Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa
File:                     3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa (raw, json)
Hash identifier:          fJzfDEMJiF+1Ismrtdhpa/LoVcpBd8dfx7A/lMmL8Sk=
Subject key identifier:   8F:27:AD:30:60:16:92:40:86:0A:D1:FE:B8:E9:5D:F8:33:E5:F7:9A
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       1E26C011D81A266CE727C190188978D5C8B250EE
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa
Signing time:             Tue 04 Feb 2025 18:19:31 +0000
ROA not before:           Tue 04 Feb 2025 18:14:31 +0000
ROA not after:            Tue 03 Feb 2026 18:19:31 +0000
asID:                     40676
IP address blocks:        201.159.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:c0:11:d8:1a:26:6c:e7:27:c1:90:18:89:78:d5:c8:b2:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Feb  4 18:14:31 2025 GMT
            Not After : Feb  3 18:19:31 2026 GMT
        Subject: CN=8F27AD3060169240860AD1FEB8E95DF833E5F79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:65:d0:24:b5:9c:41:53:6b:ca:03:c2:f8:
                    f9:4e:18:71:39:9b:af:5a:81:0b:74:2c:e8:44:e9:
                    f0:7e:a3:d5:62:5d:8e:24:8d:bd:54:d1:10:71:4e:
                    bd:98:25:01:23:8a:43:f9:cf:1d:1b:c7:c2:f5:95:
                    fe:ac:49:d5:13:f7:56:36:1a:2e:2b:d9:b2:85:cc:
                    f9:ae:2e:3b:6f:10:4a:c9:8c:3e:67:71:41:43:f6:
                    77:0b:0b:af:1c:35:e3:c5:07:8d:e3:b7:95:90:ec:
                    8c:a7:8c:e8:44:e0:1b:c9:a7:31:be:47:a9:c3:de:
                    72:fe:73:9d:f7:aa:07:b0:74:6c:e9:80:7f:0a:f5:
                    80:35:e2:3e:9e:36:8f:48:b0:82:bd:84:6f:c4:94:
                    fa:29:cc:fc:f9:39:2f:d1:e3:7d:f9:7a:74:c5:88:
                    9b:b5:9e:f9:1b:0e:6f:80:2e:b1:a3:7c:a1:3e:90:
                    ff:9e:02:e0:53:4f:4a:33:a6:ac:3b:44:50:e6:47:
                    17:98:38:bf:29:33:32:e1:59:bb:ee:75:0a:a7:25:
                    4b:e1:43:21:17:f9:07:62:04:da:e6:59:2c:7a:23:
                    85:df:01:96:74:22:73:80:ee:75:87:50:5b:94:81:
                    39:1e:b1:4b:6c:36:8e:0d:6f:57:53:ec:9d:89:95:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:27:AD:30:60:16:92:40:86:0A:D1:FE:B8:E9:5D:F8:33:E5:F7:9A
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:5d:06:ad:a9:bd:cc:f9:56:b5:ae:a7:fe:09:d3:24:00:
         c4:c2:7f:89:50:79:08:1e:1e:d1:27:c2:3d:bd:b2:2f:ba:aa:
         b9:ca:4a:ea:a6:1a:cc:15:11:e6:cf:bd:4b:d8:72:76:3e:f0:
         89:cd:9d:94:a9:c9:4c:38:e8:e9:80:2d:66:d8:b7:e5:fe:d9:
         8e:dc:b8:60:93:ca:cd:2a:a7:a7:c4:fd:a4:8b:63:a1:4e:c0:
         d3:91:ab:64:22:b4:34:2c:68:15:23:b2:38:79:74:14:9a:0c:
         2f:64:9c:ce:c0:b9:be:f6:d2:c5:a5:1f:e5:ce:1f:67:4b:23:
         7d:9b:3c:8d:7a:99:a7:ba:00:fd:d3:43:7a:e4:20:1d:a8:ed:
         6f:f5:cb:34:53:8a:11:94:09:ee:97:61:43:4b:ca:9d:35:91:
         c3:5b:87:b7:7b:42:08:23:99:17:48:71:d3:1b:71:4f:83:4c:
         6c:9d:b6:09:7f:1f:2f:26:f1:4f:5d:66:98:88:38:01:b1:cb:
         e0:5b:f9:68:73:44:d3:91:c6:83:40:ba:3d:96:6c:2e:8d:a2:
         b7:c1:63:eb:1d:29:63:ab:68:d0:9d:f0:80:72:03:f0:64:0a:
         9d:3a:ce:59:23:78:3d:72:3c:75:59:eb:f1:3d:71:af:46:13:
         2b:84:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:38:06 2025 by rpki-client