Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F5EF5CAC748FDDCCA7D515EAA8FB6439EC306ED29CF8D985C23C1256CE66683/0/3230312e3133312e36362e302f32342d3234203d3e203631353133.roa
File:                     3230312e3133312e36362e302f32342d3234203d3e203631353133.roa (raw, json)
Hash identifier:          SerweHy41AqErm1zxGPwPEZOHqlZ7TgUUNgEyvhjyJY=
Subject key identifier:   68:BF:CC:9E:20:4F:95:79:CB:39:9F:03:23:86:E5:A8:B3:51:97:35
Certificate issuer:       /CN=D4E6FCBA7B73F2CA1F7068363B095ED206B19F13
Certificate serial:       136AFDCEE77EA7A6E6325FC8E57CEEE47179098C
Authority key identifier: D4:E6:FC:BA:7B:73:F2:CA:1F:70:68:36:3B:09:5E:D2:06:B1:9F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4E6FCBA7B73F2CA1F7068363B095ED206B19F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F5EF5CAC748FDDCCA7D515EAA8FB6439EC306ED29CF8D985C23C1256CE66683/0/3230312e3133312e36362e302f32342d3234203d3e203631353133.roa
Signing time:             Tue 04 Feb 2025 18:23:25 +0000
ROA not before:           Tue 04 Feb 2025 18:18:25 +0000
ROA not after:            Tue 03 Feb 2026 18:23:25 +0000
asID:                     61513
IP address blocks:        201.131.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6F5EF5CAC748FDDCCA7D515EAA8FB6439EC306ED29CF8D985C23C1256CE66683/0/D4E6FCBA7B73F2CA1F7068363B095ED206B19F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6F5EF5CAC748FDDCCA7D515EAA8FB6439EC306ED29CF8D985C23C1256CE66683/0/D4E6FCBA7B73F2CA1F7068363B095ED206B19F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4E6FCBA7B73F2CA1F7068363B095ED206B19F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6a:fd:ce:e7:7e:a7:a6:e6:32:5f:c8:e5:7c:ee:e4:71:79:09:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E6FCBA7B73F2CA1F7068363B095ED206B19F13
        Validity
            Not Before: Feb  4 18:18:25 2025 GMT
            Not After : Feb  3 18:23:25 2026 GMT
        Subject: CN=68BFCC9E204F9579CB399F032386E5A8B3519735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:59:55:7f:3f:5f:eb:f7:0f:d3:a9:94:45:
                    11:29:17:94:2e:2d:05:69:b2:97:b6:97:b7:ef:76:
                    ea:a3:69:6a:82:35:b0:87:c4:36:18:58:29:f6:d5:
                    ed:1f:46:3a:dd:00:f2:b9:65:9d:c8:6b:37:a1:de:
                    ca:02:61:2c:f9:19:5d:c5:b3:b6:6e:ec:d3:ca:32:
                    19:7e:00:1c:09:d5:75:cb:65:f5:29:50:39:6f:79:
                    8e:f7:ad:41:61:db:4f:b5:d0:a8:15:1f:1f:b6:22:
                    9f:bf:70:5f:01:70:73:dd:c6:64:dd:b5:71:46:8e:
                    d3:d1:51:5f:27:ed:54:9a:f3:30:74:df:54:54:37:
                    f9:be:66:0f:c5:d1:19:72:0f:3a:72:a0:05:2e:35:
                    36:9d:cf:76:a0:2d:6f:9f:23:12:6a:15:ea:1d:59:
                    98:7a:4e:5d:ac:9d:e6:5a:16:ff:9e:3e:a5:cd:5c:
                    ab:25:86:c6:0b:b0:42:70:92:57:2e:ec:03:60:f7:
                    2d:6a:da:ba:95:68:d0:ff:10:49:37:94:31:99:76:
                    8f:32:b0:50:f7:94:0f:c0:99:3c:54:d8:aa:ee:6a:
                    a3:50:e3:29:53:f6:6a:04:ce:47:e0:f6:61:74:e9:
                    20:73:ec:54:5a:bd:71:6c:0e:55:0b:81:fe:b2:ff:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:CC:9E:20:4F:95:79:CB:39:9F:03:23:86:E5:A8:B3:51:97:35
            X509v3 Authority Key Identifier:
                keyid:D4:E6:FC:BA:7B:73:F2:CA:1F:70:68:36:3B:09:5E:D2:06:B1:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F5EF5CAC748FDDCCA7D515EAA8FB6439EC306ED29CF8D985C23C1256CE66683/0/D4E6FCBA7B73F2CA1F7068363B095ED206B19F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4E6FCBA7B73F2CA1F7068363B095ED206B19F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F5EF5CAC748FDDCCA7D515EAA8FB6439EC306ED29CF8D985C23C1256CE66683/0/3230312e3133312e36362e302f32342d3234203d3e203631353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:e7:8f:5f:29:ca:29:c6:03:ce:58:1f:9f:36:f8:85:de:
         0e:e0:28:e7:66:34:ab:64:a4:c2:b1:43:79:9d:88:09:ad:e0:
         f6:9a:df:fa:b2:2f:a2:5a:b1:ec:52:29:81:2d:f9:a7:42:38:
         2a:b7:86:ec:b1:2f:3e:b2:7f:44:e4:3b:6e:67:db:fd:79:23:
         1f:48:e8:51:14:75:ba:dd:e6:3a:2b:97:fc:28:ce:c3:ea:18:
         c2:d0:af:66:15:75:bd:f0:ed:a2:b8:00:cd:37:3e:13:65:3f:
         1d:60:df:e4:4c:da:88:ac:e7:92:d0:80:e3:cd:f8:19:5a:84:
         b2:73:03:b0:6b:17:62:74:50:4d:83:84:c6:e8:04:16:4f:cd:
         c8:6d:fb:41:11:d6:02:32:9f:cd:c9:09:18:46:7c:35:44:15:
         5f:87:59:53:bf:14:19:2c:ae:08:6d:44:87:9b:e0:8a:9b:df:
         0a:f7:3f:d7:04:33:83:a2:7f:ff:e5:4f:d8:be:10:56:ff:e0:
         f3:b7:49:b2:e3:a1:da:46:d5:bd:a7:5c:f6:1f:4d:bc:a0:29:
         c4:b7:87:e2:cb:f8:f5:a6:44:20:56:17:70:b2:6e:13:ac:b7:
         ca:bb:8c:c6:8b:26:d1:a6:bc:0f:a7:ec:b4:12:8f:6d:93:c6:
         39:7b:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:54 2025 by rpki-client