Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34382e302f32342d3234203d3e203237383636.roa
File:                     3230312e3231372e34382e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier:          8ZP8aW06zJwxtW0Jsg1AG/d5LV0LdcOnq0Nqclu0q6E=
Subject key identifier:   19:40:B7:12:39:F5:82:7D:27:21:74:BD:77:68:73:02:49:5D:2C:DE
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       6531B13E6D73A26AE4EF8E8A032E23946F88473C
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34382e302f32342d3234203d3e203237383636.roa
Signing time:             Tue 04 Feb 2025 18:31:14 +0000
ROA not before:           Tue 04 Feb 2025 18:26:14 +0000
ROA not after:            Tue 03 Feb 2026 18:31:14 +0000
asID:                     27866
IP address blocks:        201.217.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:31:b1:3e:6d:73:a2:6a:e4:ef:8e:8a:03:2e:23:94:6f:88:47:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:14 2025 GMT
            Not After : Feb  3 18:31:14 2026 GMT
        Subject: CN=1940B71239F5827D272174BD77687302495D2CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:95:b4:c5:d0:60:52:3c:47:bf:d4:44:5b:
                    81:86:b6:89:ee:18:74:8f:6a:84:69:aa:23:a5:28:
                    26:bc:5e:77:c7:b5:ea:50:04:4d:51:d4:79:36:e5:
                    bb:c2:4e:b3:54:82:df:d1:e2:86:e7:ce:b8:4b:2f:
                    b8:d6:58:8a:54:02:00:e6:1f:2b:ea:0d:cd:9f:c3:
                    bf:7b:b0:c5:9a:6a:7f:c9:73:fe:98:0d:65:ef:08:
                    c8:3f:5e:80:a3:61:b8:f2:ce:ed:89:09:10:c1:5c:
                    79:fe:c9:5a:c8:d1:58:51:84:c6:55:f2:38:aa:91:
                    55:4c:df:4b:84:4a:40:a9:e4:9c:86:1a:0e:fd:8f:
                    57:b1:23:11:5e:88:25:e4:9e:35:81:f7:f3:cf:4b:
                    fa:d1:af:df:2d:45:09:3d:db:8b:b6:ac:9b:ea:7b:
                    1e:ab:d3:9a:62:46:17:72:60:1e:85:a6:95:4d:03:
                    96:6a:84:a7:e4:ca:b3:12:1b:f8:64:cc:d0:b9:79:
                    07:0f:1d:cf:0e:96:e9:b2:13:e9:45:e3:ba:11:f9:
                    9f:3e:70:85:2b:17:d6:19:80:2a:ba:dc:94:f8:68:
                    f5:6f:1b:c0:27:8d:34:32:e1:3f:ac:bd:8c:b6:f3:
                    df:7c:c5:f7:7b:be:ca:57:09:cd:55:f2:4f:25:d4:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:40:B7:12:39:F5:82:7D:27:21:74:BD:77:68:73:02:49:5D:2C:DE
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34382e302f32342d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d4:6d:4e:0e:4f:92:ea:86:54:db:44:27:ad:f1:e6:6c:ea:
         1b:3a:5c:76:2b:a2:19:1f:46:42:b4:92:ae:ab:dd:b3:36:6a:
         24:17:7e:ac:56:cc:94:f1:70:24:43:81:e9:e0:ca:34:ce:1c:
         e8:13:17:43:81:81:7a:87:04:e6:62:ba:b5:fc:bc:71:e9:4b:
         ce:d9:ee:f7:13:db:46:42:2a:2e:51:7f:c4:54:93:df:e1:6d:
         df:4c:e8:9c:55:94:2b:cf:54:de:1c:81:4a:75:36:f8:75:0b:
         85:0b:90:68:ef:ce:6f:c6:10:22:7d:f3:35:68:62:33:7b:e6:
         b4:71:49:e4:6a:38:c7:70:2d:ba:83:b9:26:e5:28:fe:dd:bc:
         d6:ce:1f:3d:3e:0f:34:4d:38:87:52:35:f1:b9:16:bb:50:46:
         8a:fc:37:f3:10:c4:2b:cc:1b:42:13:39:f6:59:20:77:c6:04:
         40:96:de:83:83:f2:e7:6e:fa:29:0a:c7:de:4d:3b:9d:dc:92:
         54:50:34:cb:25:b7:08:1d:53:f8:13:61:0f:e7:28:ba:3b:1c:
         24:d4:8d:4a:84:f6:a9:2b:98:99:c4:b7:a0:23:ef:dd:ac:9d:
         fd:0b:70:67:d1:2f:bd:c6:53:9e:a4:ee:49:f6:d9:91:a6:50:
         bd:b2:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:51:37 2025 by rpki-client