Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33302e302f32332d3234203d3e203237373638.roa
File:                     3230312e3231372e33302e302f32332d3234203d3e203237373638.roa (raw, json)
Hash identifier:          BPePg9uLvVKCB2h16gRi+o2GYmGz/iDgmyy1oMeyJVA=
Subject key identifier:   EE:AE:D3:5B:E9:64:72:5B:FD:DA:54:18:F0:D7:E5:EF:58:FC:AB:66
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       7A61AFA071AEFDFF10788B09811F41A05609A2F1
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33302e302f32332d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:21 +0000
ROA not before:           Tue 04 Feb 2025 18:26:21 +0000
ROA not after:            Tue 03 Feb 2026 18:31:21 +0000
asID:                     27768
IP address blocks:        201.217.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:af:a0:71:ae:fd:ff:10:78:8b:09:81:1f:41:a0:56:09:a2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:21 2025 GMT
            Not After : Feb  3 18:31:21 2026 GMT
        Subject: CN=EEAED35BE964725BFDDA5418F0D7E5EF58FCAB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:c6:fa:3d:80:37:a3:a4:72:97:f7:cc:df:
                    74:f0:ef:e0:35:46:61:ba:52:74:21:ab:8f:f6:a7:
                    84:26:fa:f0:6a:6b:83:7f:02:73:c1:99:dc:b8:f1:
                    7a:4b:28:66:12:d3:90:9c:23:05:9e:60:e8:33:96:
                    9a:59:47:c9:62:56:12:71:19:26:10:46:3b:98:97:
                    e0:ba:2c:b2:8b:7a:22:6e:e4:3c:ca:7f:0e:c8:a2:
                    8d:b3:e8:1f:7b:75:0f:96:a2:6a:7e:9e:db:c4:b9:
                    73:49:c0:65:fc:78:83:64:93:10:58:27:99:6e:ad:
                    6a:af:d9:c2:2f:62:f7:99:5e:f5:9f:55:7f:70:d1:
                    5c:32:0f:8d:43:e0:23:18:ac:6d:c4:89:22:33:ba:
                    26:67:d7:13:2a:6f:77:a9:44:26:d3:35:7a:bc:58:
                    47:02:ee:37:b6:65:3f:45:8e:60:1e:74:bc:4b:3a:
                    55:ba:0a:56:ac:ea:ed:7c:8e:5b:66:f9:ba:3f:4e:
                    85:14:ea:d6:5a:8d:84:25:74:e1:87:9b:66:89:38:
                    0b:77:b8:4e:cb:66:61:de:d9:30:17:13:9f:b6:11:
                    f5:a8:b0:18:3b:46:52:1d:6c:09:52:1d:59:37:bd:
                    36:6f:fd:fc:b6:a6:da:3d:b3:1a:32:e5:13:18:ce:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:D3:5B:E9:64:72:5B:FD:DA:54:18:F0:D7:E5:EF:58:FC:AB:66
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33302e302f32332d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:ea:47:50:0c:8f:08:3e:b3:8a:bd:16:b6:2d:db:da:3e:
         0f:24:4f:41:51:59:c1:24:83:bb:89:ad:80:e6:4f:45:0c:e2:
         39:97:e3:ad:c8:d8:66:ec:05:a2:e4:29:12:88:19:5d:18:89:
         fa:4a:5d:cb:f8:8d:9e:5d:b0:89:e3:86:31:6c:7c:95:fd:3d:
         53:d6:e3:4f:ed:d2:e0:fe:b6:6c:11:51:36:bf:52:23:1a:67:
         2f:3d:2e:88:1c:7c:87:0a:c6:dd:ef:e5:eb:75:bd:17:0a:76:
         fe:7b:ff:d3:19:30:20:f9:a6:9c:1e:95:33:f8:ae:9f:be:c6:
         79:e5:26:f3:d9:25:fd:f3:f2:10:0c:6f:e7:01:c8:dc:b4:e3:
         00:6f:59:e8:50:71:96:be:b8:e5:8c:09:74:ee:75:94:9d:d7:
         3e:38:d3:28:5c:f7:69:cf:d4:0a:27:7a:2a:99:f7:f2:62:e6:
         9b:04:c4:cd:dd:2b:22:16:08:2c:2f:8a:72:99:12:5c:4c:af:
         ed:41:35:b4:dd:b5:92:9a:7f:72:55:25:94:de:f8:ac:0d:4d:
         0b:d8:c1:8e:73:93:88:48:d6:5c:5f:b8:4b:85:97:3a:a0:8c:
         fa:95:84:be:71:dd:bf:80:db:75:8b:88:1c:30:47:33:08:fc:
         fd:e0:5f:1c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUemGvoHGu/f8QeIsJgR9BoFYJovEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNTAyMDQxODI2MjFaFw0yNjAyMDMxODMxMjFaMDMxMTAvBgNV
BAMTKEVFQUVEMzVCRTk2NDcyNUJGRERBNTQxOEYwRDdFNUVGNThGQ0FCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhMb6PYA3o6Ryl/fM33Tw7+A1
RmG6UnQhq4/2p4Qm+vBqa4N/AnPBmdy48XpLKGYS05CcIwWeYOgzlppZR8liVhJx
GSYQRjuYl+C6LLKLeiJu5DzKfw7Ioo2z6B97dQ+Womp+ntvEuXNJwGX8eINkkxBY
J5lurWqv2cIvYveZXvWfVX9w0VwyD41D4CMYrG3EiSIzuiZn1xMqb3epRCbTNXq8
WEcC7je2ZT9FjmAedLxLOlW6Clas6u18jltm+bo/ToUU6tZajYQldOGHm2aJOAt3
uE7LZmHe2TAXE5+2EfWosBg7RlIdbAlSHVk3vTZv/fy2pto9sxoy5RMYzkSxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7q7TW+lkclv92lQY8Nfl71j8q2YwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMzMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcnZHjAN
BgkqhkiG9w0BAQsFAAOCAQEAPEDqR1AMjwg+s4q9FrYt29o+DyRPQVFZwSSDu4mt
gOZPRQziOZfjrcjYZuwFouQpEogZXRiJ+kpdy/iNnl2wieOGMWx8lf09U9bjT+3S
4P62bBFRNr9SIxpnLz0uiBx8hwrG3e/l63W9Fwp2/nv/0xkwIPmmnB6VM/iun77G
eeUm89kl/fPyEAxv5wHI3LTjAG9Z6FBxlr645YwJdO51lJ3XPjjTKFz3ac/UCid6
Kpn38mLmmwTEzd0rIhYILC+KcpkSXEyv7UE1tN21kpp/clUllN74rA1NC9jBjnOT
iEjWXF+4S4WXOqCM+pWEvnHdv4DbdYuIHDBHMwj8/eBfHA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:39 2025 by rpki-client