Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa
File:                     3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa (raw, json)
Hash identifier:          cZbzFA2a0zp+gkhiVEUa9PYx3EiSuO76dTz++yp+zLM=
Subject key identifier:   9A:54:D9:EB:38:FD:9B:B4:96:3E:AE:D3:3A:CB:D3:6E:2D:7C:34:61
Certificate issuer:       /CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
Certificate serial:       520D7E79A87D09992A2FB2BEC66E17476E583871
Authority key identifier: 70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa
Signing time:             Tue 04 Feb 2025 18:21:12 +0000
ROA not before:           Tue 04 Feb 2025 18:16:12 +0000
ROA not after:            Tue 03 Feb 2026 18:21:12 +0000
asID:                     270118
IP address blocks:        201.159.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 06:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:7e:79:a8:7d:09:99:2a:2f:b2:be:c6:6e:17:47:6e:58:38:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
        Validity
            Not Before: Feb  4 18:16:12 2025 GMT
            Not After : Feb  3 18:21:12 2026 GMT
        Subject: CN=9A54D9EB38FD9BB4963EAED33ACBD36E2D7C3461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:fb:74:6d:ae:cc:29:99:84:c9:32:9a:66:
                    68:92:1a:3d:a6:71:5d:3f:fa:32:31:72:c1:9c:27:
                    36:e7:58:bd:e5:bd:88:91:a5:8b:f7:31:83:d5:ca:
                    48:e0:d0:78:8f:a5:17:b8:91:56:57:d7:e3:38:15:
                    e0:00:83:f7:86:85:c5:b8:91:8c:b7:d0:76:5b:a2:
                    fe:cc:fc:49:19:75:a2:e8:ed:4d:d9:db:b1:a8:4e:
                    a7:90:6a:35:1c:fb:5c:e2:23:da:7d:5a:1f:f3:cc:
                    61:af:30:d8:78:96:96:c9:6f:8a:15:c9:4f:38:fe:
                    c9:cd:59:03:09:2a:9a:b6:eb:b4:eb:a9:32:27:b1:
                    05:89:e4:ce:6d:ab:c8:79:a9:d8:27:c9:21:a3:12:
                    85:5a:69:42:01:a3:74:bb:8d:e4:8e:f9:6e:88:04:
                    c3:ff:01:e5:80:79:44:e2:b0:d4:be:71:85:e6:62:
                    6d:ab:88:89:73:28:61:67:14:62:e8:1d:29:10:a2:
                    b5:27:bb:9a:01:28:f3:49:de:7c:f1:d1:7e:07:04:
                    a9:24:47:25:84:53:35:79:d5:b4:22:f7:29:38:28:
                    4d:78:07:47:a6:e8:e4:cd:4d:74:31:63:f8:53:21:
                    4b:1d:7d:f9:06:91:d0:99:5d:6d:a3:9e:45:e1:dc:
                    f8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:D9:EB:38:FD:9B:B4:96:3E:AE:D3:3A:CB:D3:6E:2D:7C:34:61
            X509v3 Authority Key Identifier:
                keyid:70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:96:c0:85:25:51:df:70:50:e2:a7:e0:53:73:4a:70:eb:
         3f:9b:58:35:50:93:b0:04:41:e2:10:80:39:0f:1e:a9:47:72:
         3f:61:c5:4f:32:94:cd:5e:19:31:52:89:bb:9a:4a:15:fb:44:
         fc:8e:6d:d4:2d:30:1f:72:d3:0f:71:6d:d1:7c:e7:44:ec:09:
         54:8a:ac:6c:71:7e:8b:3c:db:33:94:56:d0:2d:c0:97:4d:d6:
         d0:58:52:cc:90:49:48:da:b9:85:cb:3e:b3:f2:a4:3c:31:0d:
         f9:90:a1:d5:d8:79:28:3b:46:16:62:a9:6d:e4:20:43:dc:2f:
         08:8f:4f:1a:be:09:2b:9b:95:7e:1a:36:d7:6c:9d:fe:ed:12:
         c6:91:75:bd:84:40:3f:fb:7a:ea:a4:db:ac:7b:9f:84:cb:f9:
         ba:59:87:a5:97:9e:36:80:9e:53:4d:08:0e:a7:c1:dd:37:74:
         fc:1a:1f:a5:57:cb:c0:51:2c:d6:a9:65:61:97:b0:3f:9b:4e:
         26:68:02:37:aa:3b:38:b3:fb:6f:d7:a9:1d:40:59:58:6b:5a:
         d1:7f:9d:f0:f2:9b:fd:34:d5:a0:c2:50:1c:7e:e0:49:ea:3f:
         11:f3:a5:15:f7:81:ad:99:53:a5:12:c3:2c:e8:0c:c8:e7:0f:
         d8:7f:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:21:36 2025 by rpki-client