Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3230312e3135392e35362e302f32312d3234203d3e203532323535.roa
File:                     3230312e3135392e35362e302f32312d3234203d3e203532323535.roa (raw, json)
Hash identifier:          OrLVODD10AkmpgX6aAgdcLtsQLYXgJeuFdVO9klkUfc=
Subject key identifier:   A4:20:6B:57:37:E0:BA:15:A2:1A:E9:48:49:2B:18:41:49:0B:CF:D0
Certificate issuer:       /CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
Certificate serial:       55420B5792F9F053CF86092641332B5BFAFA943A
Authority key identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3230312e3135392e35362e302f32312d3234203d3e203532323535.roa
Signing time:             Tue 04 Feb 2025 17:59:22 +0000
ROA not before:           Tue 04 Feb 2025 17:54:22 +0000
ROA not after:            Tue 03 Feb 2026 17:59:22 +0000
asID:                     52255
IP address blocks:        201.159.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:42:0b:57:92:f9:f0:53:cf:86:09:26:41:33:2b:5b:fa:fa:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
        Validity
            Not Before: Feb  4 17:54:22 2025 GMT
            Not After : Feb  3 17:59:22 2026 GMT
        Subject: CN=A4206B5737E0BA15A21AE948492B1841490BCFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:7d:93:10:2a:ea:04:49:27:93:7a:a7:bf:
                    3d:5f:ed:2a:00:b8:7d:b6:6f:56:01:e4:59:e3:a7:
                    78:62:93:9f:2d:de:b3:5b:44:d2:73:6d:7b:14:91:
                    53:9b:fa:53:9a:26:5c:46:7e:52:3c:ae:c4:65:f7:
                    42:d5:6a:80:62:6b:99:a6:83:ff:2d:db:fe:4d:37:
                    fa:60:1e:c9:12:f9:e1:a3:bd:5a:51:40:e3:af:53:
                    60:86:84:5a:4f:6d:25:13:3e:5f:2b:fd:f7:8e:a1:
                    57:36:b2:a7:f8:e2:6a:8c:4c:9e:77:d6:a0:d4:3a:
                    61:90:de:72:bc:9a:a7:99:ed:30:23:56:0f:5e:af:
                    db:30:f1:56:80:76:4d:24:8e:85:fa:09:0d:0a:96:
                    11:c2:0a:ee:e0:52:b3:d9:b4:85:2f:15:5f:17:0f:
                    66:1e:b7:04:60:d2:14:12:c7:f1:cb:9c:57:c6:30:
                    08:e6:1d:a2:c2:ff:dc:e7:03:37:34:94:98:03:10:
                    be:6d:4b:99:cc:b7:6b:f4:3b:14:b6:99:e3:6c:81:
                    ab:31:c4:de:d3:ab:33:a3:8a:26:7b:83:9b:10:46:
                    ca:96:25:ee:68:40:63:d4:c4:60:cd:80:12:56:f6:
                    55:60:90:20:1f:54:18:3d:de:7f:49:45:54:5d:56:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:20:6B:57:37:E0:BA:15:A2:1A:E9:48:49:2B:18:41:49:0B:CF:D0
            X509v3 Authority Key Identifier:
                keyid:07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3230312e3135392e35362e302f32312d3234203d3e203532323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:ac:2d:08:a9:c0:39:08:cb:da:96:52:cb:cb:39:76:05:
         d3:ec:29:70:34:dd:1a:de:08:3f:f2:be:3a:1f:de:6c:da:2f:
         dd:f2:49:22:cf:df:29:87:67:09:6e:0d:1c:12:42:cf:44:d5:
         16:22:02:85:ab:6c:e2:21:c2:b1:d4:f0:da:a7:b9:1f:d2:53:
         6c:9a:f2:24:7f:6e:65:82:82:22:a9:9d:85:d0:8e:a8:2f:49:
         12:9d:7e:b4:7a:c0:2c:47:dc:c1:ae:9d:af:f1:ef:05:06:8d:
         00:67:a9:11:4b:a8:67:9c:3c:2f:59:18:c1:cf:91:e7:83:3f:
         e2:2d:3f:d6:05:d8:d5:a2:34:3c:8a:ae:f8:d9:61:b2:1a:c2:
         02:01:13:65:b5:43:1c:ed:05:b5:3e:45:c2:b8:e4:e1:ad:ab:
         8e:66:24:75:a8:d3:b9:fe:61:33:ac:cc:17:0e:09:cc:bd:f3:
         56:de:e0:1a:bb:95:33:9a:30:99:aa:16:8d:93:d3:a7:bb:6b:
         95:10:3e:f2:e8:5d:ae:f0:11:7b:36:07:8a:48:b7:ee:7c:ef:
         87:1f:33:f8:54:c6:50:3e:2e:ac:d7:15:95:02:fa:65:e2:be:
         ff:d0:40:bb:6c:f4:b8:09:0a:c0:c7:e2:70:01:b9:c8:c8:30:
         cf:6d:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:13:10 2025 by rpki-client