Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa
File:                     3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          nxmT6dO5naWtX2jFezQUkHM/g6K2jVLgZjrnGXMy7po=
Subject key identifier:   13:88:A6:B7:1B:7A:B2:3A:6E:10:3E:F1:38:20:24:23:A3:DD:C2:6B
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       4FC4296044E544036B0C5F6DD7D9FE4F54D5C166
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa
Signing time:             Mon 19 May 2025 20:19:42 +0000
ROA not before:           Mon 19 May 2025 20:14:42 +0000
ROA not after:            Mon 18 May 2026 20:19:42 +0000
asID:                     28539
IP address blocks:        201.159.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c4:29:60:44:e5:44:03:6b:0c:5f:6d:d7:d9:fe:4f:54:d5:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: May 19 20:14:42 2025 GMT
            Not After : May 18 20:19:42 2026 GMT
        Subject: CN=1388A6B71B7AB23A6E103EF138202423A3DDC26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:f5:c1:c4:41:43:98:04:8c:b9:22:f4:8d:
                    dd:12:e7:80:72:34:0b:e6:33:c5:7c:12:77:76:fa:
                    5f:01:96:51:48:41:d7:ac:07:dc:c2:9f:a4:52:b5:
                    d6:dc:ab:5b:f4:8e:2a:4f:43:ab:85:41:19:27:d2:
                    68:db:bf:08:a6:89:d9:fa:9a:63:6c:13:fb:52:eb:
                    74:66:a2:84:db:05:f5:3a:be:1b:a8:d2:36:98:a9:
                    9b:4f:a0:15:6a:ba:34:01:3c:97:77:2b:23:bf:3a:
                    1e:37:aa:98:a7:c7:9f:94:9d:f6:9e:67:13:50:e6:
                    ed:c5:f1:e1:db:ea:6b:bc:2c:66:fe:1e:c8:64:99:
                    0f:1b:98:b8:fd:76:3d:42:92:cf:dc:82:1b:35:12:
                    5c:34:3a:fa:78:22:d5:a4:18:81:aa:e0:80:f9:3d:
                    94:56:af:30:fb:ae:a9:6d:c7:b8:9e:6f:7b:78:93:
                    65:91:93:6f:de:41:b8:ce:68:f6:df:8e:9c:05:a9:
                    dc:0d:19:23:27:ca:bd:24:8c:65:91:f1:19:3b:f8:
                    f8:93:de:4c:37:77:82:2d:13:53:00:05:60:af:26:
                    ee:ac:4d:a7:80:45:2e:80:47:f7:bc:77:22:b9:31:
                    ed:5c:78:3d:fb:2b:b8:ff:10:e8:94:64:11:c0:0a:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:88:A6:B7:1B:7A:B2:3A:6E:10:3E:F1:38:20:24:23:A3:DD:C2:6B
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130382e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:62:62:52:70:06:19:3e:bb:75:e6:84:43:8a:9b:f0:fc:
         09:64:08:8b:28:27:82:10:ef:d3:5c:07:2d:9f:3d:fe:57:ca:
         db:3b:b3:0f:47:6d:5c:e1:db:63:c5:f0:d8:34:5e:8f:90:9d:
         e0:27:c7:3c:8e:26:cd:79:5a:4d:c0:2f:fd:16:43:0a:50:d3:
         a7:ac:66:7c:72:5f:d7:42:e7:78:e1:2e:4a:a0:42:01:5e:86:
         8a:4d:b6:2f:ab:02:41:b3:11:77:31:de:a0:cf:5b:d2:1d:c0:
         59:72:25:0d:d0:94:3e:3f:db:2f:22:c2:ab:af:6b:65:73:f4:
         96:a2:f8:fa:2f:17:3b:38:43:1c:f7:8e:e8:f1:5a:58:53:13:
         f9:da:61:53:8b:a2:28:f8:46:66:55:e0:34:9c:96:63:26:40:
         e5:0f:4f:d9:90:a3:b6:b9:8c:46:24:43:db:b6:48:c2:87:34:
         2c:ab:a3:25:71:ed:13:13:85:2f:43:12:73:7f:e5:ed:66:8f:
         5f:c4:88:4a:80:89:7f:06:0d:13:02:44:1e:42:12:44:4b:81:
         8b:62:4f:29:4e:be:91:5e:f2:db:d8:80:19:2b:36:c2:5c:ed:
         f8:31:e8:67:5f:af:f1:75:bb:f4:49:b3:28:15:53:b8:4a:37:
         55:4e:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:11:26 2025 by rpki-client