Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133392e302f32342d3234203d3e20323732383438.roa
File:                     3230312e3231382e3133392e302f32342d3234203d3e20323732383438.roa (raw, json)
Hash identifier:          IpBV+Op8Um+mSVYR+2nw2wvNSKuLLYOlJ8sbwSdyjJU=
Subject key identifier:   A3:B7:07:E2:F2:83:39:1E:65:BF:15:2F:CF:88:DC:34:5E:4D:30:40
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       47E23D6C622995A5FD37ADDEC561EAC4981C5D4D
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133392e302f32342d3234203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:52:58 +0000
ROA not before:           Tue 04 Feb 2025 18:47:58 +0000
ROA not after:            Tue 03 Feb 2026 18:52:58 +0000
asID:                     272848
IP address blocks:        201.218.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e2:3d:6c:62:29:95:a5:fd:37:ad:de:c5:61:ea:c4:98:1c:5d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:58 2025 GMT
            Not After : Feb  3 18:52:58 2026 GMT
        Subject: CN=A3B707E2F283391E65BF152FCF88DC345E4D3040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:33:80:25:a9:f2:c4:20:84:da:75:c3:81:
                    97:a4:7f:2d:c8:77:ac:64:bf:a6:e5:03:fd:61:3c:
                    e4:d3:80:63:ba:f4:73:d7:ce:67:82:0c:46:b5:e1:
                    8e:1d:48:d0:50:ba:48:fa:fe:81:15:f1:8c:33:01:
                    92:a0:cf:4f:e0:b9:59:81:97:45:32:3d:10:a1:8c:
                    0c:06:2c:1e:d9:e7:c8:7d:f4:ef:73:15:34:b3:d9:
                    8d:03:b1:46:d4:56:b4:cb:fe:38:13:d4:e0:de:30:
                    2c:9d:22:14:22:e1:92:6d:09:c7:8b:11:a4:de:dd:
                    10:28:fc:0b:02:59:5b:7d:d2:1b:2a:9a:af:c6:70:
                    9b:90:79:0a:88:b3:0b:98:a8:24:a8:54:64:d4:58:
                    b1:0a:99:55:22:69:b3:50:32:d1:c4:7b:5c:23:18:
                    c1:1d:bb:9f:74:67:fd:28:05:ef:60:82:5a:75:09:
                    cd:90:a3:89:0e:bd:b4:1e:d2:97:bf:32:f5:81:17:
                    3a:87:f9:96:73:00:b3:7b:c0:2f:8b:48:65:e9:80:
                    1d:79:7b:ab:4d:6c:42:bb:e2:4c:0f:7f:3a:cb:69:
                    3e:a9:7a:19:10:61:e4:20:e3:23:f4:b3:9c:51:64:
                    28:63:47:46:5b:51:83:d0:8e:ec:76:dc:05:f6:e1:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:07:E2:F2:83:39:1E:65:BF:15:2F:CF:88:DC:34:5E:4D:30:40
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133392e302f32342d3234203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:cd:ee:57:ae:bc:02:99:07:c3:7b:48:d5:43:75:54:71:7a:
         1e:da:91:47:92:f6:47:03:5f:53:12:4c:29:4a:54:09:4c:fd:
         c3:b2:c6:8c:48:c8:84:ed:66:ee:d7:3a:e7:3b:f7:8a:6e:c5:
         3b:71:5c:7f:35:d1:ea:f2:7a:76:35:5f:96:cf:84:da:74:b5:
         80:99:62:b9:0a:70:69:c9:8b:e5:72:fb:c2:a4:dd:23:1b:78:
         a9:cb:dc:7c:27:78:25:76:36:17:b7:1d:50:05:ef:36:42:38:
         9d:77:0d:0f:9c:df:16:c5:05:c9:fa:26:78:6d:7b:2c:99:83:
         97:1f:ec:fd:a8:55:24:5d:99:8e:6d:b8:82:d7:4d:e8:bb:1c:
         83:b0:ec:6a:20:8b:06:f1:b3:57:e5:b9:d9:fe:a6:49:f3:e7:
         e0:c5:0a:8b:ac:35:ca:5c:8c:c2:96:c3:43:a0:34:b4:ed:25:
         80:ee:cc:1d:fa:df:3b:7b:e7:27:a5:4a:62:79:e9:96:03:31:
         ba:b1:16:54:1d:96:cd:fb:35:66:3f:5f:dc:0d:35:cc:15:51:
         05:19:6b:48:23:6d:27:31:99:92:0c:cd:18:ed:ad:ce:13:2b:
         73:9e:7d:7d:48:02:b4:7a:b3:61:d8:37:f2:73:0c:eb:cf:45:
         d7:0c:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:11:40 2025 by rpki-client