Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38302e302f32322d3234203d3e203237373839.roa
File:                     3230312e3232312e38302e302f32322d3234203d3e203237373839.roa (raw, json)
Hash identifier:          livELvqNwkKcT4swgRlJcdlgT5MopT5hOcm5RakIs1k=
Subject key identifier:   00:35:99:62:A3:85:3D:40:93:0E:7C:DF:5A:D0:A1:35:11:A8:61:8E
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       174B40215D6BA26D838F731A98C5838E6FD7A2FE
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38302e302f32322d3234203d3e203237373839.roa
Signing time:             Tue 04 Feb 2025 20:08:32 +0000
ROA not before:           Tue 04 Feb 2025 20:03:32 +0000
ROA not after:            Tue 03 Feb 2026 20:08:32 +0000
asID:                     27789
IP address blocks:        201.221.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4b:40:21:5d:6b:a2:6d:83:8f:73:1a:98:c5:83:8e:6f:d7:a2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:32 2025 GMT
            Not After : Feb  3 20:08:32 2026 GMT
        Subject: CN=00359962A3853D40930E7CDF5AD0A13511A8618E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:48:32:ab:d3:bc:d1:9d:f5:08:c2:b0:7b:
                    b2:6b:81:34:ad:ed:b9:36:ed:19:cd:b9:57:89:63:
                    e4:fb:25:ce:27:1a:2e:85:68:dd:cb:1c:66:6f:6d:
                    5c:2e:51:09:b7:8f:29:dd:7a:92:7c:25:40:22:e1:
                    99:2e:1d:58:2f:47:1b:69:98:fc:1b:e0:d2:a1:75:
                    2f:18:82:a6:cb:a5:6b:c1:6d:4f:7c:69:24:be:a6:
                    5c:83:9a:cd:94:94:dd:20:ae:e5:0f:47:bf:72:00:
                    71:90:c2:17:18:43:58:cb:62:2d:88:af:62:e7:35:
                    83:1f:9c:06:f6:d2:6f:a4:b1:a4:b6:f5:cb:41:e8:
                    66:84:69:47:eb:35:38:ff:41:bf:fd:97:4e:63:d1:
                    d6:c6:38:93:ba:f3:ac:6a:55:2c:af:c3:eb:be:aa:
                    77:ec:46:e2:40:c6:8b:4a:a2:fc:f1:6c:de:08:f9:
                    9c:59:fe:7c:10:1c:7c:42:b8:82:76:c9:ba:26:fc:
                    e1:bc:c9:b1:75:15:94:4d:01:e9:6d:d5:25:31:4b:
                    19:4f:4c:b1:b7:ff:67:21:17:e3:22:a4:0f:29:e6:
                    fd:42:1d:9b:99:c2:63:1b:f8:1f:5a:56:9f:de:37:
                    de:d9:b3:f6:49:14:6d:78:18:4a:b7:0f:96:61:e3:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:99:62:A3:85:3D:40:93:0E:7C:DF:5A:D0:A1:35:11:A8:61:8E
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38302e302f32322d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:3a:ad:6c:ec:28:ee:e3:49:08:88:c6:da:e5:af:07:d2:
         e9:ba:34:7b:a2:1e:b6:d2:35:b1:80:82:01:12:66:c1:f1:0d:
         7a:d6:24:72:64:98:6c:24:cf:96:c8:34:b4:4c:c8:0d:a5:28:
         79:fb:35:40:e0:08:27:75:8a:ea:30:4e:2e:df:37:1d:1e:8d:
         e3:93:2d:f2:43:90:02:54:47:e8:7c:64:b9:e6:0c:cd:46:f8:
         2a:11:8a:9c:5a:d2:6f:29:06:0b:67:0d:3e:bc:be:8c:48:93:
         cc:d0:80:50:3c:cc:9a:43:d6:0c:50:81:61:b6:4c:23:8b:55:
         26:a2:fd:28:1e:f2:17:bd:fd:31:cc:cf:ea:4c:7f:a6:67:b9:
         98:c8:bc:85:0b:4a:49:59:cc:ed:c0:c4:15:79:e4:e9:7b:16:
         77:fc:51:fd:34:83:4a:7d:af:00:b3:ce:f5:14:81:af:f6:76:
         f9:ef:9c:0f:66:5d:0c:ed:f8:6f:13:b7:c2:03:f3:df:9f:a2:
         1c:86:a9:28:46:dc:0c:bc:d2:18:6e:70:bc:23:59:7a:0b:f0:
         d6:fe:11:04:43:bb:7b:8c:91:cf:c1:59:5c:46:92:3b:2d:ea:
         58:c3:0d:53:9b:d4:7c:db:4c:0c:d9:63:fe:8f:b5:b6:6e:22:
         65:a9:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:16 2025 by rpki-client