Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135312e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3135312e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          H7nUPvrxE+GpqH9H51oMIf7TPCgxGbVZeIV31K3d2RI=
Subject key identifier:   17:53:7A:4D:96:C1:F3:75:11:93:5D:38:44:29:8D:25:B5:61:1E:DD
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       11511399BDC6F346B64856C13B5A9FFB796B57CA
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135312e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:53:03 +0000
ROA not before:           Tue 04 Feb 2025 18:48:03 +0000
ROA not after:            Tue 03 Feb 2026 18:53:03 +0000
asID:                     269862
IP address blocks:        201.218.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:13:99:bd:c6:f3:46:b6:48:56:c1:3b:5a:9f:fb:79:6b:57:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:03 2025 GMT
            Not After : Feb  3 18:53:03 2026 GMT
        Subject: CN=17537A4D96C1F37511935D3844298D25B5611EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:d7:b9:0d:60:67:27:68:6d:c8:ee:b6:de:
                    22:95:70:83:58:e3:88:a2:1a:6a:c0:5a:5c:18:24:
                    df:2c:f4:8e:fa:68:d9:57:28:26:f3:d6:9d:c0:de:
                    f6:3c:c2:e6:d3:8b:60:1f:e7:52:1a:6a:3b:83:70:
                    0f:c9:2f:03:c3:00:ef:63:59:74:a9:7d:e5:91:9f:
                    8f:9d:fe:70:df:91:4c:87:da:7e:20:04:0d:f0:9f:
                    13:78:ef:37:8e:7f:23:72:5f:3a:6a:4d:97:07:37:
                    bc:c0:0f:43:5a:81:74:77:37:77:6a:5b:02:32:08:
                    65:09:b4:44:ef:94:1e:3d:a5:07:b8:47:cb:79:88:
                    6a:34:e0:25:56:8b:d4:aa:9d:e0:5b:26:09:9e:7e:
                    28:e2:23:f6:fe:86:50:c8:a7:a1:5b:a6:1c:82:44:
                    16:39:f9:97:8e:a8:3d:bb:02:33:f6:7d:9a:89:31:
                    3a:2e:77:5d:74:0b:07:8e:ca:b3:74:3d:f7:40:86:
                    79:6c:07:1a:41:2e:24:45:14:d2:b2:d0:a2:12:2f:
                    85:06:8a:d4:22:ae:43:6b:b8:4a:f4:48:01:14:a3:
                    a8:a5:0e:bc:97:11:13:30:5f:0d:4e:67:da:e8:6d:
                    10:65:b4:41:92:7e:19:49:6e:45:5f:0c:0a:8f:2c:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:7A:4D:96:C1:F3:75:11:93:5D:38:44:29:8D:25:B5:61:1E:DD
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135312e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:40:57:a4:d3:05:a8:f2:dd:cb:08:f8:80:6b:9c:23:34:60:
         8b:3e:f0:0c:79:40:d1:bd:73:ac:04:75:b7:35:b7:41:13:ab:
         37:b7:86:c7:a0:d7:be:5d:44:18:06:ac:fb:e7:f7:99:d9:ce:
         d3:0e:c4:af:07:2c:0a:45:cf:50:12:75:8d:df:b7:11:17:66:
         eb:2e:54:ec:e2:77:de:13:ad:94:d3:2f:1f:fb:85:f6:0b:40:
         f4:8b:34:c4:84:1a:b1:3c:74:8b:8f:1b:a9:98:df:61:81:6e:
         1d:0c:6a:cd:1c:2f:08:57:d0:35:3f:b2:53:ad:a2:fd:ec:50:
         0a:b1:34:47:f1:18:96:0d:0e:d9:dc:40:56:da:6d:e2:f1:06:
         9f:88:01:09:30:00:96:11:97:d0:b9:78:44:a7:28:61:74:87:
         db:92:c5:70:b2:0a:cf:3c:7c:02:fb:0b:c3:1a:d4:3a:48:9b:
         c4:c4:67:e2:83:13:07:15:6e:2e:ab:28:5c:95:fb:ac:27:ef:
         04:2b:42:e2:87:31:5a:64:dc:2a:16:63:af:09:a3:89:58:e1:
         ef:f2:38:9d:80:0b:26:ab:21:e6:b4:a6:ed:21:42:48:00:bc:
         37:51:31:f8:22:14:52:93:c1:29:45:b2:4d:76:9b:62:5b:8b:
         ae:43:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:34 2025 by rpki-client