Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          4GNK8nlOPuEckjzTVkgkZYf/RfikYzCh90faa7DhjVQ=
Subject key identifier:   33:90:84:EC:31:63:B4:28:6C:2A:A9:CB:62:53:50:9F:89:12:94:58
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       43C5C992FA8822CDA13D8078C5CD992E45512518
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:18 +0000
ROA not before:           Tue 04 Feb 2025 18:26:18 +0000
ROA not after:            Tue 03 Feb 2026 18:31:18 +0000
asID:                     27768
IP address blocks:        201.217.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c5:c9:92:fa:88:22:cd:a1:3d:80:78:c5:cd:99:2e:45:51:25:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:18 2025 GMT
            Not After : Feb  3 18:31:18 2026 GMT
        Subject: CN=339084EC3163B4286C2AA9CB6253509F89129458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:65:16:b6:06:db:c5:5e:01:a8:74:37:81:
                    e7:46:60:62:65:37:af:74:2e:76:9b:c1:1d:e9:75:
                    3e:03:b2:c6:96:30:53:01:14:b9:59:fc:f2:13:25:
                    13:6a:06:a6:56:46:71:97:c0:3b:6d:18:27:da:81:
                    49:70:65:89:98:b3:cd:f3:79:58:8e:c5:b9:ea:76:
                    27:f0:0a:99:83:0b:8e:ef:84:8c:4c:4a:8f:c6:8a:
                    03:77:b0:9d:ce:33:0d:c8:6d:55:f1:46:26:32:13:
                    53:cb:fb:1b:24:41:e5:02:6a:4d:67:f3:4f:01:59:
                    dd:96:9c:fc:6d:1a:60:0d:ca:2e:a1:ca:d9:62:0d:
                    6c:54:29:c9:16:c9:99:73:e3:8a:bd:7b:ee:e0:10:
                    88:b8:20:9f:af:70:52:82:b4:bd:cf:1b:60:cb:4e:
                    15:fc:f4:95:df:3e:36:ea:dc:d4:14:9d:ad:e0:89:
                    55:54:5e:b9:c9:8e:d4:5c:a4:00:fb:a7:05:00:a6:
                    44:5f:0b:2f:7c:8b:72:2f:11:5f:5b:e1:b8:4a:0e:
                    33:ca:c8:73:2f:6a:71:08:e7:f1:f5:60:2b:b1:17:
                    80:69:e4:42:5a:5d:93:f3:de:1a:9a:e6:f3:92:c6:
                    d9:e7:25:8e:c4:1e:24:08:6e:7e:47:bf:e0:c7:53:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:84:EC:31:63:B4:28:6C:2A:A9:CB:62:53:50:9F:89:12:94:58
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:78:e0:bd:52:89:1e:3f:c6:a4:cf:67:83:53:92:46:cc:
         71:96:7f:2e:61:2e:4e:c5:8d:ad:3e:43:30:2b:fb:88:71:81:
         94:d5:0f:bc:c9:b5:fb:b5:43:99:37:04:05:55:f8:9b:53:1b:
         20:b1:40:3a:72:89:b4:b1:b7:3b:20:c0:cc:85:36:f1:1c:79:
         b8:eb:b6:31:f3:56:82:b9:c4:07:32:c7:b3:16:aa:a6:d5:85:
         2c:26:70:eb:8e:eb:25:0e:98:2c:75:5b:52:e7:0d:d3:0c:c2:
         52:79:49:3b:e6:00:fe:d9:5c:dd:4e:85:d4:b5:30:06:65:66:
         f9:63:49:8c:48:d3:1d:5d:aa:bc:76:20:e2:1b:fd:a6:18:b6:
         ca:32:5b:22:23:e5:ed:c0:96:6c:03:5c:45:78:20:7e:9a:50:
         94:e0:47:22:f5:73:d3:a8:a9:a0:92:68:2f:68:f5:4e:c0:81:
         92:73:0b:b0:27:b5:96:c4:cf:f7:c9:22:db:bf:af:79:53:ea:
         b8:2f:f6:66:c4:81:c0:f3:f2:80:c5:12:fb:12:61:87:91:14:
         08:55:c0:71:0f:6b:2b:05:b3:d0:a9:02:3b:7f:39:8a:ef:55:
         18:c7:3e:af:96:ee:bd:1c:d2:c2:95:b9:16:f3:a0:4d:95:e2:
         87:36:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:46 2025 by rpki-client