Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133342e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          xck3ylDsZqQFQfFmyhO85CPXbNtYyVrOR3RXVeugESg=
Subject key identifier:   0B:2A:B0:54:49:82:12:C4:13:C5:4C:A2:51:7A:8D:0F:0B:74:19:EC
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       42673A309C5F5EC11186E689F1794F02AC6D7BEE
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 19 May 2025 16:19:35 +0000
ROA not before:           Mon 19 May 2025 16:14:35 +0000
ROA not after:            Mon 18 May 2026 16:19:35 +0000
asID:                     27964
IP address blocks:        201.49.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:67:3a:30:9c:5f:5e:c1:11:86:e6:89:f1:79:4f:02:ac:6d:7b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: May 19 16:14:35 2025 GMT
            Not After : May 18 16:19:35 2026 GMT
        Subject: CN=0B2AB054498212C413C54CA2517A8D0F0B7419EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:aa:d5:20:b2:b9:37:51:60:0c:e1:7a:84:
                    0d:2c:ca:4d:6f:0f:9c:16:c0:15:3d:67:8c:a1:b4:
                    53:70:9f:28:81:3a:94:55:c6:1b:3a:60:9a:95:f4:
                    83:a4:b5:d4:8d:94:ea:5b:89:5a:39:63:ca:e7:a7:
                    f7:1f:f4:ac:57:35:c1:70:8f:a1:e2:21:f8:b8:be:
                    cf:eb:7b:91:18:9c:04:61:13:56:ec:1c:cf:dc:1a:
                    e6:cb:32:e2:bd:35:8f:68:1c:69:ee:9f:14:e9:12:
                    55:59:53:87:b4:93:40:9b:08:82:f6:b5:d8:d0:03:
                    be:55:5c:00:73:a4:cc:f4:08:89:77:eb:83:94:04:
                    ec:c5:69:61:8f:64:9d:78:fc:26:7f:88:b8:e5:fa:
                    6f:2b:11:13:42:ab:33:df:0c:da:1a:af:83:56:2a:
                    e6:86:d9:98:66:01:0f:6f:af:59:59:fb:c9:a4:c6:
                    ea:14:f4:5a:74:a0:9d:9e:14:eb:a9:31:fc:2b:ab:
                    1a:fc:b6:f0:ac:03:ba:0c:37:de:07:78:23:06:f7:
                    e1:e6:1f:b6:80:db:6f:89:09:39:bd:7e:af:2f:49:
                    3e:11:2c:2a:69:52:5c:2f:db:50:5a:80:2f:f2:2e:
                    0c:87:9e:1a:27:51:65:93:27:10:0c:79:bf:61:ce:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:B0:54:49:82:12:C4:13:C5:4C:A2:51:7A:8D:0F:0B:74:19:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:09:79:c0:44:7d:ad:30:08:c2:4d:3c:6d:00:7f:8b:32:
         ab:79:f8:42:49:72:4f:9c:73:88:77:06:cb:b2:55:16:f3:85:
         f6:6b:9c:0d:65:10:b8:90:eb:de:ab:f1:df:c5:16:e4:9d:24:
         33:a8:13:a3:52:95:d9:17:27:ff:10:40:c3:1c:bf:3b:56:2a:
         b4:98:46:31:c7:9f:bb:cf:da:50:89:04:14:c5:df:7b:56:8c:
         2b:8b:0e:78:19:05:a9:fc:99:c6:22:d2:61:6f:f0:c5:6c:c1:
         2f:58:ea:4f:4b:a1:4b:46:e8:8c:c0:f0:32:c3:7a:77:56:d9:
         d9:68:5c:72:44:d1:18:15:d3:8f:bd:c1:bb:a5:c1:2e:69:6b:
         4a:bd:15:91:03:85:38:2d:be:90:d4:fc:92:37:5f:2b:d5:53:
         c5:2a:0c:b0:aa:ea:c2:f4:f8:ee:de:43:cd:4d:0d:fe:25:c4:
         ae:92:39:83:75:9f:5b:25:83:64:72:a8:61:3d:d2:98:a7:95:
         a3:fd:ba:d1:4f:36:b7:3d:3a:71:32:b2:c4:07:26:cd:b2:d4:
         01:32:3d:63:c1:da:ad:0c:38:89:44:99:cb:8b:9c:5f:82:43:
         f6:99:f7:eb:4b:f6:d7:c7:b7:92:f0:41:44:36:98:af:11:26:
         04:e4:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 14:16:45 2025 by rpki-client