Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35302e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e35302e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          7bJ8HjgKfwBU81lv+mrnx47JPArNr9aG9yKrgsLDAFs=
Subject key identifier:   A0:EE:64:EC:49:A4:20:BE:EB:AE:C4:36:43:46:41:FD:10:9E:EF:7B
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3C1E6F78AFCAC71FAEA2D9021147732370FABFF5
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35302e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:17 +0000
ROA not before:           Tue 04 Feb 2025 18:26:17 +0000
ROA not after:            Tue 03 Feb 2026 18:31:17 +0000
asID:                     27768
IP address blocks:        201.217.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1e:6f:78:af:ca:c7:1f:ae:a2:d9:02:11:47:73:23:70:fa:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:17 2025 GMT
            Not After : Feb  3 18:31:17 2026 GMT
        Subject: CN=A0EE64EC49A420BEEBAEC436434641FD109EEF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:1d:a8:86:b3:6e:a5:38:df:99:f2:98:c4:
                    de:86:eb:ea:03:43:ad:f2:b6:2e:55:50:f6:3b:2c:
                    bb:aa:eb:a2:89:94:42:15:fe:46:c3:00:17:ab:1a:
                    d4:0f:28:c7:6a:52:ec:1b:b3:d3:51:83:06:de:a6:
                    f5:46:24:2e:a7:b0:00:6b:49:52:35:a1:92:44:73:
                    8f:3b:92:f9:44:08:5f:da:28:62:b7:7e:14:34:34:
                    ae:85:bf:2b:2e:9c:89:33:25:0b:a6:f0:55:82:0b:
                    29:56:13:21:6b:24:89:16:cd:b9:af:0a:f0:14:4c:
                    39:2e:90:92:ed:4d:ef:bf:2e:d1:75:f7:88:be:4c:
                    94:ea:e2:29:59:b8:e5:47:5f:1e:99:5c:45:36:38:
                    47:c0:08:6c:52:6c:7f:31:76:b1:d7:2f:40:79:56:
                    40:f2:ac:04:4a:38:06:86:14:e9:24:b6:50:6e:bb:
                    7b:ca:a9:c0:7c:db:48:23:a9:ee:9e:b2:d6:1c:d6:
                    6f:d9:6a:0e:46:c7:61:27:db:65:7b:98:57:41:f8:
                    1f:b7:d0:3e:68:04:19:10:f5:d7:7d:2d:18:ee:a8:
                    b6:f5:f3:4f:ac:9f:c0:7b:b7:77:0b:14:a8:b8:2f:
                    14:d6:2f:0f:f9:fd:f6:23:a2:5a:12:23:c6:d8:5e:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:64:EC:49:A4:20:BE:EB:AE:C4:36:43:46:41:FD:10:9E:EF:7B
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35302e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:c8:66:31:b4:f4:49:2a:32:26:e2:10:30:ce:7e:0d:df:
         66:1e:89:64:05:34:c2:c4:81:88:cd:98:e9:59:7e:aa:aa:75:
         62:1e:10:1e:d0:14:d1:dc:4a:67:c0:b4:e5:72:dc:44:25:3f:
         92:37:b8:ec:0d:1d:74:cc:60:2a:6d:48:cc:b7:e9:20:60:01:
         2e:e0:54:b4:1a:6b:68:10:e0:2b:47:db:5f:80:46:4e:d6:d8:
         d4:ec:0e:65:4a:dd:2a:5f:b4:ee:bd:d4:54:7b:ea:62:64:2e:
         91:6f:ce:0b:a2:44:74:26:25:23:e7:4a:aa:72:2c:76:09:fe:
         97:95:47:80:26:c2:c8:3c:dc:52:24:c2:bf:e6:e2:c3:c8:c2:
         9d:5a:0a:ce:ce:21:58:c9:b8:dd:de:ac:26:3a:79:e6:4c:97:
         e9:f3:5a:a6:7f:73:0f:7b:3a:ae:3e:52:94:e3:11:75:ee:ac:
         91:32:c2:85:43:3f:59:4f:31:60:6a:44:20:6b:60:b8:53:a5:
         c0:80:64:41:2b:7e:4c:06:be:3d:32:da:d0:f2:9c:77:4c:fd:
         a8:d8:bd:3a:ba:b7:eb:1a:7d:3c:70:11:e5:75:1c:42:5c:c1:
         cb:bb:8b:be:fb:c2:70:c9:4f:1a:f6:ef:8d:7b:da:ab:2c:18:
         37:75:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:47 2025 by rpki-client