Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133362e302f32342d3234203d3e203532343339.roa
File:                     3230312e3231382e3133362e302f32342d3234203d3e203532343339.roa (raw, json)
Hash identifier:          6hTFSeilwek1jYIunsUWldvpsliy8941Q6hm6N3CWfg=
Subject key identifier:   9E:D0:3A:38:03:CB:EA:8E:4D:EC:A8:F3:38:9A:F5:D1:02:21:2F:2E
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       6DB3095CD2DF0C3A5900CADC840B5B1616A4504A
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133362e302f32342d3234203d3e203532343339.roa
Signing time:             Tue 04 Feb 2025 18:53:05 +0000
ROA not before:           Tue 04 Feb 2025 18:48:05 +0000
ROA not after:            Tue 03 Feb 2026 18:53:05 +0000
asID:                     52439
IP address blocks:        201.218.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b3:09:5c:d2:df:0c:3a:59:00:ca:dc:84:0b:5b:16:16:a4:50:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:05 2025 GMT
            Not After : Feb  3 18:53:05 2026 GMT
        Subject: CN=9ED03A3803CBEA8E4DECA8F3389AF5D102212F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:b7:31:a3:e7:57:7c:88:4f:17:c2:8f:fe:
                    b2:58:46:94:13:41:b1:5f:92:49:2b:2d:03:07:bb:
                    fc:ec:5a:9c:52:8e:be:3e:05:7f:44:19:d5:92:a2:
                    60:c8:67:99:ec:52:e7:d8:04:f9:42:82:c5:82:b5:
                    ab:ad:97:a5:6d:18:33:1a:cc:dc:f9:3d:fa:db:57:
                    ce:08:ab:26:2c:4c:6d:d2:f9:56:00:d0:cb:8c:41:
                    d1:aa:04:fe:ed:14:9b:a1:cb:84:08:6c:bd:ac:a3:
                    49:72:3e:d0:6a:8c:6d:06:d3:49:2e:bb:af:b1:52:
                    91:1b:22:77:71:19:81:22:7b:18:38:24:20:e8:da:
                    dd:7b:ec:71:fc:f2:ef:c3:c2:13:33:1f:4e:60:11:
                    6b:fb:8f:5c:cc:ad:6d:5f:dd:49:47:1b:28:aa:e7:
                    90:61:ab:2b:57:60:4c:d2:3a:62:c5:29:74:24:72:
                    8c:01:ee:cb:ac:be:f0:46:a4:9a:ff:0d:e7:9c:6b:
                    27:21:59:16:cb:0d:a0:72:60:20:18:79:50:ca:c7:
                    58:e3:0c:48:71:77:b1:16:be:7f:c9:a8:aa:09:af:
                    2f:56:3f:45:1d:4d:48:d8:e8:9f:ec:ed:eb:b3:17:
                    9b:2a:8f:0c:a7:78:aa:f7:60:64:dd:91:69:86:d8:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D0:3A:38:03:CB:EA:8E:4D:EC:A8:F3:38:9A:F5:D1:02:21:2F:2E
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133362e302f32342d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:cd:c7:5e:41:95:04:94:95:c5:8d:6a:4e:6b:8f:5f:ba:
         db:1d:07:1e:6c:9e:8c:a7:a6:98:f6:09:07:5c:a7:ff:a9:08:
         41:c6:04:26:36:eb:09:7a:c8:54:70:ca:f6:c2:c4:a8:6c:62:
         cd:5c:aa:14:f6:60:82:d0:b6:af:c6:2f:f0:65:8a:06:41:d8:
         15:9e:2a:b2:db:d1:07:c9:71:3f:62:d7:5d:9d:6c:5f:8e:cb:
         63:d0:0d:c4:05:36:7f:2c:15:26:e8:26:8b:31:ba:c0:fd:55:
         1f:96:aa:fc:6a:93:8f:f4:7a:00:cc:7d:f9:18:41:5b:39:33:
         b3:c8:38:36:6e:76:49:9a:15:a9:71:31:0c:9a:88:aa:de:be:
         d3:32:c2:1c:c1:c7:70:81:0d:a0:2c:d5:3a:5c:b2:9f:b0:7b:
         8e:1d:a8:ef:bd:34:8b:0e:2b:75:ce:66:1f:85:99:46:90:1b:
         b8:a4:27:5e:d0:8c:f0:d4:2d:d4:6c:bf:c3:12:ed:28:c8:f9:
         83:6c:75:40:6d:9e:eb:c2:0a:bb:10:45:9c:e0:77:44:bb:e6:
         bb:44:3e:99:19:1c:48:9a:41:eb:0f:9c:3e:ef:af:d7:2e:ea:
         31:95:f4:62:b1:dd:17:a8:6a:f2:21:63:2a:7d:88:b7:ef:6f:
         c8:5a:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:47 2025 by rpki-client