Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          Nr26+ULgaX4jkTblHYCyVahL5h61tSZhG+Bit/bI6l8=
Subject key identifier:   62:0F:5A:5C:4C:9F:31:EA:36:F9:5E:DC:A8:2F:92:93:6F:F7:25:75
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       78D45B426A86C40971ACFFA3D760ECC51B8F3F1D
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 04 Feb 2025 18:37:11 +0000
ROA not before:           Tue 04 Feb 2025 18:32:11 +0000
ROA not after:            Tue 03 Feb 2026 18:37:11 +0000
asID:                     16509
IP address blocks:        200.33.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d4:5b:42:6a:86:c4:09:71:ac:ff:a3:d7:60:ec:c5:1b:8f:3f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:11 2025 GMT
            Not After : Feb  3 18:37:11 2026 GMT
        Subject: CN=620F5A5C4C9F31EA36F95EDCA82F92936FF72575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:d5:b1:84:21:2e:36:8b:b7:48:e1:59:f2:
                    1b:d7:27:ef:ae:19:9a:7e:03:1c:5a:68:f3:2e:cb:
                    f1:4e:9e:ca:e5:90:d1:97:10:b4:65:be:ff:9e:60:
                    f2:30:e2:09:c7:78:ad:92:7c:6a:72:37:eb:a2:22:
                    ce:c3:56:20:b1:c0:da:38:f0:85:66:4c:01:fd:58:
                    b0:17:16:32:32:62:1e:77:0a:ec:c1:3a:9e:92:b1:
                    5a:ff:0a:6d:ab:7f:af:8c:c1:d4:15:2d:4f:b6:6b:
                    03:44:f7:c3:4e:6d:18:b2:5f:92:03:e6:78:5f:3e:
                    ef:5b:0a:ed:59:34:4e:a3:1a:e1:85:c9:d1:7c:48:
                    ee:75:77:25:ed:cb:61:b2:79:cb:5a:23:12:a6:b6:
                    ac:46:b5:55:01:45:f5:c0:86:63:69:1a:93:02:21:
                    aa:5f:7e:4b:ad:10:df:40:94:47:a4:e2:1b:55:57:
                    65:39:41:4d:96:8c:18:93:02:67:f5:12:ee:83:af:
                    e6:23:9a:c6:27:03:9b:bd:73:ad:31:ae:a5:70:a7:
                    b0:d8:0d:e4:7a:3e:13:45:01:a9:48:49:71:76:3f:
                    25:2a:47:04:f9:04:97:7f:29:ed:10:86:6b:77:41:
                    06:1c:2a:36:43:0c:f4:43:4a:a7:12:be:48:d5:f6:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:5A:5C:4C:9F:31:EA:36:F9:5E:DC:A8:2F:92:93:6F:F7:25:75
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2c:72:29:bb:d8:f3:f3:a4:f6:f6:81:0a:1b:7a:3f:89:4d:
         22:14:98:f9:8b:3d:fa:38:85:8b:b2:57:3c:8b:02:92:38:c0:
         60:44:d0:97:a3:a5:4b:d8:36:fe:ff:11:67:a3:7e:45:0b:b1:
         da:57:c6:02:09:f6:27:02:21:33:5b:5d:10:24:17:15:54:6b:
         bc:50:b6:28:e3:0c:b3:0e:66:06:01:53:4a:10:69:fa:6d:01:
         59:a1:c6:48:14:03:cf:a8:95:94:3c:ca:cc:1f:d9:77:72:56:
         32:c7:04:d4:00:cd:52:86:ca:a8:37:12:7b:41:54:9f:a2:fd:
         59:e7:5a:10:f6:4c:75:06:57:72:21:5e:f7:0b:2c:c7:82:58:
         d4:fe:03:4c:c5:e1:9f:0c:0f:48:87:fb:ca:27:54:29:6a:14:
         f0:fb:e4:3f:f0:66:c3:ae:d7:04:da:64:bd:9f:15:74:63:f1:
         92:bf:b0:7f:bd:50:95:42:3d:3d:93:b0:c6:24:85:bb:55:5b:
         e0:34:1e:39:10:ec:d9:9b:a6:a7:14:4e:0f:47:67:6c:e8:32:
         81:32:8a:7c:21:d1:c1:5f:6a:1d:5c:33:70:bf:4a:c6:72:bd:
         d9:39:8b:51:4c:17:e1:1b:da:96:05:8d:3b:a1:a1:42:e7:69:
         08:cd:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:43 2025 by rpki-client