Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e3131372e302f32342d3234203d3e203238303735.roa
File:                     3230302e33322e3131372e302f32342d3234203d3e203238303735.roa (raw, json)
Hash identifier:          emNrqUgWy/+H8FDcNSGqgKMzHpyAdX/kYEFhOtGZ0H0=
Subject key identifier:   51:B0:D6:F3:8C:32:EE:30:6D:4A:1A:79:6E:85:9B:4C:0B:3A:69:D0
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       6475225AF84320FD29ABBF2002794CC907A2729E
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e3131372e302f32342d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 18:41:47 +0000
ROA not before:           Tue 04 Feb 2025 18:36:47 +0000
ROA not after:            Tue 03 Feb 2026 18:41:47 +0000
asID:                     28075
IP address blocks:        200.32.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:22:5a:f8:43:20:fd:29:ab:bf:20:02:79:4c:c9:07:a2:72:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:47 2025 GMT
            Not After : Feb  3 18:41:47 2026 GMT
        Subject: CN=51B0D6F38C32EE306D4A1A796E859B4C0B3A69D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:4f:3a:df:a4:70:f8:e6:25:d3:4c:ba:4d:
                    9d:09:a7:2e:51:ff:20:6e:af:c3:74:69:63:cf:f9:
                    08:95:9b:1d:06:2c:7f:7c:f1:3e:fb:f7:04:73:f2:
                    75:62:01:50:e3:97:35:86:24:16:78:80:8b:da:38:
                    9e:91:bf:b4:57:af:b6:fc:ec:64:99:40:e9:6e:1d:
                    70:fa:13:84:71:29:e2:d2:e2:a1:ff:76:83:a8:14:
                    11:e3:28:92:8d:5d:7f:bf:4e:b0:d5:27:63:71:4c:
                    94:6e:5c:9f:f2:44:e8:e8:90:6e:c0:9e:ce:29:e2:
                    94:83:b7:e6:34:91:6f:2d:5b:09:13:f9:9b:c0:ca:
                    2d:95:c5:be:0f:ed:98:82:09:2d:1f:6b:a1:98:80:
                    4d:3e:82:51:6c:d6:dc:f5:1e:84:64:19:b8:55:7c:
                    2f:60:40:49:a5:79:c0:17:e2:fa:1a:57:88:9d:80:
                    d0:eb:79:f1:b6:a2:05:31:f6:36:d2:10:ff:35:7b:
                    6f:0f:d8:da:0d:0c:fa:35:e2:c6:8c:63:f0:86:72:
                    25:d6:af:bf:f0:d1:d5:91:5c:c8:82:3c:b7:0e:63:
                    16:d1:c5:6a:6d:96:34:82:05:50:9b:68:09:20:48:
                    d2:00:4a:2d:23:f4:42:35:e7:de:04:51:c1:2b:30:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:D6:F3:8C:32:EE:30:6D:4A:1A:79:6E:85:9B:4C:0B:3A:69:D0
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e3131372e302f32342d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:31:de:39:ee:70:7a:e8:39:38:0f:c0:a7:44:70:fd:e2:
         d3:1f:b1:48:00:8d:3e:b2:94:8b:97:52:8a:39:8e:a8:27:02:
         89:c1:38:62:2d:2d:46:ff:73:0d:61:f3:9f:35:3d:91:48:e9:
         bb:4f:49:64:e1:ef:f5:f2:c2:fe:bf:59:f0:ad:9e:cf:e4:a6:
         04:3d:77:26:1e:2c:66:6c:0e:a7:83:37:fe:43:b7:6a:71:70:
         2f:48:27:e9:40:75:d1:b2:c0:54:0f:33:4f:3d:67:6b:30:f4:
         da:97:60:dc:a1:aa:31:25:c1:65:00:80:65:cb:a6:d2:16:dd:
         47:d2:5a:da:56:58:c7:50:8a:55:c5:ff:47:7f:a5:1d:4e:05:
         e4:42:ab:e9:fc:8a:b6:d9:c4:f1:57:8d:67:93:d6:69:dc:39:
         a1:06:29:6b:25:6f:f4:77:e1:b2:a1:25:5f:53:a4:ba:44:22:
         cf:43:05:5e:b1:80:f3:0b:d7:99:d2:d2:1f:02:65:43:cc:58:
         fa:15:8e:9f:23:7b:6a:3d:63:7d:1d:8e:91:2a:bd:17:32:cd:
         3c:52:7c:1e:20:9c:71:f5:6c:06:ba:32:4f:48:27:09:6d:ce:
         c0:f5:c2:f2:8b:7f:6c:d5:fc:fd:74:bf:cc:f6:97:d6:d7:f9:
         04:ae:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:26 2025 by rpki-client