Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa
File:                     3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa (raw, json)
Hash identifier:          /Jw76iT3+Nju75FmgAJqc5aJ4MZiNrd9U/MuV5Y1TOk=
Subject key identifier:   C6:2C:60:8F:54:79:92:73:F9:79:27:CE:55:BF:54:A5:22:4A:00:EC
Certificate issuer:       /CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452
Certificate serial:       410DEDF34BC0F496ED831C00C280FD46E3EDE21E
Authority key identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa
Signing time:             Thu 20 Feb 2025 22:25:00 +0000
ROA not before:           Thu 20 Feb 2025 22:20:00 +0000
ROA not after:            Thu 19 Feb 2026 22:25:00 +0000
asID:                     274033
IP address blocks:        205.159.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0d:ed:f3:4b:c0:f4:96:ed:83:1c:00:c2:80:fd:46:e3:ed:e2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452
        Validity
            Not Before: Feb 20 22:20:00 2025 GMT
            Not After : Feb 19 22:25:00 2026 GMT
        Subject: CN=C62C608F54799273F97927CE55BF54A5224A00EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:ba:7b:b2:f6:fe:09:29:25:53:67:ad:26:
                    1c:0d:b0:39:69:db:f5:c2:b5:e2:fc:af:ed:05:e7:
                    6d:12:17:d7:7a:d7:a4:e8:2f:06:74:6c:1a:30:5f:
                    7a:01:44:90:b8:2a:4a:2e:07:a0:88:4d:7c:65:55:
                    26:8e:b4:a3:be:15:cd:b6:0f:f6:e0:4e:8a:b5:2e:
                    e2:42:d6:b7:b3:fa:a3:8b:82:0d:13:5e:81:06:be:
                    9e:2f:a8:11:2e:be:25:10:c0:1a:cc:41:cf:7d:ff:
                    00:19:d4:df:4a:25:5d:46:76:16:6e:25:6f:f5:01:
                    e3:27:f0:36:b4:cf:22:4d:b9:af:a3:ec:e2:57:39:
                    17:51:8a:1d:c2:49:93:bc:0d:43:89:9a:59:23:d0:
                    fb:f9:ca:80:f6:4e:7f:7a:cc:45:4a:36:4f:46:ee:
                    a8:35:3c:5c:61:ca:bc:b9:3d:2e:99:e5:c5:a0:91:
                    dd:42:a2:e3:1b:6a:83:95:ad:6c:b6:bd:55:4f:09:
                    96:bb:28:d4:51:e5:07:e4:91:14:bc:ca:79:b1:2e:
                    e8:c6:e8:dd:60:89:ac:3d:23:80:59:64:9a:4c:93:
                    e7:0e:cb:f6:b6:20:94:0e:c4:dc:7e:29:3a:bb:fa:
                    b9:db:84:fc:e2:59:2d:e4:79:33:39:a3:bd:4f:b5:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:60:8F:54:79:92:73:F9:79:27:CE:55:BF:54:A5:22:4A:00:EC
            X509v3 Authority Key Identifier:
                keyid:5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.159.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:ee:ea:4c:6a:d5:6c:c3:e5:70:02:84:dc:f9:b0:d6:6b:
         5b:ed:75:f1:22:98:c9:71:c0:0b:e3:c0:ee:d7:f3:1a:81:d4:
         b5:5d:ff:b7:f9:23:80:9a:e0:46:33:e3:5b:97:0e:da:98:24:
         76:f8:56:88:28:e4:9a:b1:a8:f4:cb:b4:fa:41:ff:a1:b6:a0:
         34:e3:49:6f:fd:f4:c7:1e:c6:3e:38:2e:be:4a:82:a8:fb:df:
         23:35:8b:62:16:43:89:0a:8f:41:99:ed:7c:b0:f9:b1:ee:f5:
         d3:84:30:7b:4d:4b:d8:6c:99:2e:f3:b8:9a:8b:4b:41:11:70:
         d2:d1:f7:ce:9a:e6:7c:40:f1:ba:ae:37:ec:62:ed:5a:6c:79:
         74:36:67:e6:b0:eb:20:28:49:13:56:74:92:9d:0a:f4:a3:15:
         6b:f9:b3:f0:60:13:9d:8a:8c:e5:81:cc:72:2c:6e:b2:17:c8:
         bb:96:1d:52:a7:53:b6:d9:b2:52:f0:bb:f1:9c:87:fb:e6:9f:
         c5:a2:91:dc:22:a4:99:65:7c:79:5f:74:c5:ed:9b:be:0f:5e:
         3a:68:88:18:5c:dc:61:8b:c3:74:69:d8:22:4f:7f:ee:c6:8c:
         9d:ec:c8:ba:8e:bb:4d:ac:2c:4c:76:b3:2b:29:1a:02:fc:ee:
         cd:82:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:06:46 2025 by rpki-client