Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
File:                     3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa (raw, json)
Hash identifier:          4+WWHrdTeFmjN4WPXjuI+ZXVvzFScagOIXHSI2iZ8UQ=
Subject key identifier:   AE:D7:25:D7:E0:0C:56:05:62:9D:3B:D4:16:56:2E:73:C4:FE:F8:32
Certificate issuer:       /CN=C2D04859D3EA57A74F033391AF63270299AC79E5
Certificate serial:       37C093A9E0FF0FA3883C55E58F625843319B72FE
Authority key identifier: C2:D0:48:59:D3:EA:57:A7:4F:03:33:91:AF:63:27:02:99:AC:79:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
Signing time:             Tue 04 Feb 2025 20:03:45 +0000
ROA not before:           Tue 04 Feb 2025 19:58:45 +0000
ROA not after:            Tue 03 Feb 2026 20:03:45 +0000
asID:                     27928
IP address blocks:        201.221.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:93:a9:e0:ff:0f:a3:88:3c:55:e5:8f:62:58:43:31:9b:72:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D04859D3EA57A74F033391AF63270299AC79E5
        Validity
            Not Before: Feb  4 19:58:45 2025 GMT
            Not After : Feb  3 20:03:45 2026 GMT
        Subject: CN=AED725D7E00C5605629D3BD416562E73C4FEF832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:81:35:91:5c:32:2c:bd:87:cf:8b:15:94:
                    ac:b7:21:c5:70:9d:4e:e3:24:f4:e5:96:e5:90:7f:
                    57:74:21:82:1f:85:69:65:65:f2:5a:33:c5:bb:fd:
                    21:5b:9e:a5:56:66:67:14:a1:b2:5f:b8:b8:fc:2e:
                    c1:4d:ce:5e:81:5a:0a:23:e7:5e:1b:86:f4:ea:83:
                    d7:32:9e:21:ff:44:bb:7c:74:23:ed:6d:18:01:ab:
                    ca:bf:29:b5:ac:5c:30:39:53:4e:51:40:d1:36:e7:
                    3f:23:22:d5:98:5f:7c:6b:6e:d9:8d:36:8e:bf:e2:
                    f9:44:87:da:f3:7e:d0:dc:91:36:33:da:30:52:42:
                    80:73:e1:2a:ec:72:4c:d5:fb:f5:dc:b7:74:d0:80:
                    ab:72:50:fd:7e:d2:7b:e6:ed:c7:02:17:82:11:46:
                    66:3d:3c:1f:e0:6c:cd:af:c3:62:19:0b:81:16:be:
                    db:ec:ea:49:58:2e:41:59:91:b2:6f:8a:19:40:cb:
                    71:7e:c1:cd:3f:5f:79:5c:81:9f:8e:cd:8f:d7:2e:
                    d0:9c:93:cb:3e:ad:ad:52:9d:ae:34:c0:d1:ab:07:
                    2e:c0:88:d5:84:f9:5b:23:41:92:d6:e6:c7:64:e6:
                    71:ed:7e:89:18:b7:1f:9d:47:c0:86:4b:3e:96:a1:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:25:D7:E0:0C:56:05:62:9D:3B:D4:16:56:2E:73:C4:FE:F8:32
            X509v3 Authority Key Identifier:
                keyid:C2:D0:48:59:D3:EA:57:A7:4F:03:33:91:AF:63:27:02:99:AC:79:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:4a:00:bd:fe:0f:33:cb:40:d7:e0:ab:14:85:10:16:a2:
         f7:56:0d:ea:24:e8:85:cb:19:69:0e:fa:24:ee:6f:80:1e:42:
         59:d3:16:38:f5:cb:19:0c:71:d4:3c:c0:be:a1:72:1c:25:c6:
         8a:a6:2a:f9:79:51:a6:a3:92:0d:47:98:99:39:22:1c:dc:ec:
         31:bf:da:12:78:3b:17:47:e5:ab:69:2a:fb:17:d0:18:86:0b:
         e7:56:73:a0:3c:1b:02:13:53:f4:e1:e1:db:c4:81:41:ca:32:
         92:c5:81:d3:fe:07:46:93:e4:80:96:61:33:4e:ce:2d:a8:f2:
         5f:91:6d:d7:4b:eb:2b:c3:d3:c4:31:ba:8a:68:14:cd:5c:d9:
         5c:0d:9e:a1:a0:df:fc:47:84:40:d4:fa:5b:43:ff:1d:d4:da:
         82:50:e8:19:af:32:2d:b1:1b:62:5b:a4:1b:99:6a:70:b4:76:
         a8:54:32:7d:d6:54:30:f5:75:4c:ac:5b:36:1b:11:d1:18:28:
         86:ea:9b:a1:53:fb:36:ea:75:36:e6:c2:22:ad:b5:54:31:39:
         c4:78:2f:53:f9:8c:94:90:22:b5:44:85:e4:f3:14:59:cc:97:
         7f:cb:a7:9a:1d:45:f6:09:26:e2:b3:b8:d7:d0:11:a3:e7:38:
         32:b4:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:21:36 2025 by rpki-client