Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32322d3234203d3e203230303135.roa
File:                     3231362e3234312e342e302f32322d3234203d3e203230303135.roa (raw, json)
Hash identifier:          ZOyjtGkY6tO5wDAm/19ZEVXq5guQfkPWimSxsjJHjyU=
Subject key identifier:   28:EA:D6:2C:5D:3F:CF:85:62:28:B7:F7:48:1A:B8:16:39:8A:72:09
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4B6A9B5C1DC10FE1EC177F608F36AA559BD099C3
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32322d3234203d3e203230303135.roa
Signing time:             Wed 07 May 2025 17:17:56 +0000
ROA not before:           Wed 07 May 2025 17:12:56 +0000
ROA not after:            Wed 06 May 2026 17:17:56 +0000
asID:                     20015
IP address blocks:        216.241.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:9b:5c:1d:c1:0f:e1:ec:17:7f:60:8f:36:aa:55:9b:d0:99:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: May  7 17:12:56 2025 GMT
            Not After : May  6 17:17:56 2026 GMT
        Subject: CN=28EAD62C5D3FCF856228B7F7481AB816398A7209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:4f:5f:30:61:63:94:f3:ff:1a:e1:0a:a9:
                    a3:af:a5:ae:23:e8:be:65:27:55:1b:05:b9:aa:f1:
                    f1:58:17:39:f1:18:c2:95:65:1a:9a:4d:57:23:56:
                    de:e6:f7:de:52:9a:98:1f:06:06:6f:0b:be:13:a4:
                    e2:19:d2:fe:cd:e8:fd:47:5e:b1:c6:b3:1f:18:8b:
                    14:82:79:72:47:14:85:ea:d8:b0:1d:54:fc:f0:bd:
                    c0:24:59:06:4b:59:40:90:98:4b:b6:29:04:ad:a8:
                    5b:e9:ba:cd:b0:24:49:21:7e:c1:7a:43:00:e5:2f:
                    97:45:fa:a9:a6:3e:05:bb:50:f4:54:d6:c8:73:cd:
                    8a:6d:9d:9b:78:5b:9a:01:dc:58:2b:af:54:78:a4:
                    89:b0:a7:16:3a:71:d8:48:bf:5f:b9:5e:8a:71:08:
                    bf:38:9d:e7:ca:32:bd:ad:f6:c9:36:14:a1:92:6a:
                    47:dc:b4:1e:50:46:cd:20:fb:7e:70:b2:b3:4b:3d:
                    68:f3:1f:e8:3b:78:10:8e:c6:97:dd:29:b1:96:94:
                    b8:53:2e:06:5e:5b:23:d3:41:a7:20:cf:d5:12:7b:
                    1d:c7:76:e3:4e:4e:b3:c7:83:9b:e9:f4:09:36:ff:
                    6a:2b:c8:06:07:f5:b0:77:88:6f:e8:1f:05:78:79:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:D6:2C:5D:3F:CF:85:62:28:B7:F7:48:1A:B8:16:39:8A:72:09
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32322d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:4f:06:fe:d3:86:a3:b3:48:37:87:96:d9:57:bf:d7:35:
         25:40:88:ea:3d:d6:ac:25:d6:64:a0:f3:b6:e3:98:25:d1:a8:
         bf:d3:cf:2b:f5:41:51:f9:d4:0c:dd:c2:5a:57:71:05:b6:d0:
         d2:4b:1f:5a:88:80:e0:61:57:9f:9b:66:25:44:d1:f1:4e:07:
         ce:00:79:31:54:d0:83:20:3c:91:26:03:75:1c:b1:c2:e0:1d:
         f6:c8:5c:87:72:e7:6c:e2:bb:99:f3:b5:84:7c:4d:de:c6:5b:
         f5:71:f2:eb:bb:09:0c:7e:3a:94:9e:c8:88:1c:44:8e:ac:9a:
         18:20:9f:b3:5e:5d:4e:da:72:89:23:a7:8e:4d:c5:49:2d:7c:
         3a:b2:d9:2f:4d:67:41:47:f6:3b:72:7a:9a:2f:31:58:81:76:
         3a:46:bf:ba:2c:96:a3:ec:45:1c:b3:fe:3f:42:3d:a1:41:80:
         62:73:87:f6:3b:5b:28:ac:84:47:64:51:65:6f:b0:7f:af:7c:
         80:94:51:d3:55:4d:df:e9:ce:c9:d1:55:5a:92:23:52:31:cf:
         e5:54:dd:db:73:01:a0:81:72:3d:1f:54:a0:10:90:da:56:f1:
         c3:d2:c6:fa:eb:fe:0f:aa:d2:e4:70:11:a7:75:36:fb:1d:6f:
         a5:e6:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:55:15 2025 by rpki-client