Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa
File:                     3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier:          CpLsy9uTs2+3Zp1fbItVKdHKdl510QEXkOut7E5Sa3c=
Subject key identifier:   2F:24:50:10:6F:C3:EA:0B:07:C8:50:39:EE:D7:3D:A4:A8:5E:55:B7
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       59A9A10EFB96E49AD76EF984F9B5283C5784F463
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:02 +0000
ROA not before:           Sun 16 Feb 2025 06:35:02 +0000
ROA not after:            Sun 15 Feb 2026 06:40:02 +0000
asID:                     19373
IP address blocks:        201.161.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a9:a1:0e:fb:96:e4:9a:d7:6e:f9:84:f9:b5:28:3c:57:84:f4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:02 2025 GMT
            Not After : Feb 15 06:40:02 2026 GMT
        Subject: CN=2F2450106FC3EA0B07C85039EED73DA4A85E55B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:e7:d0:d5:5f:35:37:15:c9:d3:50:0f:92:
                    13:c4:4a:c7:f3:57:14:39:8d:4a:d6:c1:c7:15:a6:
                    b1:55:b3:fe:2e:d1:cb:ac:1f:c5:5e:b1:79:5b:48:
                    d9:06:d8:58:92:bb:b9:1d:7b:b7:72:30:44:6a:25:
                    73:a5:7c:28:56:64:f2:35:96:c2:64:72:4c:53:fa:
                    55:03:9e:18:90:58:69:9e:f9:84:ed:b8:a3:92:e9:
                    f4:c1:22:56:ed:6d:73:1f:69:23:db:f6:f8:47:47:
                    06:8c:48:49:a3:95:41:d3:e4:9b:55:ea:20:55:78:
                    57:b3:26:25:0a:2e:c2:8b:01:c0:4e:77:33:16:3e:
                    cf:1b:2c:68:69:4a:8f:7c:b4:15:10:d9:56:c3:99:
                    60:7e:10:32:b7:33:ab:e7:c4:dd:39:89:a8:ea:2c:
                    c5:60:cd:9f:c7:04:b6:df:92:a5:3a:cb:37:57:c6:
                    ca:78:22:23:d4:1a:ec:96:e2:56:0a:5d:db:c1:e8:
                    54:e6:3a:96:71:e6:2f:8e:1b:4d:2e:75:5c:4b:9d:
                    cb:54:e3:23:45:68:98:e4:58:28:c2:f7:e3:0c:28:
                    64:82:e6:30:5e:ea:69:07:df:0e:d6:6a:5b:f8:d8:
                    ab:dd:c0:d1:8a:9a:2a:8b:bb:ba:d2:fd:bc:dc:82:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:50:10:6F:C3:EA:0B:07:C8:50:39:EE:D7:3D:A4:A8:5E:55:B7
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.161.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:2d:0d:18:75:0f:84:b9:fd:81:c6:4e:b9:03:1d:bf:ff:
         17:5d:f5:df:81:74:57:84:76:f2:17:9f:d9:19:8a:71:c4:db:
         64:f3:ad:d9:42:47:ec:88:3e:6e:9f:14:6b:a6:6c:6b:d5:76:
         86:9b:85:99:ca:2a:56:67:55:4b:cf:1a:0a:87:be:cc:f8:db:
         9e:1c:f9:88:99:a6:78:22:a9:7b:f0:7d:a8:0b:f0:ee:48:d3:
         bc:fb:9f:cd:74:2b:7a:62:70:08:98:c2:0f:af:83:de:a4:29:
         d6:59:9f:eb:04:c7:12:d1:64:88:ee:bc:be:c8:e7:b4:cd:94:
         ba:f2:ff:e5:45:7b:de:e2:3e:f2:4e:26:9f:4d:b1:00:f0:16:
         c8:72:9e:11:6c:ce:cd:5b:6f:f1:cc:72:d1:cb:53:d6:54:ae:
         3b:81:74:d0:d2:82:35:4c:2d:29:32:ec:43:d5:48:5f:4a:20:
         52:c8:80:ca:70:1b:5e:5d:fa:18:8a:27:e8:75:f1:3c:2b:d1:
         cf:c2:ac:55:7f:53:c9:a7:33:91:34:4b:24:c1:dc:9e:a5:80:
         e3:d4:13:09:f5:ab:75:4d:8d:37:a8:37:84:2c:55:7c:fe:3c:
         40:3b:f6:65:d5:54:bc:80:93:69:43:b0:8f:24:6a:7c:34:59:
         fd:1f:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:15:01 2025 by rpki-client