Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33362e302f32322d3234203d3e203237383636.roa
File:                     3230312e3231372e33362e302f32322d3234203d3e203237383636.roa (raw, json)
Hash identifier:          3DJRJ+Wm4vEe5nq4fyQJrn+PwgC3mfPswn+Fqi7AXps=
Subject key identifier:   96:76:9B:63:81:DA:19:DF:F3:5C:40:C7:77:20:48:60:6D:8D:00:9A
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       25179154AA2D02DA874B1E1B2F992F671C343D33
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33362e302f32322d3234203d3e203237383636.roa
Signing time:             Tue 04 Feb 2025 18:31:16 +0000
ROA not before:           Tue 04 Feb 2025 18:26:16 +0000
ROA not after:            Tue 03 Feb 2026 18:31:16 +0000
asID:                     27866
IP address blocks:        201.217.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 15:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:91:54:aa:2d:02:da:87:4b:1e:1b:2f:99:2f:67:1c:34:3d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:16 2025 GMT
            Not After : Feb  3 18:31:16 2026 GMT
        Subject: CN=96769B6381DA19DFF35C40C7772048606D8D009A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:aa:87:9c:ca:9f:07:c1:3c:9e:a8:53:b7:
                    46:f6:6a:de:69:21:24:38:8e:fa:96:e0:5d:03:12:
                    cf:7b:a5:f2:ba:5b:82:f3:bf:89:ae:34:ae:f3:28:
                    58:d0:88:81:99:5f:94:5d:eb:1c:b0:2b:a2:3c:5f:
                    ea:be:c8:0f:15:70:02:1c:df:d7:68:6d:36:d8:e7:
                    84:19:aa:0c:48:44:f2:e1:c7:99:f7:e8:e7:a5:ef:
                    c5:16:74:67:01:59:5d:dc:f1:69:1d:f8:dc:df:3e:
                    b9:65:04:5c:7f:7d:c7:fb:92:8f:77:da:4f:34:0b:
                    56:0e:0f:8e:51:be:b3:ca:01:5d:e3:52:d3:03:86:
                    3f:b2:e2:f3:af:08:d3:be:49:eb:ef:36:73:61:ba:
                    17:a0:33:26:c6:87:d1:26:87:a8:89:b2:8f:7e:20:
                    be:0b:66:e8:31:4b:fc:ba:2b:8b:24:b7:d3:36:df:
                    9c:bf:8f:ba:8f:5a:44:26:6b:78:fe:76:cb:f8:59:
                    a9:f2:13:68:31:1c:8e:d8:2f:11:83:9f:bb:fd:59:
                    2d:a9:12:42:da:dc:45:d0:97:2f:dc:41:b2:d0:4b:
                    1d:9c:f0:cc:98:15:fe:40:91:1a:52:7a:02:3b:ee:
                    53:81:bd:a1:85:b1:02:19:bf:0a:25:bf:3c:39:03:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:76:9B:63:81:DA:19:DF:F3:5C:40:C7:77:20:48:60:6D:8D:00:9A
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33362e302f32322d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:fb:db:c0:9c:b0:cf:94:4d:3b:a1:94:74:0c:bb:b0:c8:
         2b:33:f2:b9:45:86:08:0d:fe:47:d4:91:64:f2:a4:d1:48:99:
         5f:d2:a9:59:85:9d:03:ba:4a:98:fd:63:e4:4a:2b:9a:fe:5e:
         a3:d2:49:56:ff:aa:02:f9:d4:7f:0a:a8:09:b9:fc:67:48:c6:
         39:99:78:57:85:16:02:57:e6:36:dc:78:19:67:bd:44:18:44:
         f2:23:a7:01:f9:5b:9f:0d:d1:27:94:d8:f3:d4:23:65:8e:39:
         74:5d:d6:2e:3d:48:ed:f5:70:db:a1:83:17:40:3c:54:88:c3:
         43:a9:b2:61:f5:12:31:b0:b1:6d:29:37:c4:f8:50:ed:96:88:
         17:02:98:be:b4:75:27:9b:33:cc:86:52:0f:1a:aa:e9:23:58:
         66:9a:c3:86:5b:18:2b:80:d7:f3:f3:bc:5d:f1:ff:0f:b2:98:
         53:ea:c4:f6:cc:59:dc:e2:c3:df:d4:f3:d6:ce:6b:b8:57:26:
         0c:90:49:9b:f6:19:ef:b1:b7:11:c7:b8:ec:c9:48:53:30:5f:
         2d:41:95:25:06:a6:cf:f0:a8:b7:67:3f:e7:fc:2b:fa:b4:71:
         5b:2a:85:9c:5d:16:7f:f1:59:57:b2:0c:7e:ce:e9:9d:df:10:
         cc:6a:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:42 2025 by rpki-client