Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa
File:                     3230312e3232302e35362e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          sRE0TA1c3Wt3icpz9fUA1YWl2Qi+/2xuN8XuSHuZmwA=
Subject key identifier:   21:C1:95:37:0B:17:2A:04:69:E9:B1:7A:C6:40:94:0B:ED:EB:DA:D9
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       372F9C850C60A6D2FC51B8346D99A965C8F7396F
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 18 Aug 2025 13:40:05 +0000
ROA not before:           Mon 18 Aug 2025 13:35:05 +0000
ROA not after:            Mon 17 Aug 2026 13:40:05 +0000
asID:                     19551
IP address blocks:        201.220.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 02:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2f:9c:85:0c:60:a6:d2:fc:51:b8:34:6d:99:a9:65:c8:f7:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Aug 18 13:35:05 2025 GMT
            Not After : Aug 17 13:40:05 2026 GMT
        Subject: CN=21C195370B172A0469E9B17AC640940BEDEBDAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:6c:c6:ea:31:71:ed:6b:e0:b0:33:23:48:
                    f4:34:5a:cc:99:bc:8d:f1:f4:6f:16:e8:ea:5f:62:
                    20:a9:46:59:67:57:4a:aa:3f:c4:89:a5:f2:85:43:
                    be:08:9d:cb:e6:ee:2c:81:21:14:f8:21:a6:2a:54:
                    48:6a:15:22:50:47:48:a9:17:35:a7:74:c7:01:3c:
                    5d:bd:0c:9f:d5:c3:5f:23:10:23:cb:0a:92:3a:2c:
                    9f:5b:6e:a0:05:a1:56:31:1d:8a:ea:f1:3d:16:25:
                    e8:99:ca:d0:99:92:09:55:46:7f:6f:21:36:4e:c1:
                    59:ea:cf:eb:5f:28:e6:a5:f2:16:be:8a:06:c2:0a:
                    c7:d7:6d:14:fb:bb:60:45:38:c9:d7:62:35:7a:c3:
                    b3:1b:43:ff:6c:5f:fe:46:ed:44:a2:01:d3:8c:4e:
                    59:2f:7e:37:f5:c5:88:ef:bb:92:7f:d5:fa:58:bc:
                    0b:a9:81:98:c3:72:ab:5f:e3:f0:d4:29:e0:08:8a:
                    43:09:89:e7:f3:ad:3c:5b:69:4d:9d:72:4e:ff:c4:
                    30:bb:26:aa:75:3e:55:a9:f3:ef:66:1a:1a:05:4e:
                    fc:ec:1b:e5:20:90:7f:80:93:95:18:82:bf:e5:0f:
                    b3:9c:60:3a:93:5c:dc:1d:32:68:86:8a:bd:1a:20:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C1:95:37:0B:17:2A:04:69:E9:B1:7A:C6:40:94:0B:ED:EB:DA:D9
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:cf:b1:d2:a1:37:55:49:16:40:a9:13:e8:dc:eb:a8:0d:
         94:c4:25:2f:cc:18:75:44:83:f2:83:68:65:c8:a4:c8:43:2e:
         1d:39:06:38:f3:f9:99:19:b0:dd:ae:72:21:a9:2a:d9:98:64:
         9d:c9:d9:d5:7b:70:e8:6c:af:36:9a:5d:f7:ab:c8:4e:a9:28:
