Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133342e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          sXle+lysbspTLKwOuLfYLPz89J6JQwWsCyIKOjnlK5I=
Subject key identifier:   04:E8:A8:C6:4C:8D:07:0E:CB:C0:C4:87:47:4C:82:49:BC:49:51:FA
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       7B030E0586BC45654D22EE5943F3779422CD2047
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 17 Jun 2024 15:50:00 +0000
ROA not before:           Mon 17 Jun 2024 15:45:00 +0000
ROA not after:            Mon 16 Jun 2025 15:50:00 +0000
asID:                     27964
IP address blocks:        201.49.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:03:0e:05:86:bc:45:65:4d:22:ee:59:43:f3:77:94:22:cd:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Jun 17 15:45:00 2024 GMT
            Not After : Jun 16 15:50:00 2025 GMT
        Subject: CN=04E8A8C64C8D070ECBC0C487474C8249BC4951FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:51:b4:40:bd:fb:c4:94:25:b1:3c:95:c1:
                    1f:ba:1c:be:23:e1:ae:b1:b3:bc:49:eb:22:da:4c:
                    79:aa:6d:8a:6c:5f:2a:e2:1e:d0:c5:a1:ed:8d:e0:
                    72:6d:a1:c1:59:c2:8f:68:72:95:40:94:d0:e1:ca:
                    dd:38:f8:e8:a2:ad:69:a2:93:dd:70:27:64:15:73:
                    73:b3:e8:41:47:6c:98:df:56:21:cf:07:c9:13:1f:
                    01:bb:22:02:7e:0d:bb:e4:77:23:69:db:f4:87:1f:
                    18:eb:fd:9c:57:a2:ea:02:8e:25:a5:19:34:c1:26:
                    a1:0d:bc:da:be:b3:ff:82:7e:41:e8:c8:ac:00:08:
                    f0:8f:c7:06:eb:74:96:d2:75:84:05:53:bc:c7:b5:
                    7f:2c:7e:80:7d:03:66:0d:98:72:f3:37:a7:a2:c8:
                    fd:aa:0f:03:d5:ea:ba:3c:29:9e:f3:6a:61:38:1f:
                    98:ae:23:10:2a:b5:0e:ec:85:ad:bb:57:60:52:dc:
                    02:43:3b:42:3f:35:8f:a3:fc:27:c2:1b:60:95:ba:
                    0a:70:50:fd:02:68:b2:5b:f0:48:97:64:bf:5f:c3:
                    1c:e3:92:81:5d:ca:57:45:3a:f2:2d:c0:90:0e:0a:
                    28:c7:21:dd:ca:b7:56:51:f1:6b:d3:73:0f:15:9e:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:A8:C6:4C:8D:07:0E:CB:C0:C4:87:47:4C:82:49:BC:49:51:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:92:c4:98:5c:92:e3:5a:81:df:00:af:b9:34:c9:fc:2d:9d:
         da:bd:bb:45:d9:55:86:32:f8:7c:ca:34:19:ca:89:bf:c9:ac:
         4a:55:ca:3a:20:7c:8d:0d:21:91:49:e8:e3:6d:19:34:f4:36:
         94:ab:07:86:e9:85:3a:e4:82:9e:b9:e0:27:a0:b7:4f:13:6d:
         61:c3:c3:fa:3f:ed:84:62:1f:68:3d:14:1a:c1:c9:3e:fb:6c:
         1b:91:f2:81:5d:f1:11:74:a3:6b:d1:8c:4f:dd:5a:c1:71:3f:
         59:cd:50:85:a3:de:45:74:28:67:13:17:41:9a:33:5e:44:5d:
         ca:88:3d:60:5c:ec:27:1d:ca:2c:a5:59:a6:0c:30:d5:cc:44:
         70:d7:ac:64:44:5d:92:72:5f:6f:1b:23:0e:42:2c:9d:b6:a8:
         aa:1d:34:12:0b:9e:45:cf:9e:6a:74:9f:47:9e:12:c4:19:62:
         6b:bc:06:2e:89:fb:91:ba:e1:9d:9e:ad:eb:31:3a:43:d3:af:
         96:43:0f:d3:42:6b:e7:cb:33:07:88:64:3e:2c:3d:30:bd:c2:
         97:8e:3b:f9:72:eb:be:06:66:21:40:70:b6:31:f8:39:4b:f5:
         48:a8:1a:b6:b2:c3:11:ae:25:b3:c2:df:04:4f:d6:93:8e:26:
         1f:e8:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:53 2025 by rpki-client