Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231372e302f32342d3234203d3e203532333238.roa
File:                     3230312e3135392e3231372e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          eBumu2w3zfoO1iFz7n1h6+MWVPEIJNO3wpGa6YmEBLg=
Subject key identifier:   CF:6A:1F:8C:BA:2F:BE:0F:96:86:E6:E3:73:BE:52:99:48:8A:CC:9F
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       6B2E09BCA4C733AE995DDABCB0B979AB5D4D701F
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231372e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:23 +0000
ROA not before:           Tue 04 Feb 2025 18:11:23 +0000
ROA not after:            Tue 03 Feb 2026 18:16:23 +0000
asID:                     52328
IP address blocks:        201.159.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2e:09:bc:a4:c7:33:ae:99:5d:da:bc:b0:b9:79:ab:5d:4d:70:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:23 2025 GMT
            Not After : Feb  3 18:16:23 2026 GMT
        Subject: CN=CF6A1F8CBA2FBE0F9686E6E373BE5299488ACC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:9d:8d:17:f5:a7:7b:39:2c:24:eb:c1:df:
                    89:8f:d4:8b:23:e9:b5:b4:19:ff:62:f1:07:34:b5:
                    b2:e7:e8:16:5a:25:0f:bd:d1:b3:ec:a4:68:15:f9:
                    4e:7d:64:71:dc:23:fd:01:ae:db:9d:03:b2:d0:31:
                    f5:2b:01:c7:ea:ca:17:b7:82:28:02:1c:85:6e:06:
                    de:06:e2:e3:51:85:02:f9:f3:10:68:83:65:dc:8f:
                    c4:39:bb:6a:96:95:60:3c:dc:9c:4c:ff:a1:07:13:
                    fe:91:89:fb:46:55:86:f8:3c:f4:72:ac:3f:f7:1e:
                    1e:47:25:9d:89:5b:ce:05:7a:7e:e0:da:b3:81:16:
                    1c:c5:5d:55:59:0c:87:17:a2:7f:22:ce:60:2e:9d:
                    14:8b:6b:41:c5:13:e9:71:44:e7:c8:0c:ef:2c:45:
                    dd:ac:45:c0:d0:91:d4:04:ee:88:b0:e1:19:06:60:
                    05:cf:e3:6d:70:f8:79:56:f9:eb:b4:8a:ec:3f:2a:
                    dc:9f:ac:87:d5:53:c4:76:f7:39:47:55:ae:8f:02:
                    cc:83:c3:a7:18:56:e0:d0:07:66:2a:0d:33:43:c2:
                    2c:c7:a2:69:5c:76:65:6e:ff:21:de:2d:95:92:b5:
                    74:82:5b:f0:ce:2d:30:55:94:73:ec:93:84:71:c9:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:1F:8C:BA:2F:BE:0F:96:86:E6:E3:73:BE:52:99:48:8A:CC:9F
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231372e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:47:b5:46:99:61:4f:c7:bf:e8:ee:be:6d:0a:7c:e5:9f:2f:
         36:58:73:34:2b:d9:d6:d0:0f:dc:c3:88:eb:71:36:48:52:84:
         66:a7:78:37:bd:ad:41:1b:69:0f:4d:c6:24:5a:1f:50:ec:67:
         0d:f3:61:ca:13:52:cc:dd:33:88:ea:ac:d3:0b:a0:fd:bc:99:
         c1:a3:12:a0:07:d1:d0:85:d5:de:91:75:8a:bb:8a:1f:00:c7:
         6f:b6:98:27:29:56:39:e5:47:26:b6:b3:11:72:8a:80:8d:7b:
         89:18:a9:91:de:b4:0e:ea:f1:79:7c:df:c4:8b:40:29:7f:48:
         59:a5:6d:a6:a0:08:5a:5b:19:c2:4c:80:26:7a:34:79:ee:85:
         d7:0e:d2:49:0a:19:f5:a8:04:1f:a4:37:0f:22:14:2f:59:b2:
         28:a4:ed:53:b5:a9:55:4c:92:46:ad:91:74:7a:91:80:92:d7:
         76:a4:a6:4b:13:ab:f3:7a:25:3d:b5:8e:18:ec:8f:84:07:bd:
         85:17:68:03:e5:bd:56:c6:d9:3c:41:88:22:3b:18:5f:8a:d6:
         db:31:7b:e4:71:00:a0:17:7d:aa:90:fc:89:92:6e:e1:4c:1b:
         7f:b2:c9:44:9b:81:80:cd:a9:b4:5e:c8:36:1f:b8:ff:18:a5:
         de:72:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:11 2025 by rpki-client