Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa
File:                     3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa (raw, json)
Hash identifier:          gO6JlQyz41a2Aa9QehcTW5Vj4i7FVo+wkS8TerCd88c=
Subject key identifier:   81:AF:E3:DC:EC:C8:4F:33:66:DA:F0:F6:86:4C:01:8D:5D:64:2F:62
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       204219D9B944CB539B5EBF227986CF38EDE2458B
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:09 +0000
ROA not before:           Tue 04 Feb 2025 20:01:09 +0000
ROA not after:            Tue 03 Feb 2026 20:06:09 +0000
asID:                     28015
IP address blocks:        201.219.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 19:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:42:19:d9:b9:44:cb:53:9b:5e:bf:22:79:86:cf:38:ed:e2:45:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:09 2025 GMT
            Not After : Feb  3 20:06:09 2026 GMT
        Subject: CN=81AFE3DCECC84F3366DAF0F6864C018D5D642F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:26:a2:41:7d:bc:5c:56:cf:c0:53:00:e6:
                    9d:d1:66:3d:cd:0f:46:26:23:97:59:86:f6:53:f5:
                    bd:1e:4e:2b:d5:4b:03:9c:15:d3:bd:b0:33:55:3e:
                    dc:5b:b6:c2:0d:ee:87:ca:80:21:a3:0b:a7:8c:90:
                    0d:55:5c:a8:84:39:57:1c:0a:59:81:1b:b7:39:ec:
                    f9:1d:dd:5a:3a:2c:a5:01:d0:b8:99:f4:57:1b:fe:
                    e1:e4:5a:e4:4a:05:b0:b2:41:43:d9:68:62:06:f0:
                    a9:47:d9:fd:8e:25:f9:2d:17:8c:54:99:87:b4:bc:
                    52:ea:61:a5:e7:b8:cd:78:29:bd:2a:78:85:72:a7:
                    a0:a3:57:df:2a:f5:05:a7:9b:80:48:cb:fe:9e:0e:
                    6b:2e:6d:4b:63:19:be:56:42:b5:14:52:d7:b3:62:
                    38:99:4e:d4:58:1e:8f:dd:5d:cd:d3:ae:3f:c5:da:
                    c3:9a:1f:5b:34:ac:82:de:cd:0f:53:80:07:26:98:
                    a4:8b:9e:7b:e9:96:b4:c2:fc:b0:af:13:7c:e5:40:
                    cc:b3:74:7d:f1:91:4c:ba:5c:0b:aa:37:fa:59:4b:
                    ca:0d:59:71:56:0b:77:0a:2c:4a:99:43:9b:c2:86:
                    f3:08:55:e6:0d:6e:b5:02:aa:62:44:9f:0a:eb:bf:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:E3:DC:EC:C8:4F:33:66:DA:F0:F6:86:4C:01:8D:5D:64:2F:62
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:7c:d0:93:e6:dd:ae:c2:41:82:a4:34:4b:87:fb:da:5b:
         74:29:10:37:f0:6b:9f:9b:2a:77:18:ff:5a:05:a1:fb:35:18:
         16:25:4d:b4:cf:9d:fd:ca:25:fb:88:a8:d9:de:6d:b4:79:a8:
         c1:67:00:c9:18:b5:06:9b:ba:25:9b:48:da:00:ca:91:a4:e8:
         08:ee:2a:6f:26:1e:bb:d9:0a:8b:bd:b7:b3:3c:d2:8d:b8:e0:
         53:cc:1f:5d:60:a2:a6:15:c8:25:1a:5b:2e:cf:a0:d7:2a:a2:
         dd:91:eb:3e:a9:b2:30:8a:e1:e1:09:4b:74:99:71:0b:3e:a3:
         90:ca:bc:64:5e:67:88:0d:b1:bd:3e:84:ec:d9:f2:99:3e:b8:
         c0:93:70:a3:c5:50:10:aa:8b:a0:63:54:a5:26:a0:1b:48:f0:
         18:e8:0c:66:87:59:00:b1:7a:4c:8d:03:a1:18:e2:21:28:72:
         b6:94:54:49:94:aa:3b:8f:28:b8:97:80:fc:eb:a5:ec:7a:85:
         1d:5a:33:a4:ff:f0:f4:94:a0:6c:e8:e0:eb:9e:29:e9:2b:ca:
         39:2b:12:b7:e0:18:4b:cb:69:cd:74:b2:96:ca:f1:ba:b1:81:
         81:96:37:ce:8b:97:a7:36:d5:78:fb:f1:29:68:67:ef:ca:e2:
         e2:2a:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:40:25 2025 by rpki-client