Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135332e302f32342d3234203d3e20323732383438.roa
File:                     3230312e3231382e3135332e302f32342d3234203d3e20323732383438.roa (raw, json)
Hash identifier:          xJnRJqa4rJ6NajR71kJvU3ZUBWB8jS2rIEzVVxg1wOA=
Subject key identifier:   87:C0:8B:A4:94:4D:D9:FA:6A:13:71:A4:51:C9:7A:09:F5:62:91:71
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       21602534E6E7ADC75BB0398C9CB4F7C25A2B3B9A
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135332e302f32342d3234203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:52:56 +0000
ROA not before:           Tue 04 Feb 2025 18:47:56 +0000
ROA not after:            Tue 03 Feb 2026 18:52:56 +0000
asID:                     272848
IP address blocks:        201.218.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:60:25:34:e6:e7:ad:c7:5b:b0:39:8c:9c:b4:f7:c2:5a:2b:3b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:56 2025 GMT
            Not After : Feb  3 18:52:56 2026 GMT
        Subject: CN=87C08BA4944DD9FA6A1371A451C97A09F5629171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:ab:96:39:49:a5:3a:c3:03:71:0a:7a:60:
                    2d:58:8d:23:ce:f5:da:b5:5f:90:ea:0a:d1:28:e8:
                    7f:e9:09:6c:1b:cf:da:67:4a:e0:eb:70:24:fc:ef:
                    18:4b:99:99:69:a9:3b:3e:ed:7a:c9:d9:67:b1:dd:
                    b8:ce:d1:a1:68:e1:de:b8:3b:7a:a3:3c:8e:9d:70:
                    98:83:65:2e:f7:c1:3f:81:a7:4e:8c:15:75:81:bd:
                    e8:01:b7:e2:6b:d6:98:ac:e2:0f:d6:37:c6:bc:45:
                    f2:51:b5:52:20:5f:18:4e:33:a0:29:7f:69:e2:a0:
                    ea:97:da:3c:7b:55:c3:73:a8:9c:ee:22:88:fe:d3:
                    8c:d7:9e:88:21:5f:de:88:43:b2:e5:69:ee:d4:ad:
                    4f:76:5a:c7:b1:dc:78:49:ab:16:74:4a:40:ff:2b:
                    8a:d3:5c:ad:7d:4c:c7:d3:35:8b:c9:71:7b:26:d9:
                    a8:77:cf:60:8d:0f:e1:4b:20:b0:ca:ad:19:64:f0:
                    f2:c5:fa:5f:55:44:f9:44:1f:b5:fa:21:65:b7:2e:
                    ee:50:25:df:c0:10:cc:0a:b0:52:e7:42:0c:04:80:
                    99:b9:f6:a9:bd:13:95:c6:a7:e0:16:75:67:a4:81:
                    19:5f:8c:9b:b5:c4:a0:f0:c7:c6:5e:ef:63:87:39:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C0:8B:A4:94:4D:D9:FA:6A:13:71:A4:51:C9:7A:09:F5:62:91:71
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135332e302f32342d3234203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:25:1b:28:1b:77:7b:a8:13:04:e3:07:c2:ba:1c:d1:71:05:
         84:b7:11:5d:1c:fc:25:b6:dd:c7:69:b2:08:8a:34:41:0c:42:
         20:9b:ea:e3:6e:76:b4:99:4c:03:c4:27:63:c0:e0:9a:70:05:
         ca:d6:a8:11:ac:93:f5:8e:3c:6a:b9:4d:da:9d:70:dc:ce:8c:
         c6:3a:23:3f:7f:ab:6f:e8:70:07:19:54:1c:84:b5:84:51:9a:
         02:fd:09:d5:24:a2:c7:33:ee:4e:b3:d3:e6:ed:e4:4b:56:71:
         85:5c:be:55:c2:43:45:5a:6f:8e:9a:1f:a3:1a:5e:a5:0f:88:
         2d:eb:94:d1:75:54:4e:55:c4:e9:1b:21:d3:b1:d6:04:21:f0:
         85:34:71:bf:ef:29:28:c4:c4:80:0a:b4:ed:44:21:d7:2c:eb:
         e3:bd:60:a0:81:ab:ef:1f:33:e3:5d:31:91:1a:18:7f:05:f0:
         4e:15:44:61:4d:b9:73:fa:c2:f5:53:14:36:38:ee:1b:02:cd:
         0c:df:36:a8:b3:f4:fe:b8:48:1e:e5:a6:86:96:8c:19:df:9d:
         f7:5c:57:d9:8c:f1:22:e6:30:a1:97:87:02:c7:da:7b:35:95:
         09:c2:c8:60:94:7b:5d:a3:1b:2b:e1:4d:3e:a5:00:9e:bb:b4:
         1e:8e:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:29:47 2025 by rpki-client