Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3232302e39362e302f31392d3234203d3e203134313137.roa
File:                     3230312e3232302e39362e302f31392d3234203d3e203134313137.roa (raw, json)
Hash identifier:          BrWtzIgHskQw1oYkW9p7+LH9CfTAz58t0zLPYVzIWvs=
Subject key identifier:   73:21:C8:4A:63:CA:95:A3:74:1D:38:3D:8C:0C:05:8C:61:FB:3E:CC
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       50CB4C2F2E17EB1ED64E891DDC091047D3571C6B
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3232302e39362e302f31392d3234203d3e203134313137.roa
Signing time:             Tue 01 Jul 2025 19:15:04 +0000
ROA not before:           Tue 01 Jul 2025 19:10:04 +0000
ROA not after:            Tue 30 Jun 2026 19:15:04 +0000
asID:                     14117
IP address blocks:        201.220.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cb:4c:2f:2e:17:eb:1e:d6:4e:89:1d:dc:09:10:47:d3:57:1c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jul  1 19:10:04 2025 GMT
            Not After : Jun 30 19:15:04 2026 GMT
        Subject: CN=7321C84A63CA95A3741D383D8C0C058C61FB3ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:f6:c2:d9:75:46:9f:74:4a:34:70:6d:56:
                    25:3b:12:32:34:58:b5:f0:bd:af:9a:0a:98:71:14:
                    bd:6b:ca:da:94:83:33:55:2a:09:c4:25:b4:9b:b5:
                    6e:47:c6:cc:c0:2c:b8:08:5f:4f:87:0f:9b:ca:57:
                    c1:df:5d:f7:86:45:03:c7:4b:55:89:07:f0:d5:bb:
                    97:a0:00:f4:30:cb:dc:cf:64:16:be:49:d9:1d:5c:
                    a2:28:43:ba:97:9f:e9:22:ea:1a:dc:6e:0e:f2:be:
                    58:f7:e3:d9:a6:12:6d:ac:ca:2b:e9:24:2b:92:2a:
                    64:7f:d2:f0:cb:ec:11:e0:41:94:86:5a:5e:fa:3f:
                    7e:b3:e8:16:53:35:b3:33:32:f3:7f:bd:b2:37:25:
                    96:bf:55:43:4c:3f:42:b5:f1:6f:b0:5c:89:0b:83:
                    35:e2:dc:3d:31:72:9d:ba:ba:32:9b:ca:81:ae:dc:
                    f9:f9:88:31:1a:23:d1:03:01:fe:bc:33:a9:75:30:
                    32:c9:5b:c5:4f:66:20:af:c8:72:56:df:79:b6:1a:
                    04:af:90:01:9d:38:57:78:8e:5e:ee:ac:88:19:a3:
                    ce:aa:f8:5d:1d:16:ec:12:83:eb:dc:f0:04:1c:9e:
                    bf:75:60:87:04:d9:90:45:1b:90:56:17:4e:34:fa:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:21:C8:4A:63:CA:95:A3:74:1D:38:3D:8C:0C:05:8C:61:FB:3E:CC
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3232302e39362e302f31392d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:e6:c6:74:ec:de:d7:36:be:97:1d:d5:60:90:54:cb:ab:
         15:bc:e2:f8:43:c3:b3:f4:18:01:81:57:f5:2a:8d:72:aa:de:
         64:02:5a:4f:de:02:12:6d:ad:03:47:e5:77:fe:ac:e9:bb:4c:
         70:85:c0:3f:54:b8:09:23:c6:fa:ec:59:8e:29:96:f7:93:bb:
         22:24:e1:ed:ca:89:b6:b1:ea:07:5b:2c:bb:96:42:df:8b:6b:
         0d:44:31:74:84:06:9e:5f:34:59:69:64:48:5b:a6:c9:fe:29:
         31:ce:33:9e:07:c1:58:ad:80:c4:42:62:fc:2d:85:1b:84:3c:
         70:95:3c:15:b8:f0:e1:8e:6a:cf:e7:b3:84:f1:9b:d4:ba:ac:
         b6:9a:b5:21:d5:5d:65:4d:06:75:8e:d6:f5:39:ff:ce:cb:be:
         1c:76:1f:16:b1:eb:ec:d7:35:fc:b2:ef:26:ce:1e:09:97:2b:
         f2:3c:84:dc:82:fa:b4:c1:d3:fc:b0:7c:aa:fe:01:6f:af:33:
         88:d6:c2:df:62:9f:66:7c:91:95:6b:82:5a:26:27:d0:dd:04:
         4d:2d:e3:e0:9b:19:37:e6:d6:53:f7:39:69:25:d9:b6:93:04:
         0d:f1:d1:0e:a7:78:70:47:35:d8:e3:98:51:41:d7:35:1c:26:
         0c:ed:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:57:57 2025 by rpki-client