Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
File:                     3230312e3232302e33322e302f31392d3234203d3e203134313837.roa (raw, json)
Hash identifier:          RMy91AD0g+Zm7aNyWE2ajakB8Ro2Np0A0yqhmyKphuk=
Subject key identifier:   DD:62:DC:25:70:7A:8D:2A:8D:EB:C2:52:CB:CC:32:66:D7:03:68:74
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       6EA47578CDD56D10B1A60BA2AD0EFA94888AE0B8
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
Signing time:             Tue 25 Feb 2025 20:11:03 +0000
ROA not before:           Tue 25 Feb 2025 20:06:03 +0000
ROA not after:            Tue 24 Feb 2026 20:11:03 +0000
asID:                     14187
IP address blocks:        201.220.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:75:78:cd:d5:6d:10:b1:a6:0b:a2:ad:0e:fa:94:88:8a:e0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Feb 25 20:06:03 2025 GMT
            Not After : Feb 24 20:11:03 2026 GMT
        Subject: CN=DD62DC25707A8D2A8DEBC252CBCC3266D7036874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:df:29:25:69:98:1e:96:d8:da:4c:7a:63:
                    42:ef:23:a7:6b:0d:3d:3d:ea:4c:5e:e6:ae:bd:1d:
                    d6:74:c5:45:86:e3:30:7d:18:30:17:ec:2f:ae:44:
                    40:99:3b:67:1f:e3:4c:a5:1b:e6:f5:18:58:97:22:
                    4d:7d:5b:b0:ec:d4:0b:7d:b7:12:72:37:37:9e:69:
                    77:c9:45:8b:d7:4d:76:97:d0:9f:f3:1f:47:d2:5c:
                    5d:b9:a2:ec:b4:56:e2:bd:2a:15:98:a1:a6:9b:25:
                    72:3f:ba:64:22:71:cd:65:a6:0c:73:6b:3c:4d:6e:
                    21:ed:52:4f:68:8b:53:5c:07:66:b7:df:5d:d0:52:
                    c1:11:13:34:92:d2:68:3f:9e:db:3a:78:09:63:aa:
                    db:95:15:7c:7b:b1:fa:cd:11:0f:4d:89:e2:7f:d7:
                    c6:b4:42:18:54:3c:2a:45:e5:a7:5c:6d:5d:de:4a:
                    bc:5a:ad:b8:22:23:6c:10:fb:73:01:98:62:ce:ed:
                    4f:9c:c3:7d:7a:62:96:34:4b:28:8c:da:52:ec:8b:
                    4e:d1:32:69:09:b4:e0:3f:fe:29:38:03:e7:68:1c:
                    88:ce:4e:9f:91:41:2a:19:8f:76:24:f4:39:67:87:
                    12:76:28:ef:00:fe:d7:39:5b:13:28:9b:40:5d:18:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:DC:25:70:7A:8D:2A:8D:EB:C2:52:CB:CC:32:66:D7:03:68:74
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:18:90:4c:3b:9a:a0:68:eb:ed:de:3e:a2:53:fb:77:3a:
         6c:82:a0:5d:9e:15:9d:d9:2e:e0:bb:f0:9b:b9:05:81:f5:60:
         77:35:30:66:c4:39:73:6c:5f:cb:dd:45:ee:1c:e2:7c:fe:4e:
         c5:32:fb:fd:a8:ef:20:00:86:19:06:cc:43:18:fd:19:b3:ba:
         2d:6e:20:c5:ce:e0:db:ec:43:e1:ef:b5:3f:3e:34:8b:23:9b:
         35:e2:9b:10:77:5a:6d:79:46:24:45:7b:a6:d3:59:0d:0e:7e:
         ee:c7:57:f7:37:2b:b3:c9:d9:f2:73:75:a6:d2:b5:a2:f4:f5:
         11:11:3e:23:14:a6:82:56:70:ca:6a:07:42:37:32:09:75:62:
         d9:4f:db:0c:70:37:db:4c:34:8f:56:20:9c:29:3e:29:a2:87:
         df:53:64:5d:4f:77:e8:2f:90:97:1c:af:67:91:5c:7f:0d:d2:
         b9:b9:b8:93:b2:3a:54:c6:7f:a4:33:44:87:81:34:82:32:85:
         45:86:ad:e0:45:09:02:89:f2:5a:f9:cb:f6:e6:d3:d5:fe:10:
         09:d4:14:28:12:0a:1c:1c:6e:72:53:f9:4f:03:ca:a8:23:d9:
         91:aa:f1:9e:2d:d6:dc:0c:2b:84:f5:c5:00:01:69:c9:f8:78:
         37:6d:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:51 2025 by rpki-client