Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32372e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          b9A36rFnsicJiFJ2GNcOKL7L98YLwWt7h+EJ/QMZQec=
Subject key identifier:   D5:73:3A:86:1B:02:7B:A9:DB:3E:85:98:08:D7:49:CD:E9:60:57:4F
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       50282E594AD9A3D2365B04E7CB16ABD67D7E8613
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 07 Dec 2024 23:50:00 +0000
ROA not before:           Sat 07 Dec 2024 23:45:00 +0000
ROA not after:            Sat 06 Dec 2025 23:50:00 +0000
asID:                     27768
IP address blocks:        201.217.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:28:2e:59:4a:d9:a3:d2:36:5b:04:e7:cb:16:ab:d6:7d:7e:86:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  7 23:45:00 2024 GMT
            Not After : Dec  6 23:50:00 2025 GMT
        Subject: CN=D5733A861B027BA9DB3E859808D749CDE960574F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:f7:66:8c:ae:5d:07:6c:4e:3f:be:3b:36:
                    79:77:0d:78:b4:ce:83:32:5e:95:a6:c7:4e:92:d6:
                    9a:90:26:03:20:97:a5:b0:5b:ae:81:79:6c:40:29:
                    3e:dd:fe:e0:e6:39:19:d8:a0:63:de:60:51:9c:68:
                    78:05:7b:91:75:ff:40:3f:03:eb:f0:3d:87:c8:39:
                    b1:9a:33:86:e7:4d:82:36:e2:cf:d0:a0:04:c2:ac:
                    5e:4a:f1:87:8a:6a:47:4c:a8:07:30:a9:4b:a6:73:
                    62:76:0b:42:41:cd:36:8b:da:17:86:16:ab:66:eb:
                    0b:93:de:42:c8:8a:d4:c6:a2:d9:ab:6f:2b:38:da:
                    f2:73:05:9d:e2:00:e1:5e:e8:e7:a0:5e:7f:07:cc:
                    cc:82:a4:cc:4e:ec:40:02:cd:35:1c:ea:59:ce:d5:
                    80:4a:91:53:56:53:67:dd:e9:95:95:59:da:74:23:
                    5f:73:1c:00:a2:ee:8b:9d:49:7f:b1:64:e3:c3:2b:
                    e1:02:94:e2:26:ec:46:c0:d2:c4:ba:e3:8a:b9:0a:
                    10:1f:b6:b9:e9:c2:0e:80:b2:b2:26:24:4f:9a:4b:
                    05:62:ff:9b:99:de:c7:d1:af:e9:0e:13:62:2c:21:
                    61:0d:74:00:95:a2:05:d1:d4:6b:cc:85:19:d2:6e:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:73:3A:86:1B:02:7B:A9:DB:3E:85:98:08:D7:49:CD:E9:60:57:4F
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:86:bf:c6:b3:8b:c1:24:57:db:a2:1c:ae:53:a5:ef:ad:
         15:01:6b:fc:eb:0e:61:58:7b:66:d8:63:91:0e:c8:7c:bd:47:
         92:34:a3:38:67:22:2a:f7:6e:4d:b1:04:e3:cd:8f:15:f6:83:
         2d:bc:0d:66:9c:50:26:83:9e:6e:d8:3f:05:d9:6e:f7:ea:85:
         ba:d8:bf:e9:7e:cd:9d:8c:f2:0d:79:bb:9b:19:7b:d3:fa:4a:
         e9:6f:6c:5f:c7:41:3d:92:3b:1f:5c:d2:99:c8:d8:fe:f5:fa:
         c2:f5:df:8d:64:e4:29:08:f6:86:ee:5e:b3:86:c9:a7:6a:e9:
         0e:df:69:fd:02:3b:31:79:38:dd:39:87:67:56:47:34:9c:f5:
         fe:99:b4:27:72:4f:74:b4:ad:af:43:86:24:2d:b9:a2:02:c7:
         48:51:52:27:34:e1:f6:cc:16:8c:7d:14:0a:af:dd:88:9e:d5:
         fe:38:95:98:8a:f8:08:51:3e:b8:dd:2c:c3:9d:e6:6b:81:4a:
         31:99:ab:a7:03:55:7a:12:fa:fa:06:03:e2:b0:ac:64:6d:9a:
         d0:06:c9:7c:ac:d0:16:26:9c:51:50:08:4c:3a:8b:05:2f:b7:
         c4:37:a0:02:53:20:90:a7:af:ce:83:10:10:e4:c7:56:32:3a:
         cd:80:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:47 2025 by rpki-client