Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          X3iC8uS170XrQJZY6oQzqxmjmwPeyOuheI+W8VLjFOI=
Subject key identifier:   E4:46:89:15:EC:34:8C:55:80:5B:0C:85:99:B2:71:A7:C5:AC:18:8F
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       2EFF92672D03D904B5BF01146FBA25959CCDD19E
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:52:45 +0000
ROA not before:           Tue 04 Feb 2025 18:47:45 +0000
ROA not after:            Tue 03 Feb 2026 18:52:45 +0000
asID:                     265615
IP address blocks:        201.151.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ff:92:67:2d:03:d9:04:b5:bf:01:14:6f:ba:25:95:9c:cd:d1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:45 2025 GMT
            Not After : Feb  3 18:52:45 2026 GMT
        Subject: CN=E4468915EC348C55805B0C8599B271A7C5AC188F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:56:c2:fa:a1:cb:33:4e:fa:6f:84:bf:ef:
                    a1:90:cd:bd:54:b7:e4:4a:48:a8:d6:d5:93:26:75:
                    8b:e0:7f:e0:51:6e:14:c3:1f:aa:be:25:b8:68:f1:
                    cc:40:6e:23:0b:83:28:a1:a0:7d:80:a2:6b:79:74:
                    bc:bb:a0:43:ff:08:8f:0b:dc:2f:3c:fa:9a:97:19:
                    59:e4:c7:44:c4:2a:f1:8e:38:35:1e:d1:4a:8d:73:
                    38:4d:68:91:eb:6d:3d:de:02:b7:50:07:40:d3:ca:
                    5a:cf:e3:a7:55:fb:6b:cb:aa:90:08:05:b8:67:d1:
                    a5:3e:31:96:5c:44:6e:d7:86:33:9a:e5:3b:ef:08:
                    ec:70:8c:7d:5a:93:fb:0b:69:d8:dc:2d:82:a3:1b:
                    91:3d:9e:4a:eb:d8:5c:f2:f6:b4:02:ab:ae:39:12:
                    e9:23:e7:72:d9:6a:40:52:4c:1a:2d:ff:d7:62:e0:
                    21:88:8b:5b:f1:4f:bd:02:50:fd:90:71:29:d8:34:
                    51:32:49:7a:f0:34:fc:4a:dc:17:f1:fa:e8:ef:b2:
                    a4:f8:68:0a:b7:12:7d:79:e8:ca:1a:90:65:24:1e:
                    ee:5d:24:06:67:79:0f:ca:1b:a3:37:a4:d4:33:5b:
                    35:4e:dd:13:67:48:f5:9c:54:b6:7e:8f:73:16:2c:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:89:15:EC:34:8C:55:80:5B:0C:85:99:B2:71:A7:C5:AC:18:8F
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:df:33:c4:1a:a3:bf:ae:cb:1e:8e:6c:28:2e:da:65:2e:e2:
         35:ef:ce:f6:c0:90:12:8d:d7:5d:cb:e4:3b:63:cb:7e:ef:23:
         c4:c0:3b:ef:0d:b8:8c:b3:3e:6a:c8:18:67:23:93:73:36:fd:
         e7:3b:f6:04:83:df:63:d8:95:c2:de:07:ea:ba:8c:0a:5a:da:
         0b:6c:0f:9d:2f:60:a7:65:83:15:b7:5e:bb:3a:81:01:49:b2:
         9c:df:ea:26:67:ca:53:f1:b2:b6:7e:c0:c0:5f:c8:60:59:df:
         af:96:ae:5b:50:60:eb:72:7a:2a:10:7c:8d:91:92:71:bc:e3:
         4c:59:1a:94:13:2a:81:1c:4d:b1:5a:bd:71:cd:12:c5:08:39:
         81:d3:46:6b:e7:51:e5:df:c3:dc:41:67:cd:d8:5f:b9:90:e8:
         44:08:a0:7f:3b:84:de:15:a9:f4:cb:28:f0:28:e5:9b:e6:50:
         83:53:d9:dc:45:fb:71:a6:fe:dc:39:43:90:a8:2c:fa:87:1e:
         10:ee:55:1b:32:09:54:00:c7:b9:1c:a3:90:75:bf:53:ff:1f:
         7c:ec:3b:85:d7:a4:95:32:c9:93:d8:99:34:a8:60:b3:19:47:
         33:4c:d5:5e:c9:a1:b2:36:41:60:09:62:8e:7f:e6:9e:a6:fe:
         92:da:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:56 2025 by rpki-client