Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e302e302f32312d3234203d3e203237373638.roa
File:                     3230312e3231372e302e302f32312d3234203d3e203237373638.roa (raw, json)
Hash identifier:          8Iyyg5TQXy9kmX69VN9iKDtw97DvgrtH+WTBLco8tww=
Subject key identifier:   F4:3D:11:8E:22:76:58:74:EB:43:7F:50:1F:CA:32:49:AA:FE:AD:EB
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3D7B976B767AD8E5BDC70577E288689D0CEEB953
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e302e302f32312d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:20 +0000
ROA not before:           Tue 04 Feb 2025 18:26:20 +0000
ROA not after:            Tue 03 Feb 2026 18:31:20 +0000
asID:                     27768
IP address blocks:        201.217.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7b:97:6b:76:7a:d8:e5:bd:c7:05:77:e2:88:68:9d:0c:ee:b9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:20 2025 GMT
            Not After : Feb  3 18:31:20 2026 GMT
        Subject: CN=F43D118E22765874EB437F501FCA3249AAFEADEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:2a:ab:d2:b3:7c:f6:97:70:c8:1d:bf:b8:
                    9b:b1:dc:7c:57:19:97:06:67:fb:dd:29:df:e1:d8:
                    59:b4:82:47:d3:96:d7:b8:cb:9f:e0:10:b7:e5:70:
                    3d:e8:82:61:0a:e4:6f:d7:ca:fd:9f:50:ad:dc:eb:
                    40:5b:54:5b:92:ec:77:3d:e2:f0:eb:59:f8:3f:80:
                    a7:b5:8e:62:59:c5:f6:34:6a:d1:60:66:19:21:0b:
                    0b:b6:d5:15:c3:13:b9:23:00:0a:be:29:b8:6c:a7:
                    43:63:e7:32:d9:37:06:55:8e:f3:53:63:00:ec:40:
                    6e:42:0d:5c:17:4e:a1:33:c4:86:4f:63:80:97:a9:
                    80:71:f3:62:58:82:15:30:93:71:18:34:38:c2:e2:
                    9f:d4:e1:f1:e0:9e:03:2d:dd:01:88:41:2a:77:aa:
                    d8:67:43:71:6e:40:6d:b9:56:90:08:95:5f:17:a8:
                    a2:76:05:77:79:8f:15:72:a7:20:5d:73:14:1d:af:
                    c8:fd:4d:4e:c0:8e:55:a2:45:aa:3b:e6:5a:54:17:
                    4b:5c:97:da:ab:40:24:49:7d:60:72:ef:2f:c6:64:
                    af:41:81:81:54:60:d0:5d:4c:88:ae:1c:8c:0f:ea:
                    81:16:f6:54:cd:08:1a:f7:d3:57:18:58:1f:42:c3:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3D:11:8E:22:76:58:74:EB:43:7F:50:1F:CA:32:49:AA:FE:AD:EB
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e302e302f32312d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:81:98:07:44:19:c1:9d:91:bb:bb:11:99:72:26:bb:37:43:
         e9:b5:19:be:b5:ba:db:d0:c8:58:d2:dc:58:d0:3c:ae:f0:c2:
         89:80:7f:ec:ca:89:3b:d8:84:5d:61:8c:27:20:30:0b:68:c9:
         79:d9:19:48:a6:af:6b:26:a1:70:02:2e:47:47:e2:d4:63:25:
         b9:76:b3:5d:5d:42:68:66:f2:73:20:ae:26:fc:39:bd:99:cc:
         74:2e:1e:76:7d:bb:80:07:65:ee:77:ac:64:92:e4:a2:04:45:
         af:fd:46:98:c1:20:78:8f:34:1f:bd:1c:89:e1:2c:d2:86:4f:
         f9:af:e8:b3:51:21:9b:c7:ef:0e:69:f9:b6:1d:7e:6f:53:37:
         c4:27:10:4a:a4:9e:a0:49:05:c9:79:0c:9a:9f:e0:78:56:e8:
         74:fa:6a:d4:cf:70:59:a0:38:22:50:6c:b3:b3:37:05:fa:28:
         bd:82:08:06:10:92:9b:f7:8b:4f:a3:3f:e1:07:42:1e:5a:df:
         d5:5f:b2:ce:ed:ba:43:5f:1d:89:91:92:ba:59:34:b6:0e:f5:
         3e:2c:3a:17:b7:fb:88:63:26:fa:44:45:a1:ce:5f:79:cf:1f:
         7f:f6:c1:08:8c:1b:9b:7a:43:47:03:de:e9:94:15:6e:33:f4:
         df:9d:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:51 2025 by rpki-client