Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e382e302f32332d3234203d3e203230303135.roa
File:                     3231362e3234312e382e302f32332d3234203d3e203230303135.roa (raw, json)
Hash identifier:          155hw36RrCS5VcJx6Uh1gunpceiqsGNC6oupjnQCxkM=
Subject key identifier:   64:EF:45:24:E5:12:97:E7:C6:FA:84:51:64:09:7C:FF:FF:E6:E1:4E
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       107D23C2775E0EC1059D738AA0AD31921763653C
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e382e302f32332d3234203d3e203230303135.roa
Signing time:             Wed 07 May 2025 17:17:55 +0000
ROA not before:           Wed 07 May 2025 17:12:55 +0000
ROA not after:            Wed 06 May 2026 17:17:55 +0000
asID:                     20015
IP address blocks:        216.241.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7d:23:c2:77:5e:0e:c1:05:9d:73:8a:a0:ad:31:92:17:63:65:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: May  7 17:12:55 2025 GMT
            Not After : May  6 17:17:55 2026 GMT
        Subject: CN=64EF4524E51297E7C6FA845164097CFFFFE6E14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2d:3a:d4:c1:3d:3a:16:fc:b3:76:3d:33:05:
                    c6:84:2b:a4:08:8c:66:2a:fa:54:7d:40:44:18:96:
                    4b:d5:9e:7b:08:53:e4:c9:2a:e1:c0:88:87:26:97:
                    0e:76:53:ae:a6:cc:e0:ff:12:0a:38:69:47:35:23:
                    b9:e7:b0:e6:57:54:27:8d:0f:79:77:cf:49:21:c9:
                    e5:8f:77:bf:34:ae:e1:d4:56:ff:1f:b7:5d:2d:e5:
                    0e:f8:75:1e:dc:27:da:14:8b:3a:6f:c4:26:1d:36:
                    9b:96:31:fc:4e:d4:ef:4e:90:58:a5:f2:96:ea:5c:
                    3b:a2:93:84:9c:78:9e:08:7a:5b:87:5c:9e:b0:b0:
                    7b:c9:7d:19:60:15:da:ca:5d:b3:e7:0c:d6:95:54:
                    3f:12:84:95:5f:0c:6f:f4:5b:be:20:fd:3e:64:f0:
                    08:42:4b:60:62:2d:1d:07:39:a4:28:4e:89:59:e1:
                    c8:ec:cc:32:11:b9:14:98:fe:0c:7b:72:dd:d8:8b:
                    70:3e:65:14:8e:b5:5a:a5:1d:b2:c0:72:e5:ef:80:
                    4c:4e:14:ff:8f:07:70:f8:7a:42:cd:66:50:56:75:
                    ac:3e:e0:2f:d8:b7:12:7b:43:a4:e4:d1:51:4e:08:
                    c5:b9:9b:75:c4:5e:21:8c:f4:c1:44:af:c3:b8:60:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:45:24:E5:12:97:E7:C6:FA:84:51:64:09:7C:FF:FF:E6:E1:4E
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e382e302f32332d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:80:23:49:ae:51:0a:fd:17:f7:fe:33:64:d4:c6:28:c3:
         2d:ac:57:2d:ab:58:1e:b1:91:17:4c:13:dc:b0:9f:54:c0:c0:
         7c:67:11:81:90:e1:94:66:57:c1:f0:3c:b6:d2:33:31:5e:d7:
         3a:92:19:66:02:7b:79:8a:6e:f0:94:94:be:ac:9d:f1:ff:a5:
         d9:c9:89:80:60:1f:94:bc:87:e0:8b:ef:95:45:2c:90:2e:d9:
         32:13:22:f1:d9:b6:c3:c3:14:66:15:c4:5f:65:e6:92:6a:0b:
         a5:30:51:2f:fe:f7:87:02:d1:37:d4:69:e6:d0:1a:12:69:8a:
         34:7c:13:88:17:f1:d3:86:92:fc:ae:b5:a9:d1:9e:b9:ba:af:
         d3:48:dc:b6:46:28:85:2d:6d:01:e3:63:ee:b8:b5:17:8b:9a:
         1b:ea:98:9b:30:c8:43:f0:8b:b3:4d:bd:c9:d5:34:04:7e:df:
         8e:f0:70:ea:04:5a:89:95:e5:c5:54:3a:1f:3d:b3:e0:9b:11:
         54:8e:d6:49:c5:13:43:8d:24:8d:05:b9:ff:18:fc:64:dd:f0:
         a8:68:b8:5f:b0:dd:6c:ef:2a:82:d4:34:3d:3c:eb:65:09:65:
         84:03:03:c6:bf:79:b5:30:3d:44:ec:b8:b9:e2:a6:07:b6:4a:
         3d:19:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:03:11 2025 by rpki-client