Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
File:                     3230312e3231372e33322e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier:          79JgK/hKrZqStp3SwUapUWRA+Xxg1Y/nyaf9H9Cr+6s=
Subject key identifier:   1C:02:64:D2:FC:4E:A3:31:54:22:8D:E8:DA:F6:FC:4E:14:93:E5:00
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       63E0590889A136ED9225BEBECB685183911FC256
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:15 +0000
ROA not before:           Tue 04 Feb 2025 18:26:15 +0000
ROA not after:            Tue 03 Feb 2026 18:31:15 +0000
asID:                     27768
IP address blocks:        201.217.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e0:59:08:89:a1:36:ed:92:25:be:be:cb:68:51:83:91:1f:c2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:15 2025 GMT
            Not After : Feb  3 18:31:15 2026 GMT
        Subject: CN=1C0264D2FC4EA33154228DE8DAF6FC4E1493E500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:8a:84:4e:99:43:ed:5e:1f:5f:9f:49:ef:
                    19:68:2c:60:ce:90:20:be:5a:a8:83:68:ce:be:99:
                    b3:2c:46:23:a1:3a:4a:e0:15:d0:bd:ec:0a:b8:e7:
                    89:e8:09:c1:66:06:81:00:81:8e:d1:29:2c:28:b0:
                    96:32:2c:c7:28:0b:b4:68:db:9a:dc:f8:2b:7a:3b:
                    d4:87:fd:64:d6:a3:76:a5:fb:80:e6:a0:00:f7:85:
                    4c:80:61:04:f7:0d:85:f8:da:9b:cd:79:8a:dc:f3:
                    22:de:8f:ba:d1:6d:03:84:e4:0c:aa:92:c5:c1:97:
                    94:2e:90:e5:55:dd:59:7a:2b:1d:9d:c3:4f:84:e6:
                    ca:5d:7f:56:38:e2:a0:fa:07:89:78:78:0e:8c:16:
                    4e:1c:c0:10:d6:bb:2a:65:6f:66:38:7e:93:70:6f:
                    d2:f8:8f:8b:92:bf:c4:6e:38:a9:cc:8b:f2:e2:50:
                    21:68:80:4b:02:0f:15:1f:06:e1:29:2f:7d:7d:da:
                    19:91:85:98:a7:e1:92:c6:e4:76:48:0a:08:32:55:
                    63:dc:6d:c3:23:de:42:d1:e8:ec:18:d6:71:53:dd:
                    c4:07:69:3b:26:ca:13:a8:68:8b:40:36:dd:e4:62:
                    ff:50:fa:48:96:eb:a8:39:e1:c0:b4:ba:18:9e:bf:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:02:64:D2:FC:4E:A3:31:54:22:8D:E8:DA:F6:FC:4E:14:93:E5:00
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:ba:96:07:d7:b6:73:9b:69:34:69:8d:16:76:43:85:2e:
         44:6b:17:ac:be:53:b5:a3:93:fb:5d:cc:60:58:85:a4:d8:dd:
         31:79:50:d6:dc:21:72:28:ab:ec:f6:75:70:57:21:95:aa:af:
         4f:75:5f:9a:39:61:a2:e9:c9:bd:14:b2:6d:da:12:3b:81:0e:
         15:76:6b:c3:da:76:33:bf:39:42:a8:d3:02:7c:0e:f8:f9:56:
         3d:df:24:10:6c:c9:6b:e9:b5:cc:27:4c:38:f7:3b:8a:17:65:
         bb:d4:1c:aa:66:8d:9d:75:cf:e5:86:3f:7d:5d:76:88:86:16:
         00:1e:08:09:88:ad:0c:70:a8:84:fa:39:b6:d1:f7:bb:d0:1f:
         a6:ed:c5:7e:4e:3f:63:23:b8:8e:64:5e:e5:3a:1e:3e:8f:bb:
         78:c9:4c:ec:52:2c:e5:6c:47:dd:f8:06:1a:06:cd:82:8f:26:
         cf:3a:36:28:5a:95:54:af:c9:c6:80:31:7b:67:3c:df:ac:ad:
         88:38:d4:49:68:bd:0f:03:52:69:cb:1a:62:d2:17:23:3c:dd:
         14:d9:20:7c:a8:5d:42:b0:99:24:90:4c:37:06:44:bf:50:bf:
         be:7b:7f:a0:ac:71:ee:5f:66:6c:a2:04:cd:d7:db:ef:35:70:
         c3:75:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:41 2025 by rpki-client