Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa
File:                     3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          wXL5XRap4ah3Q52BpwL8tLo13gTBIZ0hBNAp8JO/ar4=
Subject key identifier:   A2:F4:46:7A:4C:7A:06:A0:EA:B5:04:CE:DE:62:A8:84:19:72:D5:88
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       35C32205A6592CBD4BA58C30D0CAAE90E12072CF
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:23:57 +0000
ROA not before:           Tue 04 Feb 2025 18:18:57 +0000
ROA not after:            Tue 03 Feb 2026 18:23:57 +0000
asID:                     18747
IP address blocks:        201.217.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c3:22:05:a6:59:2c:bd:4b:a5:8c:30:d0:ca:ae:90:e1:20:72:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:57 2025 GMT
            Not After : Feb  3 18:23:57 2026 GMT
        Subject: CN=A2F4467A4C7A06A0EAB504CEDE62A8841972D588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:1f:b3:7c:3a:39:cf:32:b5:e8:f9:bf:97:
                    34:c6:e0:e3:fd:5b:a9:6f:36:99:87:f8:5f:cd:b6:
                    38:68:52:ce:e6:a2:47:8f:27:8b:e7:ae:eb:46:75:
                    61:cf:ad:fc:7e:54:a8:f7:54:ae:29:8c:4c:41:9e:
                    df:99:21:c9:d9:2b:3b:64:57:cc:7a:dc:39:3d:e7:
                    1a:f5:1d:1a:3c:ba:65:17:ea:65:b8:a5:05:4a:a0:
                    8e:da:77:7d:97:58:cf:d2:8f:e9:e1:a3:ad:6a:b2:
                    4b:4d:aa:68:6b:f2:ac:1d:84:c4:1b:f6:2a:ea:2d:
                    b5:5f:39:b5:b0:ba:6a:21:0a:bf:1c:16:70:a3:33:
                    b9:a8:de:58:12:e5:3e:68:aa:a5:fe:79:64:d5:31:
                    38:0b:b1:3d:94:00:02:b1:53:8e:d5:a0:15:96:aa:
                    ee:0e:3d:76:0b:f7:a6:f1:40:c8:35:1b:2d:00:37:
                    cb:3a:2d:ab:e8:f5:50:9b:9d:9b:77:9a:aa:00:1f:
                    46:90:48:ce:a8:ac:5f:f7:0f:84:e8:ed:c9:11:9b:
                    5a:93:b3:eb:67:4e:1e:3c:9e:e4:4b:8b:ba:94:30:
                    81:df:40:8e:f5:a5:e0:5e:6d:02:e2:99:c5:df:4a:
                    77:c7:b6:74:15:b8:13:9b:75:0f:0e:db:b7:75:cd:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:46:7A:4C:7A:06:A0:EA:B5:04:CE:DE:62:A8:84:19:72:D5:88
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:89:9e:d4:64:4c:55:0c:ee:65:58:db:83:79:d3:4f:53:
         41:63:24:26:b3:6e:8e:f2:96:7b:05:98:ec:42:78:21:b2:01:
         e9:11:32:1d:b4:ce:8a:31:6b:bd:1c:ee:6e:3a:74:4c:b8:73:
         93:d7:37:e5:23:01:f7:6a:f7:f0:6e:42:8c:16:e9:e0:2c:73:
         79:d9:62:59:9a:a9:5b:d1:90:c7:33:ca:f4:55:06:a1:17:00:
         e1:33:ab:7f:73:97:d3:50:5c:c6:65:c8:6c:0c:73:6d:c2:83:
         8d:55:53:60:e0:c0:4d:30:e8:a2:0d:e0:e8:52:6d:04:79:a4:
         0c:28:b0:b5:9e:9c:27:41:fc:62:3c:14:9d:83:f9:ac:8f:79:
         54:32:be:79:1d:f1:67:fa:18:eb:80:e8:7f:35:ac:d4:1b:09:
         bc:aa:c4:57:5e:ad:16:93:a8:0b:19:31:f8:36:42:73:3f:da:
         e1:27:1a:63:65:82:73:7d:e2:40:3b:da:c2:0b:1a:67:27:19:
         30:b0:aa:05:53:c4:ba:16:86:c4:af:ab:ed:a3:be:69:47:7a:
         2c:5e:b9:f3:f5:d6:bf:ae:e3:5f:21:f6:b6:f9:47:ff:94:ea:
         57:2a:53:6d:0d:c7:06:79:25:39:73:15:99:4f:62:70:17:c2:
         85:2e:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:16 2025 by rpki-client