Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3234203d3e203134323332.roa
File:                     3230312e3231392e39362e302f32302d3234203d3e203134323332.roa (raw, json)
Hash identifier:          wFnOXidBc+aUPZe/Wp0VMDI/6dLzLoJNJNPluR+JYgA=
Subject key identifier:   2D:2B:45:D9:68:46:6C:39:F5:17:75:F3:65:6E:71:A1:AE:ED:FF:D4
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       21EC7D6A1D3D4101FE33313862799F8A30DB7BC5
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3234203d3e203134323332.roa
Signing time:             Tue 04 Feb 2025 18:29:36 +0000
ROA not before:           Tue 04 Feb 2025 18:24:36 +0000
ROA not after:            Tue 03 Feb 2026 18:29:36 +0000
asID:                     14232
IP address blocks:        201.219.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:7d:6a:1d:3d:41:01:fe:33:31:38:62:79:9f:8a:30:db:7b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Feb  4 18:24:36 2025 GMT
            Not After : Feb  3 18:29:36 2026 GMT
        Subject: CN=2D2B45D968466C39F51775F3656E71A1AEEDFFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:7e:a8:da:57:30:0a:dd:9d:af:c5:1f:01:
                    ef:37:bd:9d:24:0f:a4:03:d7:bd:8a:d9:6d:92:c1:
                    bb:7a:21:89:a8:02:d5:aa:e9:b6:00:d9:c4:fb:e9:
                    0b:f1:49:36:cf:57:fe:e1:dd:22:f7:97:50:8c:6f:
                    6c:f3:fd:7f:62:ba:d5:9f:0c:db:8d:92:ab:4a:eb:
                    57:52:cd:84:c8:0c:8d:8f:56:5e:0b:42:85:fe:bc:
                    f5:78:63:1f:e8:a9:0a:5e:46:40:2d:81:ab:5f:6c:
                    56:d6:17:5f:db:07:d1:f0:a5:e1:d6:d5:3d:ad:fb:
                    ab:ee:69:81:18:c1:ba:10:68:63:a9:f2:71:2a:ea:
                    3f:58:4c:77:8b:db:1f:70:3a:ea:89:90:f2:db:b2:
                    15:30:a8:b8:55:7c:05:34:f8:d2:86:86:95:f8:1a:
                    51:9c:a7:d8:23:77:c0:ae:2c:f9:24:a1:d9:e6:c3:
                    38:ad:61:ad:19:af:ca:72:95:77:2c:ea:02:b6:9f:
                    4e:1c:27:17:66:d8:14:97:58:5d:e4:53:e1:79:f3:
                    16:86:26:14:81:f5:44:75:a4:67:d0:0a:22:5b:0a:
                    84:28:0a:4f:04:4a:c7:4f:4a:d7:ca:e7:c1:d2:86:
                    45:08:13:60:a5:29:49:c5:f4:88:e9:c3:7c:3b:8f:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:45:D9:68:46:6C:39:F5:17:75:F3:65:6E:71:A1:AE:ED:FF:D4
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:ab:b8:57:56:02:41:33:ee:50:e2:fd:36:4a:88:c9:9a:
         b2:bd:b1:c1:14:ec:57:86:c7:77:4c:90:06:45:7c:de:03:e2:
         57:72:4e:f4:28:a4:dc:cd:6f:cc:4a:a7:3d:ef:32:e6:90:e2:
         aa:38:5d:dd:9b:73:61:7e:7e:cc:0b:3d:93:b7:f3:d0:de:8a:
         0f:3b:b1:7f:17:3b:36:20:80:c0:c3:d3:70:f9:c5:55:74:90:
         d2:c3:e5:a6:63:34:76:96:9f:3c:59:28:de:7b:c8:45:4c:36:
         c2:4a:4b:81:9a:d8:46:f9:4e:79:65:9b:e5:7a:b6:d1:f6:3b:
         06:a5:1d:f7:7e:ff:8e:2b:49:4f:ae:86:b4:75:97:3c:35:3b:
         57:48:12:5b:a2:fb:10:e7:f2:a7:31:23:ff:ff:2d:28:72:6b:
         f3:55:dd:5b:80:f7:f7:0b:a0:d4:3a:e0:b9:ad:85:bc:20:3b:
         20:20:6a:fb:45:5d:d5:3c:35:8b:f3:35:1e:a0:7b:63:54:9c:
         6c:f5:e4:cc:09:07:21:b6:2c:c6:f5:a4:3b:81:e8:a7:d9:86:
         89:ce:09:58:70:13:59:ea:01:35:ed:2e:1b:42:ba:15:79:e2:
         d4:3f:5d:a9:23:18:06:d5:e8:69:df:45:c8:6b:cf:52:16:4d:
         cd:3c:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:38:33 2025 by rpki-client