Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/3230362e3232312e38302e302f32302d3234203d3e203130363937.roa
File:                     3230362e3232312e38302e302f32302d3234203d3e203130363937.roa (raw, json)
Hash identifier:          A63DPWaGu4ncao5SbuzzNORnyJp3efH7wi7W3ibdfqs=
Subject key identifier:   E5:DD:56:E9:94:31:5B:35:F8:89:67:B1:75:E3:4F:0F:EB:CD:08:75
Certificate issuer:       /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
Certificate serial:       50E8F7BE26A9A0B56A20E6C0B27B527DB99AA1ED
Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/3230362e3232312e38302e302f32302d3234203d3e203130363937.roa
Signing time:             Tue 04 Feb 2025 18:02:01 +0000
ROA not before:           Tue 04 Feb 2025 17:57:01 +0000
ROA not after:            Tue 03 Feb 2026 18:02:01 +0000
asID:                     10697
IP address blocks:        206.221.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:f7:be:26:a9:a0:b5:6a:20:e6:c0:b2:7b:52:7d:b9:9a:a1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
        Validity
            Not Before: Feb  4 17:57:01 2025 GMT
            Not After : Feb  3 18:02:01 2026 GMT
        Subject: CN=E5DD56E994315B35F88967B175E34F0FEBCD0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:a8:d4:72:46:a4:37:09:7e:3a:ba:0b:e3:
                    5e:42:06:1e:28:1d:82:59:f6:51:9b:79:69:af:59:
                    34:73:d6:23:67:b5:a7:d7:a9:d2:de:f8:c0:52:7a:
                    db:7a:73:9f:b9:b3:b2:1b:82:d9:9e:e8:c3:bd:a9:
                    39:49:28:49:aa:0e:78:60:70:ca:7a:10:cb:0f:05:
                    5b:f5:65:cb:32:88:27:22:36:fa:82:6e:ee:da:82:
                    dc:7f:11:04:86:31:6b:0c:93:db:43:4b:60:75:54:
                    ad:ad:a0:3e:8e:d0:4e:84:6f:ac:73:c0:43:88:cd:
                    7d:36:a5:4b:7b:8d:cd:d4:93:45:b8:a0:41:3c:e4:
                    7b:c4:ca:8f:5f:be:01:eb:0d:b7:f3:55:b9:46:c5:
                    52:cb:6e:7f:f0:28:13:78:5f:ed:26:1d:0e:45:63:
                    db:19:a6:78:e4:41:59:2d:25:8e:70:c0:0e:e5:7e:
                    10:54:36:79:88:9b:2b:9f:04:7d:69:93:25:a5:73:
                    77:41:52:36:9d:df:98:93:9a:ea:ac:cc:e6:79:a4:
                    23:fe:32:d7:95:cd:e1:8d:60:41:a1:aa:f8:97:95:
                    60:f0:a8:6f:33:8c:ba:4d:d2:a3:ac:9f:3c:29:93:
                    b4:a3:70:1d:d7:0a:ba:fd:6f:d7:e8:1e:d7:38:b1:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DD:56:E9:94:31:5B:35:F8:89:67:B1:75:E3:4F:0F:EB:CD:08:75
            X509v3 Authority Key Identifier:
                keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/3230362e3232312e38302e302f32302d3234203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:eb:68:48:d8:b2:3f:d1:d4:b2:5e:7c:35:cc:b6:1d:1f:15:
         45:40:a1:b6:72:54:96:81:92:b7:fb:21:32:95:75:78:25:19:
         ee:fc:b6:29:5f:93:e8:41:77:80:68:08:75:25:d1:0f:cf:6f:
         d3:47:b8:56:a7:f5:13:4d:69:9d:b8:e7:be:c1:b3:19:c4:f8:
         36:0f:07:b7:53:c6:68:07:4f:d0:82:9b:e9:cf:58:6d:eb:f6:
         91:a5:4e:02:84:90:00:bc:72:23:6e:34:54:75:c0:1b:67:ef:
         fb:01:39:8f:a3:a6:74:fe:67:60:d4:f9:59:c6:82:f9:64:d0:
         41:9d:24:c9:b9:6f:81:bd:99:f7:2b:07:7d:13:ee:8a:99:fd:
         42:03:a7:e7:f5:1f:1b:26:87:a6:34:ab:6e:0d:14:9a:27:71:
         eb:cb:39:8f:9e:ca:e8:e7:42:e7:92:12:8a:84:0b:fb:5d:33:
         3d:64:a1:86:7d:be:0d:dd:5a:47:7a:10:40:e4:f7:b6:a6:70:
         4e:fb:61:9c:36:54:1c:4b:bc:92:08:d0:f3:fe:5b:eb:1c:00:
         b7:ab:b6:b2:c4:dd:42:3e:cf:19:80:8b:86:2c:20:9a:01:e0:
         37:13:12:51:f8:5c:64:fe:6c:4b:9b:2b:df:7a:98:d7:88:c3:
         f2:84:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client