Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231392e302f32342d3234203d3e203532333238.roa
File:                     3230312e3135392e3231392e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          iQaKxzAZDCbZzKT1o7H0bWPehXoaD6zdfOBCvQypj7s=
Subject key identifier:   0C:F3:46:23:9A:70:42:E3:7A:18:AF:CA:BA:A8:15:97:2E:99:47:B9
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       064C2BDB658BA77B3BFD433105D9625060BB43D6
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231392e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:30 +0000
ROA not before:           Tue 04 Feb 2025 18:11:30 +0000
ROA not after:            Tue 03 Feb 2026 18:16:30 +0000
asID:                     52328
IP address blocks:        201.159.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4c:2b:db:65:8b:a7:7b:3b:fd:43:31:05:d9:62:50:60:bb:43:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:30 2025 GMT
            Not After : Feb  3 18:16:30 2026 GMT
        Subject: CN=0CF346239A7042E37A18AFCABAA815972E9947B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:7d:6f:33:d9:0e:1c:1d:e9:f2:d9:13:85:
                    82:40:9d:35:9e:b7:69:6b:bd:a9:cb:8b:61:5c:cd:
                    f1:42:ee:9d:c1:d0:6d:48:fa:bc:67:67:75:54:96:
                    55:c9:4b:d7:a5:e8:2c:6b:b5:7b:1f:09:7e:81:82:
                    4c:bb:51:7e:bc:3f:52:62:8a:7a:72:c9:65:5b:a2:
                    e3:cd:96:32:10:c2:f2:18:9b:47:6d:da:d1:15:49:
                    61:5d:b4:db:32:1f:70:75:39:02:62:52:ef:5c:89:
                    9e:92:59:f6:54:aa:7a:af:1f:89:47:b8:f3:f6:34:
                    0e:a1:7d:15:dc:d6:59:0b:35:2e:10:bb:ef:0d:82:
                    13:4a:86:84:23:24:8f:d7:cc:c8:ed:c6:78:07:88:
                    ad:46:81:96:35:81:0b:b3:6c:28:ce:a1:8d:cb:73:
                    f9:2d:36:75:2e:6a:40:cf:bc:24:4d:2d:3d:74:af:
                    e3:f7:12:a3:d5:2e:95:db:0a:65:db:5b:a0:13:cf:
                    dd:03:22:0b:b6:e0:06:d1:e4:f6:e2:72:12:25:b6:
                    d6:ad:7d:53:04:37:f0:84:c1:48:93:d3:2b:c9:1c:
                    81:ce:02:26:74:d1:0b:8b:8b:e2:a3:ff:bd:d7:3b:
                    e9:81:1a:5c:7a:0a:5f:00:0a:10:ae:ba:86:a0:f8:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F3:46:23:9A:70:42:E3:7A:18:AF:CA:BA:A8:15:97:2E:99:47:B9
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231392e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:b0:6d:cb:6b:9b:fa:c6:b9:b1:6c:e6:2c:17:18:69:ba:
         20:3f:40:1d:fe:e6:d5:3c:50:de:7c:a0:d6:3c:e9:a4:e5:fb:
         a7:c0:2b:91:3f:e7:ea:8c:e4:a2:8e:83:9d:8d:86:e4:cf:65:
         9e:0c:fc:e0:ff:f2:07:36:df:51:38:ec:d6:6d:bd:bc:f1:30:
         ed:f8:3a:b7:48:5c:98:8e:48:60:ce:db:af:b2:c6:a3:88:c7:
         77:97:0e:83:2d:90:9a:e5:f9:3a:43:f8:03:33:79:b8:96:36:
         aa:c7:5c:20:27:24:7d:f3:78:74:29:fa:6f:01:00:a3:34:67:
         f1:9a:c5:be:6c:22:f5:43:c2:c9:39:e6:17:6a:d0:18:32:21:
         f3:09:60:72:b4:85:11:eb:c4:9b:c5:e5:2f:4f:6a:e9:f8:78:
         af:68:e1:45:20:45:70:c4:fd:a2:c4:b3:13:d1:ed:4c:87:80:
         f5:9c:26:e6:ca:92:7f:18:aa:16:a9:52:f8:92:4e:34:d6:66:
         e0:59:07:f7:45:1e:1f:30:f5:44:65:72:ac:b9:79:b0:fd:1c:
         db:9a:2f:d9:bd:38:75:c1:01:7b:ca:c4:42:28:d9:43:a9:41:
         f0:c2:40:68:18:c7:98:62:50:0d:87:4d:9c:9d:ef:f3:51:e0:
         ea:ed:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:55 2025 by rpki-client