Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa
File:                     3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa (raw, json)
Hash identifier:          sB/+RpLivdyBMRJGvlftNz0vwxPn2spHfo9Ve8XFvfM=
Subject key identifier:   A4:B2:12:0B:7D:11:51:62:10:64:45:0C:93:90:12:1C:1A:B6:F2:62
Certificate issuer:       /CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
Certificate serial:       1FCFA3FACD483E079CBF41EC5CDDD328591BB4AE
Authority key identifier: 51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa
Signing time:             Tue 04 Feb 2025 18:00:44 +0000
ROA not before:           Tue 04 Feb 2025 17:55:44 +0000
ROA not after:            Tue 03 Feb 2026 18:00:44 +0000
asID:                     265799
IP address blocks:        201.182.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:a3:fa:cd:48:3e:07:9c:bf:41:ec:5c:dd:d3:28:59:1b:b4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
        Validity
            Not Before: Feb  4 17:55:44 2025 GMT
            Not After : Feb  3 18:00:44 2026 GMT
        Subject: CN=A4B2120B7D1151621064450C9390121C1AB6F262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:ea:d2:8e:fa:be:99:88:8e:ac:f3:18:9c:
                    c7:73:6f:9a:cf:02:2b:42:25:26:fa:36:34:4e:5e:
                    d8:1c:ea:19:93:7e:b0:da:f5:47:21:96:b0:9a:f3:
                    69:ea:cf:df:23:f4:96:a9:fb:33:5a:b8:7a:b0:45:
                    77:b6:a1:e4:80:86:e6:1e:37:56:ce:00:c8:70:a0:
                    a7:2f:04:b4:7b:06:03:f6:20:42:a5:85:43:5e:5e:
                    6f:48:95:7a:9b:dd:53:11:85:94:a6:e2:b3:0a:e5:
                    d0:02:cd:ac:33:85:af:14:b6:af:5c:ba:d1:ba:ce:
                    36:f4:e1:5d:fc:1e:a0:8b:24:29:a0:fa:33:a6:87:
                    56:c7:69:9f:98:aa:84:0b:0c:cf:ef:e0:bf:be:ed:
                    37:e4:77:4c:49:60:8b:8c:b5:4f:95:82:1d:fc:00:
                    ce:68:af:84:ce:23:27:4f:56:fe:de:a7:84:16:a3:
                    3e:6a:76:58:36:96:cf:be:86:61:f7:a8:dd:5b:ff:
                    84:c4:a4:ec:69:7a:27:95:f6:49:26:6f:c0:24:ad:
                    d6:ac:3a:2a:67:0f:57:c0:70:61:d2:4f:50:f4:de:
                    3f:2b:63:ee:a0:6f:62:b0:8c:d7:52:42:d8:aa:81:
                    94:f1:9e:ff:f0:ad:27:c4:a6:b0:21:48:e5:16:b8:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:12:0B:7D:11:51:62:10:64:45:0C:93:90:12:1C:1A:B6:F2:62
            X509v3 Authority Key Identifier:
                keyid:51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:72:ef:ee:74:3b:9e:a2:b7:e4:da:b8:00:24:c1:4d:6a:4a:
         ba:bc:21:89:21:1b:ce:25:c9:30:db:5c:b1:08:f9:88:63:4f:
         c7:51:09:6a:ae:91:a1:14:c8:d5:83:ce:2b:58:8f:b0:65:71:
         43:16:e6:b4:51:14:97:f2:c8:72:9f:da:fe:9d:f3:53:59:a5:
         8a:ba:e6:84:98:ff:ec:fd:44:91:88:ea:bd:b8:2c:cc:66:5d:
         9e:f9:88:a3:bc:3d:b9:de:da:5d:d1:a1:b5:02:10:e7:75:3b:
         e8:28:9d:57:61:f2:ad:c5:61:ec:b6:51:e9:91:56:98:bc:4d:
         ee:b3:7e:ad:f8:d7:a7:d5:0f:a6:ec:2d:f3:58:6d:c9:f2:a4:
         b1:48:43:8d:db:0b:be:0e:98:b0:30:99:9c:e0:6e:7c:0c:42:
         42:f1:1e:18:bb:70:13:c6:06:80:c0:6d:f7:cf:b3:29:8a:5f:
         73:88:84:91:ef:73:12:f6:28:aa:a0:1d:fc:5a:01:22:59:37:
         4f:1a:b1:35:33:18:1e:ac:51:e2:16:d5:41:87:90:bf:d7:af:
         02:33:28:c0:e3:1a:65:71:52:02:9b:bf:ad:26:7e:e3:8b:8d:
         d3:0f:5a:ef:75:03:58:2e:0e:58:40:31:20:6a:9f:2c:9f:f7:
         1d:33:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:10:34 2025 by rpki-client