Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e39362e302f32312d3234203d3e203238353339.roa
File:                     3230312e3135392e39362e302f32312d3234203d3e203238353339.roa (raw, json)
Hash identifier:          3mo8wIs2j36geTy58HCLC8L/XnjSB2yt3nFtRXlkF3o=
Subject key identifier:   55:77:3C:DE:7C:55:81:BC:35:2C:11:C9:60:EE:6B:EA:D3:0D:03:63
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       4AB05D9CE7630B50AA87E202B983702BE5EBAC
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e39362e302f32312d3234203d3e203238353339.roa
Signing time:             Mon 19 May 2025 20:19:42 +0000
ROA not before:           Mon 19 May 2025 20:14:42 +0000
ROA not after:            Mon 18 May 2026 20:19:42 +0000
asID:                     28539
IP address blocks:        201.159.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:5d:9c:e7:63:0b:50:aa:87:e2:02:b9:83:70:2b:e5:eb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: May 19 20:14:42 2025 GMT
            Not After : May 18 20:19:42 2026 GMT
        Subject: CN=55773CDE7C5581BC352C11C960EE6BEAD30D0363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:d4:6f:73:d6:e7:83:ec:6e:3f:fd:08:02:
                    78:2d:b6:25:2b:cd:83:d5:e8:77:7d:f2:a0:c6:01:
                    5e:c9:3a:e8:e4:f3:bf:bd:50:fc:42:a8:56:70:a6:
                    61:1b:66:de:e8:49:18:7d:18:03:a4:f2:0c:cb:62:
                    01:81:41:3f:66:f5:6c:da:52:16:bb:1d:75:2f:c2:
                    45:fd:3e:5b:25:1e:b4:d1:a7:80:78:6b:65:ca:42:
                    e4:76:b0:48:a1:f7:78:9f:2a:ad:f5:9c:ad:ea:e3:
                    62:dd:7e:56:68:4d:26:ed:63:ed:9d:2f:bb:39:25:
                    98:c6:48:80:f4:7a:af:e8:2e:34:1c:ab:a6:72:0c:
                    33:65:3c:f9:fa:fd:a2:51:8d:a7:e9:10:6b:16:77:
                    7e:d0:0e:b4:c7:50:ea:b7:52:63:61:2c:d9:c0:f4:
                    27:93:dc:0c:7e:7d:fe:bb:fd:76:ce:99:0a:a8:86:
                    e7:5a:44:e4:3e:f6:7d:06:b1:84:0a:51:f3:f6:54:
                    36:a4:12:1f:ae:86:da:0b:f2:9a:f8:39:c0:a1:55:
                    73:d7:ff:dd:9c:fc:3f:10:58:45:7f:df:74:f3:5e:
                    84:88:33:05:98:64:f6:a1:b1:6a:19:b0:2a:b3:ef:
                    65:66:35:3f:04:60:a8:3c:4b:5d:48:b3:5c:e3:b1:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:3C:DE:7C:55:81:BC:35:2C:11:C9:60:EE:6B:EA:D3:0D:03:63
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e39362e302f32312d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:72:52:da:71:1f:30:93:cf:b3:f6:c2:4d:3f:b9:3b:77:
         da:66:b9:fa:68:a3:15:1e:1f:26:e6:5e:e4:c6:b4:e5:b3:75:
         8a:97:6c:30:d5:3f:2d:97:39:ea:b4:cd:b4:47:35:88:dd:d3:
         a5:ca:ed:5c:f6:dc:65:6d:6c:1b:32:77:45:00:14:a1:12:d5:
         72:35:42:42:a6:d8:99:be:b5:4e:5f:8e:08:ff:b5:ba:8e:2b:
         9e:c6:e4:df:52:9d:b6:ab:85:42:d0:f3:bf:a0:b3:bc:07:f7:
         78:4d:96:01:3c:d1:4e:1f:64:27:90:58:14:27:16:64:49:42:
         34:17:92:71:cb:ed:64:08:23:f3:9a:75:8b:d2:0a:6f:3b:04:
         15:28:5f:f6:34:51:78:3b:c6:09:9f:5c:85:5c:59:d1:e1:3a:
         a8:dd:a9:91:a4:73:ad:b4:fa:81:0b:bc:22:8f:2f:17:46:c3:
         da:85:cf:34:79:54:03:91:68:1a:11:a5:8e:08:b8:56:8f:12:
         92:61:29:82:e9:6c:e1:ef:5a:19:dd:9c:3c:98:8e:81:9f:d0:
         57:15:3d:3c:f2:46:8a:af:30:d2:71:2e:71:e1:db:23:84:a9:
         60:76:d4:6a:19:6c:65:b6:b9:31:17:21:d2:c3:97:ac:73:be:
         7f:b0:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:07:01 2025 by rpki-client