Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32362e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32362e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          5HNfWEQqp2cbCuHBx/bFWkBWiBD6y6lLKGFOJV4f5xY=
Subject key identifier:   F4:C9:80:8F:66:DE:0D:1C:D3:B8:62:8D:E6:14:B5:57:0B:B4:62:52
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       08397E8AEF84EF6F08394A86FA00019A63F93605
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32362e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 07 Dec 2024 23:50:01 +0000
ROA not before:           Sat 07 Dec 2024 23:45:01 +0000
ROA not after:            Sat 06 Dec 2025 23:50:01 +0000
asID:                     27768
IP address blocks:        201.217.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:7e:8a:ef:84:ef:6f:08:39:4a:86:fa:00:01:9a:63:f9:36:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  7 23:45:01 2024 GMT
            Not After : Dec  6 23:50:01 2025 GMT
        Subject: CN=F4C9808F66DE0D1CD3B8628DE614B5570BB46252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:22:e8:7d:a2:d7:53:0a:34:e4:a1:79:72:
                    73:4e:67:ba:b2:e4:c5:eb:b9:43:40:33:a5:06:02:
                    6e:7f:b4:91:99:75:b1:b8:8a:a8:7b:bb:36:26:73:
                    0e:5d:99:e8:7e:84:f4:c3:d6:12:1a:e5:70:01:2b:
                    6e:8b:c6:30:0c:a4:d1:46:02:cd:b1:79:14:b1:8f:
                    05:9e:6b:af:91:b7:1d:70:9d:f0:2c:87:5d:6f:6d:
                    1c:ea:41:3b:ad:bb:a6:78:56:20:c9:a5:95:f0:05:
                    8d:f9:09:60:71:bf:2d:c0:81:e0:f5:4d:cc:2e:82:
                    88:5b:7f:fa:49:5a:55:aa:f3:0b:06:ce:21:db:10:
                    cf:31:5a:6a:fa:7c:07:4b:9e:0d:cb:a3:0b:c0:cb:
                    6f:26:e3:58:44:b6:d3:99:e8:7d:e4:fe:aa:0e:4c:
                    f4:24:03:fb:49:1b:75:16:ae:f5:41:c3:bf:e2:64:
                    c7:8f:cc:49:16:8d:1c:4b:3e:f9:f4:62:0a:44:90:
                    50:9d:5c:1d:50:3f:c0:00:24:cc:95:8b:61:43:82:
                    26:de:18:60:b8:07:fe:d2:d3:1d:df:17:ad:74:c7:
                    5d:3b:db:61:e4:78:eb:f2:0b:0e:c2:5f:00:5f:4c:
                    51:b9:02:d7:62:81:80:25:ef:0f:eb:0d:18:42:c7:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:80:8F:66:DE:0D:1C:D3:B8:62:8D:E6:14:B5:57:0B:B4:62:52
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32362e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:c1:ec:28:05:68:6f:bc:1c:4c:7f:83:3f:83:72:07:10:
         fc:e2:92:dd:65:39:26:ae:cf:dd:d0:b4:64:82:47:41:90:96:
         49:88:6d:9a:0d:4a:07:c5:44:8c:c5:29:6c:b2:c8:5c:bb:22:
         de:73:1e:3b:93:1e:b3:18:7f:b6:d8:44:24:a5:2e:da:c4:ff:
         49:41:3d:3f:e9:a2:98:5b:05:93:fa:12:97:ec:58:fc:67:c8:
         85:2a:5b:ec:1e:95:50:79:14:05:8c:79:eb:91:ad:1a:ac:6b:
         4c:7d:92:0a:7c:93:36:39:10:2e:2f:34:83:68:1f:85:3b:1f:
         a8:b4:1c:c6:c9:0a:d3:ef:03:f3:11:46:78:d9:7c:45:57:1f:
         29:9b:a4:b8:7a:5b:b5:d4:3c:97:a2:83:2c:fb:20:87:0e:fe:
         d4:48:b6:13:93:c3:ea:19:6a:37:03:37:5d:35:7a:f8:c6:b7:
         09:03:ed:31:aa:e2:d2:c9:c5:89:32:96:d5:d8:67:30:23:32:
         89:64:a1:f1:9a:6b:10:b8:56:86:32:7b:04:54:6e:e9:d1:fa:
         02:41:95:2c:14:5c:32:eb:10:9e:64:79:03:5c:1a:bd:bc:8b:
         28:45:7e:db:c5:7d:9b:c5:b4:e9:80:e1:fd:58:03:53:0d:30:
         58:b5:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:40 2025 by rpki-client