Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa
File:                     3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          ip2xfKtaElh8X42KqvjfnZbb2v8g+MI8dXwMWZmc02o=
Subject key identifier:   40:A6:A3:28:17:F1:AA:E0:A9:67:97:3B:09:2C:B3:7D:D9:E7:44:5A
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       56C866D1DA1843D90635EC6F85AABA14DD3905DB
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:12:55 +0000
ROA not before:           Tue 04 Feb 2025 18:07:55 +0000
ROA not after:            Tue 03 Feb 2026 18:12:55 +0000
asID:                     7418
IP address blocks:        201.220.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c8:66:d1:da:18:43:d9:06:35:ec:6f:85:aa:ba:14:dd:39:05:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:55 2025 GMT
            Not After : Feb  3 18:12:55 2026 GMT
        Subject: CN=40A6A32817F1AAE0A967973B092CB37DD9E7445A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:ea:32:95:77:38:fa:f2:cd:85:d8:32:2e:
                    cc:3b:cc:b7:0b:8c:3f:59:fe:fe:60:3e:f7:d5:ef:
                    9a:10:37:c7:fe:be:c0:52:3e:1d:f7:ee:16:2a:2e:
                    92:a1:ab:69:4a:9f:d0:c6:20:82:bd:19:0a:e0:b1:
                    80:19:9e:fa:4e:7a:e2:4f:50:74:01:62:11:b2:0a:
                    54:b7:16:7b:fa:54:fe:08:22:52:3c:53:e2:49:5f:
                    d5:cc:62:05:6b:9a:95:db:83:ba:1e:bb:d1:91:16:
                    6b:8d:21:39:4d:4d:fc:01:cb:9f:6e:0a:83:6d:cb:
                    15:80:3d:43:0b:18:a0:41:6d:d6:be:1b:d1:c3:69:
                    1e:88:20:68:1d:7f:ed:d8:52:43:76:8a:e3:c6:73:
                    e3:b4:ef:b2:60:b5:6d:de:2a:fa:48:95:99:da:bc:
                    32:86:74:3f:95:64:59:d7:ab:48:9e:54:9a:f5:c1:
                    7d:b9:c3:c7:0c:e4:9c:e5:cf:83:72:65:8f:77:4b:
                    79:8b:69:a1:6d:b3:56:85:ca:c0:f4:e4:4b:4e:1c:
                    0e:fb:3d:f0:a4:bb:fa:39:8a:73:a7:7a:e3:f0:b7:
                    cb:25:35:bc:bc:a1:50:d5:59:3a:03:0d:68:e9:2e:
                    d6:e3:f0:16:a5:c8:0e:69:0f:d7:5f:f7:5b:e3:00:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A6:A3:28:17:F1:AA:E0:A9:67:97:3B:09:2C:B3:7D:D9:E7:44:5A
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:29:fd:a7:6e:91:66:99:e0:fa:6e:59:30:8d:f6:63:f7:51:
         3f:83:fb:8e:bf:58:d2:18:da:db:cd:cf:5e:45:93:fe:f5:6e:
         9e:f0:db:75:61:6b:c2:27:99:0f:26:67:9f:8d:28:20:bc:95:
         f9:31:d0:ce:a3:33:a3:33:a6:cd:5e:8c:2c:c3:25:51:8e:c3:
         c6:5c:e2:ea:d8:3b:37:1e:07:74:34:48:c2:b6:8a:26:bd:4b:
         ce:a4:f3:66:29:e0:20:f4:64:85:91:2a:d5:05:39:1b:45:9f:
         a3:d0:2c:73:17:cd:78:9f:68:2b:98:9c:b0:48:29:62:01:1c:
         0a:3c:ca:b6:65:0e:3c:2a:18:67:20:46:5b:a7:7d:0c:2f:23:
         08:29:b8:df:90:ac:68:00:7c:9f:43:2b:9c:2f:d9:b7:d0:9a:
         63:c0:73:c1:65:6e:71:2e:4e:24:14:51:ba:49:ca:16:61:e7:
         f7:6a:17:7c:f3:10:86:18:31:0a:50:35:46:bb:cb:5b:a6:3e:
         87:c6:c7:79:b1:e1:fd:81:97:72:97:78:37:0d:23:11:b2:e9:
         9c:c0:13:5e:5e:d6:e6:0f:72:03:f3:73:a1:f9:96:99:7a:de:
         b1:55:29:50:97:65:71:68:fb:b9:c7:22:3f:56:07:74:ed:2e:
         9d:b5:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:47 2025 by rpki-client