Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32352e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32352e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          b6abNB96EZDrcm0V5hH3dX6KSsYsYwslWMuXg6Ejcro=
Subject key identifier:   CE:20:FE:F8:A1:12:2A:05:39:59:01:DE:7C:CF:6C:4C:C2:A4:C0:72
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       1751D1BA3F132B8DF7FE0D4EB7171B85AA18AD50
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32352e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 07 Dec 2024 23:50:01 +0000
ROA not before:           Sat 07 Dec 2024 23:45:01 +0000
ROA not after:            Sat 06 Dec 2025 23:50:01 +0000
asID:                     27768
IP address blocks:        201.217.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:51:d1:ba:3f:13:2b:8d:f7:fe:0d:4e:b7:17:1b:85:aa:18:ad:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  7 23:45:01 2024 GMT
            Not After : Dec  6 23:50:01 2025 GMT
        Subject: CN=CE20FEF8A1122A05395901DE7CCF6C4CC2A4C072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:a6:8a:a6:03:ff:96:a0:be:a6:74:78:35:
                    28:d1:c0:4e:88:09:36:d6:c2:c2:9d:34:0d:16:29:
                    a9:f7:17:e8:20:5b:ff:74:62:5d:4c:f2:7a:3e:45:
                    84:f8:70:ae:cb:07:88:d9:81:b6:93:3f:7f:41:75:
                    f0:85:37:2f:e1:e6:19:2e:03:17:97:02:3b:03:19:
                    84:7e:06:f6:f7:67:86:49:b4:c6:2b:7a:4b:24:68:
                    c7:6b:92:92:bf:04:38:50:0f:a2:05:a9:da:14:cc:
                    5a:d8:8f:d7:55:f9:7a:a5:94:0c:bb:14:57:9e:fd:
                    53:ea:98:5a:43:c1:1b:d0:97:15:45:45:4b:d5:64:
                    58:97:0b:1e:e0:25:4c:21:6b:46:04:73:e3:be:4b:
                    f2:9c:0e:00:6d:3a:11:ac:6e:e5:e6:f5:5d:a9:3c:
                    14:c6:9f:6c:fa:c0:2d:41:b9:85:8d:ea:f5:be:61:
                    46:5a:8c:bc:41:75:e8:1e:99:bd:8e:10:7e:46:d1:
                    8b:be:27:8a:c7:58:19:3f:1a:d6:39:5c:d9:87:fa:
                    95:10:8e:e6:6e:a0:aa:68:ca:28:4f:b5:c1:57:9f:
                    99:60:4f:01:39:3b:22:05:8b:e2:a9:4c:f9:10:fc:
                    76:c0:f8:a3:c3:2f:06:61:a3:e7:08:26:0b:dc:38:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:20:FE:F8:A1:12:2A:05:39:59:01:DE:7C:CF:6C:4C:C2:A4:C0:72
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32352e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:d8:c0:27:08:c6:80:11:1b:00:33:f3:48:4b:b9:7c:a0:
         e5:d5:6c:9b:23:4d:0a:8a:92:0a:17:a8:a2:9a:ef:fd:6f:bd:
         25:31:10:c8:bb:ec:5a:0f:1c:cd:d6:e5:27:17:ca:ab:8d:27:
         37:dc:ce:8c:43:3e:f7:e8:ad:1d:e8:dd:c8:41:f9:d1:8f:45:
         b8:a9:53:aa:b2:44:b7:38:3e:82:ef:e4:77:fa:96:de:38:a5:
         ac:1f:c4:b0:07:f2:1b:62:bc:a1:ca:99:fa:51:5a:0a:b3:e7:
         5b:68:24:82:34:c8:26:f5:97:c5:bd:09:f7:65:6d:a2:62:bf:
         b3:81:6c:29:4c:f2:7d:7a:2e:d7:4a:2f:41:b3:7b:41:2d:d4:
         22:50:85:83:3c:16:f3:59:2a:22:10:80:89:34:63:e6:10:58:
         4e:80:32:0d:60:86:36:ba:c6:6f:df:bb:91:01:cf:04:6c:c8:
         d2:46:c6:e0:fd:22:36:5b:74:bb:2a:02:61:8e:28:ff:19:05:
         6c:f3:15:ac:a4:72:25:26:35:e9:09:48:ae:c9:f6:43:ca:f7:
         17:04:77:f9:e9:5a:81:c3:a2:44:3b:28:8b:a5:bb:1e:90:53:
         fa:79:85:7e:32:25:c4:39:6b:58:a2:79:ba:44:0b:d7:40:13:
         5d:85:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:40 2025 by rpki-client