Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e312e362e302f32342d3234203d3e203532343832.roa
File:                     3230302e312e362e302f32342d3234203d3e203532343832.roa (raw, json)
Hash identifier:          M3ipQflF5/yabd3hViQIvBwvxR3vBHcM6WSEpPuzcvs=
Subject key identifier:   44:8A:74:E6:8A:E0:64:A3:B8:19:B2:68:3A:D8:D3:28:29:57:65:69
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       10C63744B179D96FE6BCA4BAA4AD693C56012744
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e312e362e302f32342d3234203d3e203532343832.roa
Signing time:             Tue 04 Feb 2025 20:08:54 +0000
ROA not before:           Tue 04 Feb 2025 20:03:54 +0000
ROA not after:            Tue 03 Feb 2026 20:08:54 +0000
asID:                     52482
IP address blocks:        200.1.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c6:37:44:b1:79:d9:6f:e6:bc:a4:ba:a4:ad:69:3c:56:01:27:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Feb  4 20:03:54 2025 GMT
            Not After : Feb  3 20:08:54 2026 GMT
        Subject: CN=448A74E68AE064A3B819B2683AD8D32829576569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:3d:27:48:d2:2b:28:28:2a:a5:68:72:3b:
                    24:9e:ed:b6:f8:69:66:f2:c4:9f:5e:63:60:bc:c7:
                    23:e8:e0:db:18:64:a1:12:fd:da:c9:c6:05:b7:0f:
                    f9:33:f1:c0:32:97:ba:bd:c2:86:27:8a:7e:a8:70:
                    da:95:32:4e:3f:c7:dc:4f:16:c5:0f:96:07:ec:ab:
                    25:14:46:d3:7e:5a:8e:33:2c:db:92:5f:a0:9a:ca:
                    78:99:d0:86:c6:16:85:d0:ea:50:b8:f9:20:7a:7e:
                    c2:5f:6c:ca:61:5f:1b:c8:a1:ff:2c:a6:67:8a:e6:
                    13:d4:fd:71:a6:c8:ca:88:71:4f:a3:29:97:92:3a:
                    e9:6a:56:92:49:0f:58:be:34:f6:84:64:73:a5:0b:
                    4b:46:ac:a2:27:a7:46:60:91:ec:b0:6d:5c:90:8e:
                    54:6d:88:66:c0:05:1d:61:ec:0f:ac:6a:6a:24:66:
                    f3:db:f2:d7:24:49:0b:ab:58:a7:cb:64:b7:bc:93:
                    42:5d:3f:06:ef:61:2e:dd:33:73:3b:84:9b:78:45:
                    af:27:cd:ce:33:92:c7:47:b3:f8:ea:fb:79:a2:7c:
                    8d:f1:b4:fc:f7:67:8d:c7:2c:c6:c9:42:23:6e:ed:
                    c6:98:a8:8f:e0:ab:04:50:c0:db:61:23:c8:05:d9:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:74:E6:8A:E0:64:A3:B8:19:B2:68:3A:D8:D3:28:29:57:65:69
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e312e362e302f32342d3234203d3e203532343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:fc:c7:17:99:20:6c:e9:fa:d9:6e:1d:08:e3:ba:e8:b5:
         cd:27:bb:d8:fd:d9:6c:61:64:35:a6:bf:fe:50:91:cb:95:44:
         e2:a0:ef:12:87:49:7a:48:ce:71:fb:92:e8:5d:be:43:0a:97:
         fb:15:fe:3c:ae:c3:42:69:b1:59:74:8a:bb:dc:28:f3:0a:c7:
         88:0f:a6:4f:06:ff:59:d5:43:c1:cc:87:df:59:93:45:c8:68:
         1f:c9:76:c4:fc:2e:e1:82:0d:07:bc:95:53:f2:a5:ef:1e:22:
         17:1d:b6:10:ee:e8:6d:42:0a:e2:c9:84:9c:14:f3:e4:e2:f8:
         e3:fe:57:94:d5:7f:f9:fd:64:73:e0:3c:6a:97:8c:81:3a:2f:
         c0:6b:52:ff:16:63:52:f3:1b:f8:12:af:0b:61:b5:5e:a1:5f:
         9c:3f:79:7f:fb:ed:14:dc:06:a7:15:3d:39:a0:3c:14:1f:e6:
         82:fb:98:ec:f7:87:ca:a9:a5:f3:a0:6a:ac:80:15:3f:35:65:
         11:ee:a4:57:06:49:80:37:76:bc:d6:a1:31:95:8d:72:d4:e8:
         24:c4:f2:6e:22:e5:5d:06:7f:8c:39:6a:41:e7:b9:d6:2e:3d:
         af:96:49:79:17:63:fa:1e:68:fb:28:c2:d2:03:36:34:f9:99:
         5e:7f:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:24 2025 by rpki-client