Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f31392d3234203d3e203134323332.roa
File:                     3230312e3231392e36342e302f31392d3234203d3e203134323332.roa (raw, json)
Hash identifier:          yVoRzVEZqCa0H6egP/RnDoZ1IZO1lHlDWtcE8MC8qYA=
Subject key identifier:   B9:D4:04:71:33:17:0F:41:95:BE:F6:74:2E:21:8C:20:83:A8:C9:5C
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       15D76E75B6F9FF4B1A03A99C359FA37ED04E74B1
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f31392d3234203d3e203134323332.roa
Signing time:             Tue 04 Feb 2025 18:29:37 +0000
ROA not before:           Tue 04 Feb 2025 18:24:37 +0000
ROA not after:            Tue 03 Feb 2026 18:29:37 +0000
asID:                     14232
IP address blocks:        201.219.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d7:6e:75:b6:f9:ff:4b:1a:03:a9:9c:35:9f:a3:7e:d0:4e:74:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Feb  4 18:24:37 2025 GMT
            Not After : Feb  3 18:29:37 2026 GMT
        Subject: CN=B9D4047133170F4195BEF6742E218C2083A8C95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:9e:dc:fa:b3:a6:c4:ef:4b:6a:72:e5:56:
                    8f:1b:e6:b8:a4:87:4c:12:cc:97:f3:fb:63:aa:dd:
                    8c:1f:5e:b2:42:13:45:d1:85:f8:9f:12:1e:29:3e:
                    86:19:fb:8e:14:d2:d3:9e:d9:3b:01:eb:df:54:e9:
                    98:d2:e6:5a:e1:2e:f7:ff:36:51:3f:ee:d3:5e:b0:
                    05:88:64:57:70:51:11:cc:b5:3c:fa:f7:fb:b7:de:
                    df:ec:36:f0:76:0b:1f:4a:20:43:8d:1a:f6:23:9e:
                    01:ff:2b:f3:fd:c3:e3:e8:02:47:f9:b8:4f:59:37:
                    fb:27:d6:95:e2:b6:d6:dd:1b:f2:2d:e0:af:62:f3:
                    12:79:b0:04:3b:d7:5b:40:0a:01:28:1c:00:82:56:
                    e5:ec:32:a5:86:48:28:e1:43:c5:23:30:7a:12:2a:
                    12:12:f8:d5:bb:e4:48:35:32:25:12:af:f7:8f:f8:
                    05:64:2f:f6:70:c0:97:a2:8e:09:46:37:14:31:af:
                    ae:78:fe:c9:9b:e9:bd:c0:a5:59:37:4e:99:9f:65:
                    eb:af:0a:6b:3c:8e:c4:6e:a4:f2:d2:9a:b7:11:8e:
                    7d:ee:ac:c0:19:0b:70:8d:0e:ad:ce:5d:c4:8b:ae:
                    34:c1:58:aa:61:02:19:1f:f0:1f:a2:ec:59:0d:3e:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:04:71:33:17:0F:41:95:BE:F6:74:2E:21:8C:20:83:A8:C9:5C
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f31392d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:5c:4f:91:b8:fe:92:57:84:27:b3:64:76:fe:4e:9b:82:
         8c:94:af:a8:2d:40:a1:2e:c7:a5:35:86:1f:f6:36:96:82:f5:
         fd:32:fb:8f:e6:b8:de:4c:ce:10:ba:7a:f3:cc:20:17:48:88:
         c6:76:8a:32:b8:64:1e:a6:23:0a:e7:e3:11:90:7f:47:cf:2c:
         0e:af:9d:e8:dd:97:da:ef:8e:a1:67:51:af:7b:23:c4:c9:ae:
         bc:4b:37:6a:03:ee:44:eb:0a:b4:c3:d5:f6:79:7b:22:33:4a:
         e3:03:9d:fe:5f:46:e8:d5:25:f5:04:aa:cd:41:71:56:b3:dd:
         81:0d:df:ba:f2:f9:b1:bb:62:b7:1a:96:5e:02:74:fe:ba:ed:
         cd:cb:67:fe:23:c8:4d:5f:d8:db:6a:1a:a5:3e:7a:7c:71:70:
         9f:23:24:ff:f1:97:60:d2:ec:88:3c:82:4a:ad:2b:58:84:d7:
         e0:08:30:7c:1a:5d:8e:ff:6e:f7:45:89:2d:de:21:09:82:88:
         59:56:c4:f1:f3:44:b4:f9:1e:a4:56:62:1b:10:f2:7b:13:55:
         76:b6:d6:d1:ca:ec:cc:c1:63:b1:8a:14:7c:4f:2a:73:b2:b6:
         45:86:f0:6b:97:ed:4e:25:6e:67:54:d1:ed:5c:d0:8b:fb:b9:
         7a:d4:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:24:12 2025 by rpki-client