Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3230312e3231392e3233322e302f32312d3234203d3e203532333431.roa
File:                     3230312e3231392e3233322e302f32312d3234203d3e203532333431.roa (raw, json)
Hash identifier:          y4iJQsqwX91vNCGsl8otx6pTvAXr9I31r6I688blIbg=
Subject key identifier:   40:77:AE:32:8C:FD:97:1C:BB:4E:CB:B6:91:B3:D4:9C:71:4B:88:9A
Certificate issuer:       /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial:       49FEFD80F93BA08E6E50056FABA7E29ABADCCAAA
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3230312e3231392e3233322e302f32312d3234203d3e203532333431.roa
Signing time:             Tue 04 Feb 2025 18:43:28 +0000
ROA not before:           Tue 04 Feb 2025 18:38:28 +0000
ROA not after:            Tue 03 Feb 2026 18:43:28 +0000
asID:                     52341
IP address blocks:        201.219.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fe:fd:80:f9:3b:a0:8e:6e:50:05:6f:ab:a7:e2:9a:ba:dc:ca:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
        Validity
            Not Before: Feb  4 18:38:28 2025 GMT
            Not After : Feb  3 18:43:28 2026 GMT
        Subject: CN=4077AE328CFD971CBB4ECBB691B3D49C714B889A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:1d:a3:cc:49:d9:87:76:08:da:31:7d:be:
                    ca:93:ac:b3:d6:bb:09:54:80:42:0a:06:39:fb:94:
                    ad:dd:fc:59:93:be:f1:53:43:ac:34:ea:05:98:dd:
                    e1:70:10:69:5c:cb:3a:eb:3e:4c:71:65:a0:0e:5f:
                    a0:28:9d:4e:82:a3:b2:d4:34:d4:c9:0d:f0:86:76:
                    f3:1f:92:9d:cb:ea:a5:a1:d4:51:ce:9b:d1:83:93:
                    f1:a3:5a:6c:0a:1f:7f:29:97:9c:18:32:04:3b:99:
                    6c:ec:1f:4f:f9:52:2e:80:96:59:72:42:8c:0a:0c:
                    03:d5:2f:59:2f:2d:f1:b4:ab:db:8d:be:39:bb:6e:
                    dd:b1:d9:e3:e5:24:c7:50:4f:56:f7:bb:36:6b:f5:
                    ee:24:01:e2:d2:81:a2:92:67:07:99:1a:15:ac:b1:
                    83:38:c0:9d:fb:ef:15:c8:7e:5e:35:98:3c:e3:18:
                    e9:bb:f7:52:18:1b:b7:ef:dd:99:ab:8c:6c:f4:4e:
                    8b:ce:12:87:9d:49:fa:fd:d8:8f:1b:91:41:ac:16:
                    01:06:0f:75:b2:c9:dd:69:13:a2:09:85:a0:0d:d2:
                    5d:ff:bc:29:30:45:b7:a4:a1:76:3c:3b:36:8f:22:
                    cf:a1:53:e0:9d:93:9a:79:46:eb:4a:8f:04:a8:62:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:AE:32:8C:FD:97:1C:BB:4E:CB:B6:91:B3:D4:9C:71:4B:88:9A
            X509v3 Authority Key Identifier:
                keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3230312e3231392e3233322e302f32312d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:b8:df:9c:47:da:88:32:a5:af:b5:aa:ed:10:15:51:0a:71:
         30:28:5d:a1:d7:58:30:3b:7a:e1:82:93:3c:51:10:2c:d0:aa:
         6f:0d:0f:cc:77:fc:11:86:39:a5:37:1a:59:fb:6f:1a:9c:8b:
         99:10:e0:95:45:cf:57:ef:8a:55:c5:44:f6:ee:25:b1:17:0a:
         5d:18:dc:3a:2f:d5:91:4e:0c:68:18:42:2f:c2:4d:d6:95:f9:
         0c:a9:e3:cb:f8:6e:59:b7:02:ec:b3:d5:c6:08:cc:90:df:84:
         bc:65:c7:71:d9:a2:39:a4:b9:d3:a9:d9:71:e1:20:5e:8e:14:
         85:f2:45:2c:09:51:8f:cc:16:d2:70:11:a6:47:f3:d0:c1:04:
         58:60:bc:41:61:34:ed:af:ff:fa:3e:7c:3e:c8:27:ad:58:cb:
         10:1d:e4:60:d2:76:ba:25:94:df:42:fb:ed:d0:16:cc:fe:ad:
         aa:08:35:3c:ce:49:63:3a:4d:02:51:d1:a6:51:62:07:75:88:
         06:6b:45:03:f1:52:6d:80:27:f5:9b:5b:b4:6f:f0:03:be:3f:
         9c:cb:23:da:6d:f5:8c:cb:58:01:82:7b:c2:6b:f1:66:6a:47:
         87:19:c3:b9:f4:28:a5:3b:20:b8:de:40:f0:5f:d8:ae:f9:a6:
         5d:03:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:22 2025 by rpki-client