    cb:0b:62:53:35:14:aa:34:50:2b:95:98:1a:c8:4b:
                    45:ba:d0:34:76:73:ae:c1:a8:82:a5:c8:da:1f:c8:
                    78:d1:ff:60:ef:ad:5a:ab:5a:5a:e3:f1:c4:67:3c:
                    05:e5:80:11:74:79:07:a9:fc:ed:6a:2e:20:b4:ed:
                    a0:45:a0:65:c4:bf:47:4e:56:76:8e:8f:a6:90:db:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:C6:43:14:B8:5C:F1:2B:FC:17:E6:43:60:4D:11:1C:5D:B9:A4
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133332e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:b0:8b:e9:c1:aa:54:6b:de:e6:1b:55:eb:21:89:97:0d:
         15:7c:a2:62:d0:ac:4c:f6:9f:70:f3:72:29:65:c8:61:c7:64:
         47:c0:42:88:fa:ef:2c:f5:ce:15:23:fa:51:74:c8:a6:24:11:
         38:b5:27:17:c8:eb:dd:77:b8:36:ee:e2:68:1a:2e:42:17:e0:
         ec:81:df:ba:ea:ba:10:74:e4:29:ee:0e:0b:ef:44:fe:11:52:
         c4:70:3a:3b:d7:a0:34:01:1b:7b:fd:cb:4a:62:61:24:86:60:
         fe:bb:b9:ea:23:3c:51:dc:15:79:5b:fb:ef:c4:82:61:f6:44:
         26:74:d9:fa:91:08:7b:4b:1b:43:3b:31:59:3a:00:19:c3:a2:
         ea:47:60:5f:d7:f4:bd:4e:84:25:bc:75:57:21:72:2e:20:3b:
         a0:2c:fc:45:b2:86:7d:74:26:db:ea:b3:0f:5b:7b:3b:71:d5:
         28:62:68:54:87:16:bc:96:a7:8e:d9:b8:b2:c4:40:c5:dd:3d:
         82:be:e4:6f:90:ee:d7:10:83:8c:c2:33:f9:72:7c:fd:de:26:
         a7:82:91:fc:bb:05:1d:62:a3:f1:b4:8e:a1:75:a2:b5:61:60:
         af:71:d1:42:68:44:82:54:34:96:f2:4a:69:a4:99:d5:c9:61:
         6c:d9:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 14:16:46 2025 by rpki-client