Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135382e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3135382e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          QkX30tkc3mXiVKu/bOtxpqf97L8c7xSJTRGIrVI+eLA=
Subject key identifier:   7E:D4:FC:05:B9:DD:65:34:ED:CA:25:B2:42:1E:9A:53:33:B2:0F:70
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       3ED9793310AC5977ABB4FDBB27CA6DF644707B67
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135382e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:52:56 +0000
ROA not before:           Tue 04 Feb 2025 18:47:56 +0000
ROA not after:            Tue 03 Feb 2026 18:52:56 +0000
asID:                     269862
IP address blocks:        201.218.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d9:79:33:10:ac:59:77:ab:b4:fd:bb:27:ca:6d:f6:44:70:7b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:56 2025 GMT
            Not After : Feb  3 18:52:56 2026 GMT
        Subject: CN=7ED4FC05B9DD6534EDCA25B2421E9A5333B20F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:fd:43:24:b8:6d:7d:39:bf:ec:cf:99:62:
                    33:3c:27:56:34:44:9f:b2:df:64:fa:ef:82:9b:3a:
                    ff:20:36:d8:cf:d4:b8:f6:65:b1:9b:cb:6c:9f:bd:
                    8d:24:ea:d4:b0:a6:33:c7:b1:e7:65:4e:ed:a7:4a:
                    79:df:c0:02:11:af:02:f5:b8:c5:18:df:0d:27:69:
                    8b:0b:08:04:54:b0:11:00:30:c6:55:f2:4d:e1:34:
                    8f:49:b9:54:c3:8c:05:be:05:9e:73:10:03:71:e3:
                    07:f6:58:d5:28:ce:6b:e4:7d:23:61:4e:58:97:a0:
                    85:75:97:01:8e:96:21:08:1d:9a:b9:84:5e:c2:c3:
                    79:6c:a7:b1:0b:a0:96:7b:06:86:2c:ad:1f:10:ee:
                    bf:f3:0c:f6:6f:6f:7a:fc:d4:54:e6:18:a8:c3:2d:
                    7b:28:1d:ea:9c:91:a4:a2:99:16:6c:af:0e:7b:7a:
                    35:27:d7:9c:71:28:0b:4a:04:30:aa:c0:83:04:9b:
                    de:f5:7b:5f:3d:5a:4e:e5:8c:a3:ab:88:90:f9:72:
                    4b:f6:cf:83:18:b0:da:9f:3b:a3:69:f0:e3:ab:5d:
                    6e:b4:3f:45:8c:a8:d4:4c:84:a9:16:8a:37:ab:47:
                    a8:f7:0b:00:65:b2:d1:d6:84:05:12:dc:d1:52:04:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D4:FC:05:B9:DD:65:34:ED:CA:25:B2:42:1E:9A:53:33:B2:0F:70
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135382e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:84:8b:91:61:55:ed:9a:34:5a:a0:3b:20:91:16:17:f5:
         62:82:ac:19:73:6a:f8:db:18:20:fe:c3:e6:df:31:8a:ac:0b:
         0d:cc:24:d4:3f:86:2a:b7:fe:c6:13:36:b7:d0:4f:1c:2e:6e:
         7b:e5:ec:07:f0:08:5d:8a:b9:8c:87:3d:6f:73:7b:4d:43:22:
         d7:6f:a9:a0:5a:72:fe:0d:5d:b6:3f:2d:03:92:3f:61:94:aa:
         63:ef:b2:2d:1f:c7:49:5f:b9:d3:1f:3d:61:0f:48:2b:03:21:
         73:97:81:31:30:8e:4f:e2:1e:5e:a4:10:75:d8:29:d2:b6:41:
         b2:18:b5:40:02:6c:56:88:26:f5:a6:90:48:54:56:6d:e7:13:
         57:63:33:13:7c:65:6d:ed:c1:bc:35:3f:52:c4:7c:41:25:51:
         62:3f:cd:eb:57:d1:29:eb:19:b1:e5:67:ba:e8:64:e5:0b:f4:
         d5:2e:e6:94:3b:8f:0a:47:c4:45:d4:a0:48:f3:fa:ba:8e:e1:
         95:7f:30:6d:3a:d9:a2:ef:3e:af:c6:32:27:2f:f8:aa:91:ec:
         dc:d1:f5:42:76:c1:1c:4e:b7:a6:f1:79:f8:95:b0:53:13:06:
         37:e5:8b:90:ac:f3:19:4d:7e:fd:a2:5f:dc:e2:71:95:6d:3c:
         e4:11:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:03 2025 by rpki-client