Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa
File:                     3230312e3234302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          4zwS2ILx2OMOAOhMEoC4eU3Hq8FLh1LU27LbnLr8Jh0=
Subject key identifier:   16:8A:C3:7C:15:78:1D:46:3F:34:31:F0:45:48:85:2E:AC:A5:3E:AF
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       2925454262E2B149D516A254D062B709CABE0463
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:08 +0000
ROA not before:           Tue 04 Feb 2025 20:00:08 +0000
ROA not after:            Tue 03 Feb 2026 20:05:08 +0000
asID:                     6147
IP address blocks:        201.240.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:25:45:42:62:e2:b1:49:d5:16:a2:54:d0:62:b7:09:ca:be:04:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:08 2025 GMT
            Not After : Feb  3 20:05:08 2026 GMT
        Subject: CN=168AC37C15781D463F3431F04548852EACA53EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:50:aa:58:a2:f8:74:63:9b:87:ea:bc:e5:
                    97:95:5a:23:34:6d:ea:d5:51:b7:3a:4b:a5:e9:cb:
                    20:63:56:fa:2e:cb:06:42:b5:4b:7e:4f:48:e0:67:
                    d3:60:bd:d7:7b:c8:0c:b4:00:41:31:eb:77:25:47:
                    f3:75:0c:fc:f1:41:1b:86:a3:c6:56:68:af:07:84:
                    fe:ed:19:25:ef:71:af:b0:92:83:6a:63:c4:c7:af:
                    ea:a3:80:0a:42:e5:b4:67:db:4b:21:b8:03:1c:ff:
                    ef:1e:88:fa:ea:68:ca:f7:41:b5:4d:24:fc:4e:4c:
                    95:1f:de:11:3c:a5:0d:97:a4:73:bf:f8:5a:a4:3e:
                    7d:8b:5a:7d:ce:cc:d6:b0:8b:56:f8:82:bd:d1:78:
                    91:fd:b7:13:e1:40:87:10:40:a8:06:57:0f:c6:56:
                    74:a5:bc:27:53:1c:8d:ce:17:81:1e:4e:03:c7:41:
                    84:7d:f4:81:ec:dc:88:42:31:b1:30:ec:5f:5e:c5:
                    a1:2e:9d:43:ff:d1:3b:02:56:d4:74:c7:c3:f3:7f:
                    fa:b5:e2:e8:3c:ae:cf:9c:bb:51:31:78:02:a3:af:
                    f1:f5:9b:b3:02:ff:e7:ca:d7:7b:3b:c7:6d:6d:a1:
                    b9:04:21:8e:9a:8e:1d:c7:ed:2c:67:58:60:76:ff:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:C3:7C:15:78:1D:46:3F:34:31:F0:45:48:85:2E:AC:A5:3E:AF
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:89:ed:2f:48:9f:f4:ff:20:a2:8c:35:f2:65:47:55:0b:
         0a:9f:2f:42:c4:7c:4a:1d:c6:b4:27:7e:eb:d4:6b:57:95:0a:
         7e:65:8c:ca:b7:5a:f6:2c:3b:7a:bc:05:b6:10:f4:66:39:4c:
         3d:fe:ca:e0:c3:e6:91:83:d4:70:84:7b:42:fa:13:72:48:be:
         bc:88:a6:29:93:98:b7:4c:3c:8e:70:a5:db:68:94:62:11:e6:
         f9:1d:4f:56:98:3e:d6:1d:6e:c4:3c:15:3a:bf:61:4c:36:c6:
         90:60:71:41:5c:6f:71:ea:ef:cf:d4:24:d7:69:80:7e:73:b7:
         45:8b:62:05:88:1d:d1:84:e0:83:91:25:36:11:b7:61:b0:3c:
         39:ec:32:71:2a:b6:21:1d:8b:1c:0d:80:00:47:68:cb:ff:50:
         89:fc:a0:34:24:07:ab:5f:4a:56:c1:51:72:2b:f2:c2:da:69:
         81:c6:d9:7d:d0:68:18:a2:bf:86:76:23:9a:1a:e5:54:e3:f8:
         39:1a:51:56:dc:dd:5c:70:75:93:e3:4d:27:48:01:08:24:21:
         d7:c3:c6:d7:05:05:70:d1:0d:c4:75:1e:45:f7:4e:b0:c7:4f:
         20:c4:45:e8:d6:f6:5f:4e:e1:f3:1b:6c:4e:7f:13:e1:cd:e5:
         70:2b:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:22 2025 by rpki-client