Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133372e302f32342d3234203d3e20323732383438.roa
File:                     3230312e3231382e3133372e302f32342d3234203d3e20323732383438.roa (raw, json)
Hash identifier:          +AoBs+dVnR7QK2TAdlQKdhNkBV9St7x1Gflx3x2V+uE=
Subject key identifier:   D9:CE:F1:F1:48:E3:B5:DA:79:0D:6A:A9:A5:83:7E:58:3F:8C:8A:29
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       54C8198B40E8C7DF24C508E6D2806112465F31C7
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133372e302f32342d3234203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:52:55 +0000
ROA not before:           Tue 04 Feb 2025 18:47:55 +0000
ROA not after:            Tue 03 Feb 2026 18:52:55 +0000
asID:                     272848
IP address blocks:        201.218.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c8:19:8b:40:e8:c7:df:24:c5:08:e6:d2:80:61:12:46:5f:31:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:55 2025 GMT
            Not After : Feb  3 18:52:55 2026 GMT
        Subject: CN=D9CEF1F148E3B5DA790D6AA9A5837E583F8C8A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:49:5d:9e:49:69:24:71:b7:72:6f:08:ef:
                    e1:79:88:18:67:b0:c4:ad:3f:6b:dc:3c:22:d3:b6:
                    ea:e4:94:2f:e7:61:8e:5a:58:91:c0:5d:b4:0f:b5:
                    0e:2a:f4:49:f3:32:e1:dc:11:a0:ce:ff:68:90:62:
                    67:3c:d9:41:78:e8:de:57:9f:79:be:77:32:49:70:
                    21:4a:f2:7c:90:1d:79:09:dd:68:3d:8e:a2:c6:20:
                    a5:ea:c5:ac:bf:39:ac:64:88:7f:84:9d:cf:2c:fc:
                    5b:36:3d:69:ee:3c:5e:7b:15:1b:b1:0d:c6:06:37:
                    13:93:67:84:1b:2a:1c:f6:d8:a9:45:e3:88:d8:c2:
                    67:a5:1d:6a:2c:06:69:5e:8e:c2:3a:76:49:f0:b3:
                    ba:1b:51:9b:d9:8f:2a:5e:5a:92:4c:92:26:90:de:
                    4e:16:ed:b1:28:d9:2f:c1:42:68:2a:3b:3e:5c:c8:
                    ec:5f:fa:f5:aa:d6:02:88:63:bc:42:fe:82:4e:b6:
                    a1:17:5c:1e:c1:07:2c:2b:da:fb:e4:74:77:54:ee:
                    64:96:10:1b:bb:61:cf:f6:45:d0:46:a5:bc:1d:c7:
                    23:e5:6a:01:35:2d:9f:fa:62:99:ed:9c:91:76:34:
                    f1:a9:08:0e:2b:d9:01:9a:31:80:c1:20:29:0a:83:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CE:F1:F1:48:E3:B5:DA:79:0D:6A:A9:A5:83:7E:58:3F:8C:8A:29
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133372e302f32342d3234203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:ab:67:a1:b6:0d:d8:ad:dd:21:53:2d:ad:d5:bd:00:57:
         c5:86:f3:9f:9a:40:1c:7e:68:6e:bb:b4:54:27:18:1a:a5:82:
         36:f0:26:55:dc:03:d2:dc:f5:38:1a:d6:42:18:79:2a:22:5c:
         d6:2e:7d:b4:cf:9c:10:d3:83:1e:d3:85:71:b7:26:70:03:3b:
         d2:6b:9c:b8:a1:44:a5:a2:47:3f:4b:22:d4:5d:00:4e:b1:3e:
         6d:c2:51:b1:5c:9a:1d:cd:d8:27:e4:fd:04:3a:6e:03:c7:02:
         e1:c4:07:a9:0f:b4:6f:0d:05:dd:2b:66:ea:8d:ad:dc:b2:f8:
         d0:21:de:de:9b:1c:8a:0e:d1:a0:2c:06:44:5c:05:06:9f:b4:
         0e:09:d8:85:fc:70:a4:80:62:02:e1:7f:ee:33:ff:88:28:47:
         30:50:a6:06:f6:41:5c:33:0e:ad:fb:a0:7c:9a:2c:58:02:3f:
         97:8d:23:31:44:73:ed:c9:b7:52:25:32:86:6e:00:cd:1c:7f:
         d2:9b:c2:09:c4:5f:c1:0f:99:89:de:b4:9d:46:5b:8a:e4:05:
         46:cd:0d:20:86:ad:af:b0:3a:d4:76:d0:2d:bd:f8:dc:2a:3d:
         96:f2:77:66:80:79:c1:f0:47:cc:d3:b1:e9:ad:91:7a:6a:de:
         96:a5:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:57 2025 by rpki-client