Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa
File:                     3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa (raw, json)
Hash identifier:          hLNnCe48GaifOENn+pxRLt4s+VfNFhrhS9wZt88N0qQ=
Subject key identifier:   99:09:0F:DA:BF:97:9F:19:D5:AB:9A:36:43:1A:D1:B4:5D:93:CC:15
Certificate issuer:       /CN=5CD3515583757EA0B20F8D85166821CBE4204EE9
Certificate serial:       2A3205094C7E1CB7C448F7C713B34C8A35930342
Authority key identifier: 5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa
Signing time:             Tue 04 Feb 2025 18:27:52 +0000
ROA not before:           Tue 04 Feb 2025 18:22:52 +0000
ROA not after:            Tue 03 Feb 2026 18:27:52 +0000
asID:                     271872
IP address blocks:        128.201.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:32:05:09:4c:7e:1c:b7:c4:48:f7:c7:13:b3:4c:8a:35:93:03:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD3515583757EA0B20F8D85166821CBE4204EE9
        Validity
            Not Before: Feb  4 18:22:52 2025 GMT
            Not After : Feb  3 18:27:52 2026 GMT
        Subject: CN=99090FDABF979F19D5AB9A36431AD1B45D93CC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:5f:01:ae:6a:f4:2c:97:1a:57:f7:78:c2:
                    49:47:a1:12:6c:33:24:77:5c:34:dd:f4:74:17:53:
                    de:38:d2:8d:6a:66:25:9a:4f:6c:c2:ea:eb:ea:1e:
                    fd:33:b4:3f:5f:66:78:e8:61:de:53:06:79:16:6f:
                    6a:f2:39:c5:62:60:2f:e0:0c:75:39:b1:1c:d4:91:
                    b6:9c:e1:1f:a2:71:29:2e:5c:41:f9:ac:d0:6c:09:
                    e6:04:da:49:bf:6a:7b:69:21:90:9c:0f:b6:e8:de:
                    1f:1c:30:4c:e2:5d:a0:e7:9b:45:5b:e2:16:b7:1e:
                    66:ad:00:84:5f:3d:47:fb:e0:c5:7e:2d:04:0f:b0:
                    66:e8:0f:4a:bd:43:56:5f:d5:27:1a:ee:cc:64:fe:
                    b1:42:67:cf:91:30:34:d9:ab:83:55:46:47:16:c9:
                    6c:42:b6:8a:f0:09:f8:5c:49:73:d4:b6:f2:12:38:
                    86:08:b6:5b:7c:e6:4b:1b:10:9e:00:21:88:29:23:
                    d0:73:3c:72:1f:0c:7a:a4:12:9c:07:2d:6b:cd:56:
                    71:6f:08:ca:7f:17:28:24:e9:86:24:bd:ed:f3:1c:
                    00:5b:68:0c:fe:0a:0d:cf:86:da:56:83:e9:14:c2:
                    7d:fe:9c:cc:86:0e:62:27:bf:34:1d:ef:89:05:04:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:0F:DA:BF:97:9F:19:D5:AB:9A:36:43:1A:D1:B4:5D:93:CC:15
            X509v3 Authority Key Identifier:
                keyid:5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3232203d3e20323731383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:80:63:2e:0e:24:e9:af:7e:b7:24:88:54:f1:c8:25:3c:
         88:04:4f:a7:71:1b:7d:7d:e1:a3:dc:ee:55:90:41:3a:17:c1:
         20:ec:2b:d8:aa:ae:67:96:19:57:81:da:23:ed:3f:ca:8c:52:
         5c:64:76:ee:8b:e5:4d:8e:70:f1:43:bb:f7:66:6c:9b:a3:18:
         03:e4:03:72:09:6f:a0:f5:20:6c:3c:c1:d0:29:28:38:d6:b4:
         fa:fd:2c:00:d0:13:75:c7:30:ad:ee:92:53:be:62:42:54:4e:
         6e:c7:2d:07:bd:b4:86:82:d7:0c:02:6c:c3:ea:94:6e:f6:fa:
         c3:98:d7:66:da:50:0f:8e:6a:f1:e7:50:c5:c0:88:3b:38:1f:
         70:9b:e5:0d:c0:89:87:18:0c:60:42:24:76:f7:d7:40:68:be:
         2f:0e:32:61:6d:40:2a:50:b6:2f:2b:f4:d7:4b:07:06:56:a9:
         d0:61:3d:5c:a1:f8:63:87:f4:d0:be:fa:ee:6b:bd:ab:81:33:
         34:28:91:c0:4f:30:10:08:ec:c7:55:b2:f9:48:55:a1:bf:f4:
         93:0b:91:65:ef:96:41:76:ca:94:a9:a1:c3:f4:e5:e6:c1:6e:
         09:b6:fe:38:0d:7c:c8:53:3b:45:4c:07:5f:f2:c4:8b:d3:30:
         52:07:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:42 2025 by rpki-client