Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e35392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          NcZBle0XW2txngmz+DljyAkvzjw++0B+PLHY4q9xEJY=
Subject key identifier:   D5:9B:E6:4B:8D:40:B7:2B:A5:4B:E8:44:35:BC:52:2D:00:11:8B:1B
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       2B8369FEB433468A5D2B8A7662892ED111BAADAE
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:16 +0000
ROA not before:           Tue 04 Feb 2025 18:26:16 +0000
ROA not after:            Tue 03 Feb 2026 18:31:16 +0000
asID:                     27768
IP address blocks:        201.217.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:83:69:fe:b4:33:46:8a:5d:2b:8a:76:62:89:2e:d1:11:ba:ad:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:16 2025 GMT
            Not After : Feb  3 18:31:16 2026 GMT
        Subject: CN=D59BE64B8D40B72BA54BE84435BC522D00118B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:2b:28:db:7c:04:09:17:cc:9f:79:fe:27:
                    37:1b:e1:ea:30:30:bf:3b:33:c9:31:c4:6c:0d:b2:
                    f3:13:67:52:9a:da:76:27:51:fb:2f:e5:20:95:47:
                    3a:48:73:d5:64:42:ce:02:f0:48:1f:88:b5:16:ee:
                    9a:50:1d:1e:ec:2a:62:af:35:12:ca:c8:a6:12:9e:
                    97:cc:f2:d6:88:bd:85:32:86:2c:20:87:4b:9c:42:
                    36:4b:38:01:00:57:01:fd:23:9b:8f:62:b4:e1:2f:
                    7c:2b:e1:e8:e1:ba:47:f6:99:71:10:ea:6a:b3:cb:
                    15:20:8c:19:d3:9a:8b:5c:cf:56:cb:ef:10:30:9e:
                    2e:f8:9d:d0:aa:3a:ab:31:e8:72:30:fe:f2:22:fb:
                    9f:8d:17:3e:6b:48:31:a0:dd:d0:a8:25:d7:61:a1:
                    bc:d8:a1:69:ad:76:43:ad:4e:37:6c:f6:eb:62:a8:
                    86:d1:83:7b:f0:65:42:48:ae:ff:b9:b0:78:0c:c9:
                    99:9d:47:af:80:2b:d5:36:b2:d6:a5:f6:56:cf:d4:
                    f5:d6:2f:4d:c0:65:02:ee:a4:b7:8c:b8:e6:73:38:
                    de:70:c3:4c:90:23:77:dd:78:18:24:72:5e:a0:0b:
                    1d:a8:72:43:20:20:53:69:4e:47:63:9c:cb:eb:2b:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9B:E6:4B:8D:40:B7:2B:A5:4B:E8:44:35:BC:52:2D:00:11:8B:1B
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:c6:10:c6:96:35:02:76:35:c9:bd:49:f1:c8:20:35:e3:
         63:1a:7b:cd:b8:20:39:0b:93:8e:de:1b:e4:a1:e2:e3:34:22:
         25:c2:44:f0:4e:64:de:06:c8:35:c7:e8:0c:10:03:31:93:50:
         22:30:12:19:7a:66:f4:a1:93:9d:91:f9:1e:b4:69:8b:09:61:
         3e:54:1b:e1:7c:eb:d8:74:35:95:f6:80:94:77:85:05:58:00:
         00:5d:b4:35:72:43:d6:83:0f:34:6c:11:e5:40:c1:3a:af:b3:
         d1:6f:94:36:10:30:af:81:fc:e9:8f:a8:1c:2b:0c:b5:28:e7:
         54:30:c7:a9:49:89:5a:22:13:84:3e:ba:b1:59:72:21:5d:87:
         fa:f1:26:6c:d0:80:08:61:fc:c3:17:43:b2:61:9e:39:ef:5b:
         86:99:13:13:ee:81:26:63:f5:38:ba:76:4f:69:e9:72:c5:13:
         5b:ba:a3:2e:52:68:ac:4f:15:8b:a4:dd:4a:7b:c0:58:91:38:
         6e:eb:04:52:49:cb:46:4f:5f:6f:af:f1:17:4c:ed:f6:ac:47:
         b4:0e:12:73:d1:63:4a:b5:32:03:d2:b2:a8:9e:01:df:9d:70:
         ac:50:bf:a1:1e:ed:9f:d7:39:b4:cb:ef:e6:41:1f:43:c7:a9:
         3f:66:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:41 2025 by rpki-client