Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31362d3234203d3e203134373534.roa
File:                     3230312e3234372e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          2CawZsQGR0ijMaQ0WosI+2zmE8Xu/Rk4MHCiVLm2iZo=
Subject key identifier:   D9:34:04:44:7C:6C:CE:22:4A:BF:91:10:F7:35:13:3F:0E:85:44:71
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       07D38157686BE09D12C10D4AA5471087CB8B41C1
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:01:00 +0000
ROA not before:           Tue 04 Feb 2025 17:56:00 +0000
ROA not after:            Tue 03 Feb 2026 18:01:00 +0000
asID:                     14754
IP address blocks:        201.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d3:81:57:68:6b:e0:9d:12:c1:0d:4a:a5:47:10:87:cb:8b:41:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Feb  4 17:56:00 2025 GMT
            Not After : Feb  3 18:01:00 2026 GMT
        Subject: CN=D93404447C6CCE224ABF9110F735133F0E854471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:af:fd:f3:e6:42:0c:9d:40:20:d0:0d:ad:
                    49:d5:eb:32:9f:fe:2f:17:d5:1e:7f:fd:1b:80:c4:
                    ff:bf:49:55:4d:0c:e2:3e:ca:85:ca:2c:15:1f:7a:
                    6c:91:2a:ea:d7:99:8f:8c:c4:a7:d4:4a:1d:77:0b:
                    95:a0:0e:77:d0:70:40:93:d9:39:c4:02:7d:d7:4b:
                    01:df:34:87:32:96:98:12:1e:ef:ca:4f:ef:99:30:
                    db:99:5e:4d:89:ea:24:c4:26:9b:83:ff:dc:79:8a:
                    e7:3d:17:7f:8e:01:61:d3:94:72:a4:4f:c5:8c:4f:
                    d8:c4:0f:91:03:5f:98:fb:19:a1:e5:d6:08:7f:61:
                    bd:68:c9:21:93:d1:62:5c:eb:07:b2:c1:3c:69:8e:
                    2e:f6:c8:d5:88:4f:be:a2:52:8a:e5:88:6b:18:74:
                    a3:ef:81:18:72:ff:ca:d2:6e:94:ab:e7:8b:88:1b:
                    22:c5:8d:87:fa:cb:a8:50:41:50:04:eb:e6:e6:38:
                    aa:93:c7:df:55:b3:e2:32:a4:8b:74:a9:0f:f6:a7:
                    32:f4:aa:0f:6c:3a:cf:77:21:60:88:64:f4:3c:fb:
                    c6:ad:45:db:61:cb:f0:b8:8f:01:c6:e3:d7:0a:6e:
                    53:13:e8:c1:4c:23:3b:a2:c9:cf:ee:ab:cc:2d:43:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:04:44:7C:6C:CE:22:4A:BF:91:10:F7:35:13:3F:0E:85:44:71
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:b8:b8:50:a6:f9:04:d6:f9:ad:12:fb:3e:62:20:9e:54:
         7c:2c:16:5b:73:a5:b1:1d:c8:e2:ec:a4:b1:27:0a:34:51:5e:
         c2:3d:02:49:27:b8:6e:44:ac:86:e6:1c:eb:52:0a:bc:aa:c7:
         79:fb:e0:b2:73:31:b7:f8:3a:ca:9e:30:8d:65:36:0a:2b:69:
         6f:7b:6c:3d:b9:57:07:07:f4:6d:c2:0f:fe:7f:96:f4:a8:9d:
         8c:81:04:47:9a:61:cb:01:10:e7:c3:8d:fb:9b:4d:6c:f3:93:
         f1:20:83:70:2b:cd:64:19:52:4b:7c:4f:7c:94:bc:34:fb:7b:
         3a:e0:05:d9:5f:db:e5:6d:67:9e:26:9a:9f:0d:de:8e:ce:11:
         65:1a:e1:3e:ae:51:d7:aa:be:52:15:00:5c:c7:38:27:b0:25:
         e9:da:8b:71:f0:5f:c7:de:76:18:3f:d9:63:e8:12:6c:82:43:
         14:4a:36:f1:ab:1b:63:ff:57:e7:ca:d1:4d:d9:ea:b5:6f:16:
         db:43:71:a2:22:ab:cd:61:e5:9b:23:3e:af:e4:04:29:2f:ff:
         75:b9:a6:5f:21:4f:e1:0b:e9:f4:3b:0b:a0:7f:9a:76:6c:cd:
         ca:5a:70:f1:ab:78:d5:9f:3c:b3:f3:2c:87:ff:bf:a4:19:0a:
         b4:99:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:55 2025 by rpki-client