Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa
File:                     3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          cI9GepXF3qQrlC4A7e0F+AAyIoHY+3oh5xcCitREErQ=
Subject key identifier:   66:08:8A:CD:21:B4:A4:96:B8:68:BD:A9:3E:93:53:16:6E:35:CA:B5
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       1150D32AFEFACF21C3600EC7153A95D386FB68C7
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:30 +0000
ROA not before:           Tue 04 Feb 2025 18:11:30 +0000
ROA not after:            Tue 03 Feb 2026 18:16:30 +0000
asID:                     52328
IP address blocks:        201.159.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:50:d3:2a:fe:fa:cf:21:c3:60:0e:c7:15:3a:95:d3:86:fb:68:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:30 2025 GMT
            Not After : Feb  3 18:16:30 2026 GMT
        Subject: CN=66088ACD21B4A496B868BDA93E9353166E35CAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:45:1b:2a:0a:54:95:b8:e6:c5:8b:3c:21:
                    e4:38:c6:c7:07:54:8d:37:4a:1f:b4:a8:3c:7f:61:
                    d5:30:26:e2:ab:1e:ce:3e:76:df:8d:e6:40:b5:e6:
                    83:e7:d2:ca:f2:d5:a3:71:49:7a:47:23:3a:32:c8:
                    ba:13:3d:95:72:64:08:4e:19:81:3e:0d:1e:76:e5:
                    09:a0:73:68:c7:fa:1c:2e:6a:52:7e:d0:82:ae:39:
                    79:4b:fb:9f:c5:20:79:12:4e:f6:7b:a5:90:90:40:
                    5a:e3:28:00:a6:61:53:66:b9:ef:38:29:a9:2c:1c:
                    4e:1d:e6:f6:ea:65:37:b8:e9:53:0d:0c:bf:6c:97:
                    34:14:18:79:c4:bb:c7:be:a8:1b:16:75:d4:3d:12:
                    da:1b:b1:2d:8f:1d:ff:3a:f8:11:fa:bd:9f:a6:52:
                    04:91:4b:88:ab:68:92:48:d7:e0:33:97:72:55:15:
                    25:bd:7d:ff:37:f8:ac:b7:75:55:4a:72:49:82:11:
                    c7:b8:ea:ef:a9:21:a4:1f:cb:7e:38:fa:fd:51:4e:
                    4f:d2:51:5e:cc:3a:d1:d7:3b:6d:37:84:fb:78:dd:
                    6b:2f:46:37:bd:e1:35:59:c6:44:55:38:c1:f4:22:
                    92:ae:ed:d7:2c:79:8d:c8:84:52:1d:c1:8a:27:31:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:08:8A:CD:21:B4:A4:96:B8:68:BD:A9:3E:93:53:16:6E:35:CA:B5
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:84:cd:96:29:f1:29:d7:62:89:77:a1:ef:1a:39:1c:5f:a6:
         cd:1c:10:52:07:04:3b:ef:f9:b0:fa:44:72:9e:cc:a4:8e:c0:
         a2:d0:f5:04:ca:ba:cf:0f:91:b6:9d:7b:d1:60:05:82:15:77:
         17:b9:7e:c7:f9:73:86:47:ae:41:41:0f:d2:70:fe:10:54:40:
         35:e6:18:08:d2:5a:ba:90:c4:d9:d3:39:2c:a9:44:80:5e:63:
         c3:54:b2:f7:a0:3f:0c:87:19:67:13:94:ee:cb:90:86:cb:af:
         4a:49:9d:3b:b6:c2:65:1f:d6:44:84:97:c8:e6:63:c4:05:38:
         0c:58:5c:f2:16:f8:bf:0e:ee:0f:b2:37:ad:0e:fb:2f:f0:c5:
         77:a0:68:60:6f:4a:1a:66:fa:b5:36:f4:75:2d:76:13:a4:97:
         77:28:4c:a9:f3:c7:76:89:b8:33:03:d0:e8:61:70:d0:50:b1:
         ed:40:20:47:f7:18:10:b7:82:0d:af:1f:a8:0d:9d:58:1c:9f:
         ed:ff:59:ce:87:f8:48:e8:0c:90:e7:32:4f:b4:8f:0d:ba:5c:
         14:f8:02:9e:4f:95:b9:17:b4:dd:58:84:47:a6:da:5e:a6:a6:
         56:a2:ec:ae:57:b6:fe:15:22:6b:bc:4f:ae:d8:51:0c:42:06:
         45:69:f6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:42 2025 by rpki-client