Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
File:                     3230312e3231372e32382e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier:          WpnW+1sZuPdzM6uLSJqpucltAZ6zjGgrAA6mSCih6LI=
Subject key identifier:   11:36:C9:61:15:9D:3F:35:AE:23:E3:C6:3B:76:B0:2C:90:19:4E:86
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3192569E2A86716D9E30AA6634F017B7C12E7164
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
Signing time:             Tue 04 Feb 2025 18:31:15 +0000
ROA not before:           Tue 04 Feb 2025 18:26:15 +0000
ROA not after:            Tue 03 Feb 2026 18:31:15 +0000
asID:                     27866
IP address blocks:        201.217.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 15:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:92:56:9e:2a:86:71:6d:9e:30:aa:66:34:f0:17:b7:c1:2e:71:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:15 2025 GMT
            Not After : Feb  3 18:31:15 2026 GMT
        Subject: CN=1136C961159D3F35AE23E3C63B76B02C90194E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:83:e5:89:9f:0e:e0:1d:ec:53:da:f1:38:
                    72:34:b9:78:bf:33:75:42:f8:d0:f7:85:76:5b:2d:
                    4e:50:29:88:cd:85:7f:6a:a0:ed:a3:43:05:7f:ef:
                    4b:fb:2b:48:28:d0:46:da:a1:13:f6:38:22:09:dd:
                    b0:06:fe:d8:9e:b3:0d:9f:98:9c:be:b4:49:a7:c7:
                    7b:79:d3:23:d6:79:c4:56:06:40:51:22:62:54:db:
                    7e:c1:f8:a2:99:c6:6b:8d:38:31:fa:12:41:9b:90:
                    07:94:9d:8b:95:0c:fd:6c:23:67:4b:0c:96:7f:bb:
                    19:e0:63:e8:49:69:f4:4d:df:82:6d:56:55:b3:45:
                    f4:0f:b9:d7:27:74:dc:15:e9:2b:42:20:fe:a6:26:
                    89:01:19:f3:10:44:28:8a:c7:62:d8:85:39:af:63:
                    95:3d:0f:c4:31:66:aa:f8:40:8b:64:fc:fd:0d:3b:
                    7b:df:06:07:b0:23:0e:2b:e1:85:38:05:be:d8:f5:
                    8f:1e:ad:70:9d:23:6c:e7:cc:cf:b6:4a:a1:e5:69:
                    2a:7f:8c:e8:f9:81:ca:be:3b:cc:e9:8a:47:eb:a9:
                    11:e6:2f:63:56:c1:a1:d4:af:e3:83:43:a9:07:c6:
                    3e:9b:cc:97:6d:04:92:4d:30:00:59:75:50:af:54:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:C9:61:15:9D:3F:35:AE:23:E3:C6:3B:76:B0:2C:90:19:4E:86
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:d6:08:e2:ce:95:43:02:be:7f:cc:ce:0c:0f:86:63:f0:
         b6:ec:35:8d:e7:c7:b5:3c:49:c9:cc:d1:d8:aa:67:8f:63:76:
         1e:89:a8:f5:99:ab:aa:10:a5:b1:61:08:40:49:70:41:6e:10:
         ce:27:ad:ef:ff:72:2f:f4:55:40:3f:3d:06:6c:5b:4a:87:cd:
         d8:b0:64:fc:12:3e:8e:73:89:88:b4:27:c4:83:12:2e:f5:5f:
         42:fc:ee:eb:dd:7b:48:bd:cf:f4:9d:53:f3:af:f7:28:f1:7a:
         93:4c:2f:53:9e:9e:97:5a:78:0d:7e:1d:d1:24:32:f9:cb:cf:
         2c:f3:3b:58:06:66:4d:a0:56:19:d0:eb:89:82:5a:7e:9f:5d:
         a4:e6:78:f0:e2:f1:94:3d:a6:d5:f4:0f:f3:ad:95:25:16:63:
         5f:49:3c:b7:64:46:78:fa:e7:e7:69:32:2f:98:98:0d:35:10:
         28:ae:1f:ae:8b:db:15:43:84:ce:9b:ed:f5:28:e7:e4:86:03:
         33:fe:65:9d:ef:36:0a:9f:cb:8b:1d:bf:87:05:1b:ec:c3:4c:
         67:48:f0:89:d4:07:89:50:37:50:aa:64:ae:33:ae:dc:b1:0e:
         a9:95:fd:28:dc:9a:63:28:10:ba:dc:50:89:1f:99:c7:2a:ac:
         05:96:37:83
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMZJWniqGcW2eMKpmNPAXt8EucWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNTAyMDQxODI2MTVaFw0yNjAyMDMxODMxMTVaMDMxMTAvBgNV
BAMTKDExMzZDOTYxMTU5RDNGMzVBRTIzRTNDNjNCNzZCMDJDOTAxOTRFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k4PliZ8O4B3sU9rxOHI0uXi/
M3VC+ND3hXZbLU5QKYjNhX9qoO2jQwV/70v7K0go0EbaoRP2OCIJ3bAG/tiesw2f
mJy+tEmnx3t50yPWecRWBkBRImJU237B+KKZxmuNODH6EkGbkAeUnYuVDP1sI2dL
DJZ/uxngY+hJafRN34JtVlWzRfQPudcndNwV6StCIP6mJokBGfMQRCiKx2LYhTmv
Y5U9D8QxZqr4QItk/P0NO3vfBgewIw4r4YU4Bb7Y9Y8erXCdI2znzM+2SqHlaSp/
jOj5gcq+O8zpikfrqRHmL2NWwaHUr+ODQ6kHxj6bzJdtBJJNMABZdVCvVKb/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUETbJYRWdPzWuI+PGO3awLJAZToYwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzYzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZHDAN
BgkqhkiG9w0BAQsFAAOCAQEAaKLWCOLOlUMCvn/MzgwPhmPwtuw1jefHtTxJyczR
2Kpnj2N2Homo9ZmrqhClsWEIQElwQW4Qziet7/9yL/RVQD89BmxbSofN2LBk/BI+
jnOJiLQnxIMSLvVfQvzu6917SL3P9J1T86/3KPF6k0wvU56el1p4DX4d0SQy+cvP
LPM7WAZmTaBWGdDriYJafp9dpOZ48OLxlD2m1fQP862VJRZjX0k8t2RGePrn52ky
L5iYDTUQKK4frovbFUOEzpvt9Sjn5IYDM/5lne82Cp/Lix2/hwUb7MNMZ0jwidQH
iVA3UKpkrjOu3LEOqZX9KNyaYygQutxQiR+ZxyqsBZY3gw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:31 2025 by rpki-client