         2f:65:7d:b3:ac:a0:3d:4e:c9:29:32:14:30:51:54:62:a5:72:
         ea:b3:e8:65:82:e5:22:bf:47:cf:41:07:70:a3:88:07:00:9b:
         1d:33:53:94:75:09:9e:0d:4a:bd:52:0f:f9:0b:9c:5f:64:6e:
         f4:ae:b3:2e:c9:98:c8:d2:c1:fb:36:60:01:ee:5f:2b:b4:f4:
         0e:c7:1b:63:ab:7b:de:43:49:0e:d3:19:4c:de:1e:c2:ca:38:
         99:1e:88:0e:9f:57:bc:4b:b8:ab:18:8c:c4:30:38:20:c4:d7:
         2a:40:24:83:b0:65:7e:d3:f0:e5:10:54:a0:f0:28:ec:ac:bf:
         21:2a:60:bd:3d:83:d9:08:fb:e4:90:d7:b3:43:7d:b5:22:21:
         71:da:e0:48:8b:e4:d8:f5:39:65:f1:c9:29:16:07:c6:a9:67:
         75:c9:24:7d:7e:ed:17:5c:34:29:12:b8:30:3f:e0:04:68:b9:
         02:4d:bb:65
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNy+chQxgptL8Ubg0bZmpZcj3OW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRTM0MjEwNzY0QkNENDJDQjZDMEZDRDkzODI4QTAx
NjYyM0VGMTAeFw0yNTA4MTgxMzM1MDVaFw0yNjA4MTcxMzQwMDVaMDMxMTAvBgNV
BAMTKDIxQzE5NTM3MEIxNzJBMDQ2OUU5QjE3QUM2NDA5NDBCRURFQkRBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lmzG6jFx7WvgsDMjSPQ0WsyZ
vI3x9G8W6OpfYiCpRllnV0qqP8SJpfKFQ74Incvm7iyBIRT4IaYqVEhqFSJQR0ip
FzWndMcBPF29DJ/Vw18jECPLCpI6LJ9bbqAFoVYxHYrq8T0WJeiZytCZkglVRn9v
ITZOwVnqz+tfKOal8ha+igbCCsfXbRT7u2BFOMnXYjV6w7MbQ/9sX/5G7USiAdOM
Tlkvfjf1xYjvu5J/1fpYvAupgZjDcqtf4/DUKeAIikMJiefzrTxbaU2dck7/xDC7
Jqp1PlWp8+9mGhoFTvzsG+UgkH+Ak5UYgr/lD7OcYDqTXNwdMmiGir0aIKFRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIcGVNwsXKgRp6bF6xkCUC+3r2tkwHwYDVR0j
BBgwFoAUzv40IQdkvNQstsD82TgooBZiPvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTg3ODc1Nzk1RDUwMTU1RkU3NEM0NUVFQjUxMTYwN0JE
MDU0MzU2MEJGRTkxODE0MEYyNUVFMjU0OEIzNEU1LzAvQ0VGRTM0MjEwNzY0QkNE
NDJDQjZDMEZDRDkzODI4QTAxNjYyM0VGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZFMzQyMTA3NjRCQ0Q0MkNC
NkMwRkNEOTM4MjhBMDE2NjIzRUYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U4Nzg3NTc5NUQ1MDE1NUZFNzRDNDVFRUI1MTE2MDdCRDA1NDM1NjBC
RkU5MTgxNDBGMjVFRTI1NDhCMzRFNS8wLzMyMzAzMTJlMzIzMjMwMmUzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM1MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMncODAN
BgkqhkiG9w0BAQsFAAOCAQEAM8/PsdKhN1VJFkCpE+jc66gNlMQlL8wYdUSD8oNo
ZcikyEMuHTkGOPP5mRmw3a5yIakq2ZhkncnZ1Xtw6GyvNppd96vITqkoL2V9s6yg
PU7JKTIUMFFUYqVy6rPoZYLlIr9Hz0EHcKOIBwCbHTNTlHUJng1KvVIP+QucX2Ru
9K6zLsmYyNLB+zZgAe5fK7T0DscbY6t73kNJDtMZTN4ewso4mR6IDp9XvEu4qxiM
xDA4IMTXKkAkg7BlftPw5RBUoPAo7Ky/ISpgvT2D2Qj75JDXs0N9tSIhcdrgSIvk
2PU5ZfHJKRYHxqlndckkfX7tF1w0KRK4MD/gBGi5Ak27ZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:38:47 2025 by rpki-client