Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230312e3234342e302e302f31352d3234203d3e203139343239.roa
File:                     3230312e3234342e302e302f31352d3234203d3e203139343239.roa (raw, json)
Hash identifier:          j/NkqkyWMtF+ZNR7lBETTmKj5tEb+M6sMRGV39F+QRQ=
Subject key identifier:   39:D4:25:6B:27:8A:33:6F:09:B3:38:F8:03:F1:AF:E1:BE:7E:49:F0
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       2763BB2D6A6BCAE3258644AA24543A5501E2BFEC
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230312e3234342e302e302f31352d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:56 +0000
ROA not before:           Tue 04 Feb 2025 18:12:56 +0000
ROA not after:            Tue 03 Feb 2026 18:17:56 +0000
asID:                     19429
IP address blocks:        201.244.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:63:bb:2d:6a:6b:ca:e3:25:86:44:aa:24:54:3a:55:01:e2:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:56 2025 GMT
            Not After : Feb  3 18:17:56 2026 GMT
        Subject: CN=39D4256B278A336F09B338F803F1AFE1BE7E49F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:5b:6e:81:5b:71:e8:73:b4:38:32:42:d3:
                    a6:5b:5d:55:31:5b:9b:33:1d:72:a4:42:a1:10:42:
                    53:e6:e0:87:48:23:da:54:c8:c2:61:95:78:71:f2:
                    e2:42:44:4f:16:23:e0:09:4a:11:cc:00:99:e3:30:
                    43:9f:9c:28:89:88:82:53:48:53:97:cf:60:e5:61:
                    b1:26:b8:97:fd:bc:f7:7b:23:1d:3d:b4:bb:69:39:
                    04:43:9e:a9:5a:a0:6b:af:4c:5c:49:10:78:72:ee:
                    8e:8d:19:da:06:46:6a:08:f4:d8:72:03:fc:56:a8:
                    1f:0c:61:87:5d:44:c0:4d:66:25:d0:e1:0c:9a:b6:
                    83:e6:85:86:c6:39:d2:90:31:f0:64:d3:5f:44:14:
                    0f:e8:9a:f4:89:7e:e0:a4:2f:5a:c3:06:2f:a9:4d:
                    09:01:ee:7a:e2:a7:57:9b:df:d4:45:40:fc:e8:10:
                    4f:d6:78:3b:8a:6c:2f:7e:95:73:42:33:3a:79:a7:
                    ad:46:50:50:89:ee:b2:0f:29:a4:dd:4d:56:f8:5e:
                    dd:c2:de:7b:30:c7:67:34:76:73:b1:3c:30:c4:39:
                    e5:bc:f3:cd:9e:d1:d6:c9:56:dd:ed:61:79:39:90:
                    b4:08:ad:29:4c:c8:45:c1:d3:7e:cb:ba:06:a7:3b:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:25:6B:27:8A:33:6F:09:B3:38:F8:03:F1:AF:E1:BE:7E:49:F0
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230312e3234342e302e302f31352d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.244.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         21:04:3d:99:bf:c3:d0:8d:63:83:0d:fd:67:4a:04:2f:d3:61:
         3c:b6:de:39:5a:cd:ab:d9:fe:4e:32:95:9a:52:d3:31:cb:dd:
         c2:6a:2a:46:01:47:42:c5:ac:b5:9a:46:96:75:a9:25:a2:e6:
         e0:b9:1a:6f:a7:c1:23:87:f0:a4:35:de:01:ab:c9:25:bf:4d:
         f5:4c:0b:1d:63:14:d0:b8:f2:a0:24:80:52:07:8b:08:3c:24:
         3f:01:85:d9:e2:38:c4:ad:37:19:f5:9a:37:cd:35:d7:64:21:
         34:91:09:93:6d:76:c0:8a:e8:06:95:13:f2:c4:7a:d5:22:6e:
         3c:45:1e:8b:98:7c:31:1f:1b:b6:3d:0f:40:21:0c:f8:f2:04:
         ab:29:3e:9f:06:5e:86:29:f2:e2:b6:af:a7:ee:92:ac:09:4e:
         9a:17:ce:63:c7:7b:6f:5d:ca:f8:57:9e:c8:24:95:7d:a7:9f:
         05:8f:78:78:98:b1:5f:93:c9:64:24:cb:06:ae:7b:20:75:19:
         ee:c2:06:33:85:72:ea:c1:04:d7:2e:a9:76:04:11:77:ca:f1:
         51:dd:a9:dd:47:e0:de:a9:98:f6:bd:84:18:f2:ac:e3:62:a4:
         a8:d0:8f:00:01:2a:79:52:16:e4:63:62:7e:ea:11:b5:a8:80:
         5a:0b:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:55 2025 by rpki-client