Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa
File:                     3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          ItrREl7u17L0bDJTDDdHkCfplcJVFTdGGMIVk06hXNw=
Subject key identifier:   85:13:38:38:84:A3:DC:2F:46:69:26:01:29:CD:1A:4A:C8:4E:3A:E3
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       430B1391A140D5DF520FD52C7EA903C64E33477E
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:27 +0000
ROA not before:           Tue 04 Feb 2025 18:11:27 +0000
ROA not after:            Tue 03 Feb 2026 18:16:27 +0000
asID:                     52328
IP address blocks:        201.159.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0b:13:91:a1:40:d5:df:52:0f:d5:2c:7e:a9:03:c6:4e:33:47:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:27 2025 GMT
            Not After : Feb  3 18:16:27 2026 GMT
        Subject: CN=8513383884A3DC2F4669260129CD1A4AC84E3AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:88:12:cf:a1:61:aa:42:d8:9f:23:66:6b:
                    dc:05:84:20:43:a0:26:ce:fd:a7:10:31:d2:8b:05:
                    10:d5:4c:82:24:0f:92:0a:3f:61:23:3e:2e:40:d9:
                    40:03:30:e6:ab:7c:49:c5:b4:c6:39:1d:bf:68:e2:
                    57:cf:04:fd:12:06:aa:43:b8:33:b4:74:b3:c4:48:
                    b6:66:05:e1:25:d4:c4:da:21:f6:b2:e6:0a:00:86:
                    d0:50:60:f2:ba:2f:ba:d1:6f:26:f1:5d:98:05:f4:
                    69:97:8f:3c:cb:e6:9a:f1:ec:5b:af:7c:60:9a:50:
                    2d:b3:1e:c0:3e:b5:8f:42:e4:50:16:e8:e8:c4:08:
                    3f:12:8a:59:91:d2:74:fb:fa:aa:75:7c:46:77:6e:
                    24:59:b2:44:e3:d1:52:e2:4b:82:f2:5f:3b:91:01:
                    37:6f:25:16:73:ad:a3:39:87:db:0f:e6:15:7d:17:
                    50:96:3b:07:75:65:24:0c:e9:82:6a:5d:e7:56:63:
                    92:d5:7f:61:8c:9a:b9:85:2e:c5:81:80:29:b4:bc:
                    b5:22:8f:fa:be:7c:f7:a4:16:08:df:a0:6b:91:8b:
                    fa:d7:be:f0:62:83:0d:2f:aa:11:ac:e6:e6:14:38:
                    c8:79:ea:27:66:6a:d0:11:81:81:47:87:6b:40:11:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:38:38:84:A3:DC:2F:46:69:26:01:29:CD:1A:4A:C8:4E:3A:E3
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:55:86:c9:01:6a:76:c6:e7:d5:af:4a:76:a2:1d:e7:f0:
         3a:fd:b0:ed:2d:2f:11:d7:65:5b:70:a4:0e:55:dc:a8:11:3a:
         5a:ca:96:3b:1f:fd:28:71:11:91:35:9f:e0:cb:5f:44:7c:3f:
         93:72:dd:90:f3:00:b0:fc:8c:f0:9a:ee:e9:a0:30:99:f1:d3:
         02:eb:c4:6d:e6:9d:e0:d9:66:52:49:86:73:eb:11:0d:e0:c8:
         62:9b:fd:24:54:aa:51:3d:04:65:ac:93:0f:c1:bf:94:42:82:
         f6:6f:85:ed:d2:b9:82:21:41:d6:40:d7:5f:ff:08:13:a5:ee:
         ae:bb:83:cd:ee:e8:8d:26:0d:03:a9:a9:fe:75:46:a9:20:ee:
         58:e6:71:d8:81:78:bc:81:23:c6:09:39:e2:6c:a6:cb:68:32:
         fe:6a:ad:09:27:df:c7:27:66:a6:ea:17:18:d6:30:01:d1:a6:
         a6:c2:f2:95:99:f1:eb:2c:87:99:3b:00:de:e5:9b:fe:c0:79:
         27:15:7d:f9:8f:1c:2d:13:0c:10:c6:9b:9c:43:4b:9b:48:a8:
         94:b9:a9:64:f3:c4:7c:f8:1c:85:0e:34:4f:18:0a:52:8b:c7:
         bc:91:66:67:2f:11:1d:ac:ff:3c:65:96:24:20:19:1a:fd:86:
         4f:4b:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:52 2025 by rpki-client