Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
File:                     3230312e3232302e33372e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          LoODKQVZtpkqKAXHK4S/GJDXtcbB7AcEP0Vop0zWFHY=
Subject key identifier:   03:43:10:13:CE:04:22:55:B3:84:95:63:F0:E2:96:5C:8E:4C:DE:D8
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       48DBB5BCBD5BFBA92E2CEFFACE7E59EC1F484642
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 21 Apr 2025 17:15:35 +0000
ROA not before:           Mon 21 Apr 2025 17:10:35 +0000
ROA not after:            Mon 20 Apr 2026 17:15:35 +0000
asID:                     19551
IP address blocks:        201.220.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:db:b5:bc:bd:5b:fb:a9:2e:2c:ef:fa:ce:7e:59:ec:1f:48:46:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Apr 21 17:10:35 2025 GMT
            Not After : Apr 20 17:15:35 2026 GMT
        Subject: CN=03431013CE042255B3849563F0E2965C8E4CDED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:47:1a:eb:cb:9e:20:c9:08:65:bf:59:5a:
                    a6:69:52:11:76:70:22:4c:18:6e:f8:e1:bd:9a:4f:
                    e2:44:22:c2:9a:09:f8:b4:8c:2b:37:aa:3f:ce:a5:
                    f5:f7:f9:fe:0a:8f:dd:83:50:e0:77:e7:96:68:9a:
                    99:82:1c:90:ca:d2:27:4b:a2:f2:b3:73:ba:2f:a0:
                    2f:46:5b:0d:a5:85:e9:5a:90:e6:3f:a7:59:29:f8:
                    49:f4:57:f5:6d:17:3f:a1:da:dc:bd:94:91:5b:0f:
                    2f:b4:14:e9:1b:b8:98:c8:9c:c3:07:7a:b0:8a:6f:
                    2e:5b:98:3a:55:9a:02:0b:61:2d:5e:75:7f:de:51:
                    74:a1:99:f6:07:81:08:e0:12:a8:05:25:c5:b4:95:
                    43:3d:b4:34:95:c6:4e:2d:5c:a4:de:d6:90:d5:f6:
                    d5:d6:f5:43:46:bf:44:df:e9:40:67:26:7a:0c:da:
                    7f:89:a5:c7:86:45:92:a9:ed:f4:09:fd:ac:41:17:
                    ae:0c:b6:9f:0d:0b:9e:76:08:ac:92:cb:92:5c:aa:
                    7a:27:6f:e8:c8:1e:15:ac:77:92:b5:68:0c:bb:53:
                    dd:7d:4f:ba:30:91:c1:73:de:99:19:24:f9:a4:d8:
                    f2:6a:0e:9a:7c:d2:78:fd:f9:5b:42:2a:27:6e:32:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:10:13:CE:04:22:55:B3:84:95:63:F0:E2:96:5C:8E:4C:DE:D8
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:f3:96:17:f7:1b:cf:c1:e1:63:b1:e1:6c:9f:84:c9:ab:
         3a:9b:b7:3f:cc:9f:f0:bc:fd:1b:0b:ac:fb:4e:2a:d9:30:95:
         28:6a:c8:94:e2:51:ad:28:b3:4f:49:20:85:a8:c6:d8:46:b4:
         54:5e:f4:9f:ef:a2:aa:9c:8a:e0:5d:8c:6d:9c:96:9b:be:5e:
         5c:aa:e1:49:82:d0:a8:a4:ae:d5:f0:6f:e0:8f:8b:41:5c:d4:
         de:bc:5c:38:f6:3f:36:f0:13:1c:80:03:d0:d6:1e:b3:2c:9f:
         ba:57:6f:82:84:cc:ec:bd:d6:3f:77:2c:0f:0b:21:dc:2a:02:
         21:88:9e:dc:3b:11:ea:aa:98:f8:2b:7a:63:8d:bc:7e:5b:44:
         42:5e:a2:e8:81:b8:8a:a1:65:b0:45:2e:4c:b6:f1:e4:1c:0d:
         d0:2a:40:ec:23:05:d4:e7:3c:e6:3d:8a:2a:4a:b7:22:26:c0:
         40:d7:af:d4:b7:21:fe:69:08:b1:ab:3a:ba:43:89:8d:e5:bf:
         f3:7c:9f:52:98:93:7e:b2:17:28:37:ca:b3:f4:d2:a0:38:36:
         e0:b2:f3:e3:eb:33:1f:8d:33:c7:3c:5c:90:f5:a0:dc:20:74:
         81:f3:f5:54:a4:cf:ca:25:d5:a0:84:11:5a:56:a1:03:b8:74:
         42:34:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:02 2025 by rpki-client on console.sobornost.net