Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa
File:                     3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa (raw, json)
Hash identifier:          SRHFs8rCtn4k/ueB2fhIapnAw/bhoAg3ZYMtpe/4waA=
Subject key identifier:   40:99:F2:65:CF:E8:FB:3F:E9:B4:92:D6:C6:29:23:60:6D:CD:F8:DB
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       7CF2A6C8294A4128B6B9DB767FACF30E74DF75B9
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa
Signing time:             Tue 04 Feb 2025 20:08:53 +0000
ROA not before:           Tue 04 Feb 2025 20:03:53 +0000
ROA not after:            Tue 03 Feb 2026 20:08:53 +0000
asID:                     52483
IP address blocks:        200.110.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f2:a6:c8:29:4a:41:28:b6:b9:db:76:7f:ac:f3:0e:74:df:75:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Feb  4 20:03:53 2025 GMT
            Not After : Feb  3 20:08:53 2026 GMT
        Subject: CN=4099F265CFE8FB3FE9B492D6C62923606DCDF8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:1d:2c:24:e5:a2:61:11:88:e7:a1:84:a7:
                    b1:4a:44:c1:68:65:e3:d0:72:a2:4b:bc:26:a7:f2:
                    54:db:28:f0:44:ec:69:fc:78:a9:0e:ef:81:57:29:
                    ac:e2:83:c5:76:44:35:c8:2d:69:3a:21:a7:4d:69:
                    66:27:b6:97:cc:8c:db:5c:24:5e:73:98:68:20:90:
                    23:5d:af:bc:54:f7:ad:9d:40:22:b6:83:24:d4:72:
                    f0:39:36:ca:1b:c7:82:61:b3:13:a5:cd:26:a9:e8:
                    b8:b6:7b:2b:d8:cc:60:76:78:ed:b9:1e:c2:a2:c4:
                    16:47:fc:1e:51:b4:83:a5:d0:c6:89:90:fb:69:5c:
                    1d:d7:d7:e9:62:1d:9a:1b:bc:c0:1b:ec:88:75:0e:
                    92:03:b2:5b:ce:19:a2:16:55:f1:31:c4:38:d4:13:
                    08:64:9e:11:44:51:37:b1:f7:71:30:9a:cf:6a:3b:
                    6a:48:9e:1a:e0:ae:c4:1d:e2:bc:13:cf:fb:a8:29:
                    6d:db:fa:2e:fe:50:cc:09:ca:4a:97:98:a3:21:5f:
                    39:d4:d8:41:6b:cf:5f:61:ad:cd:e6:90:85:b1:de:
                    f9:6b:8c:25:d7:ca:c9:77:aa:b0:4f:38:ef:b1:88:
                    2e:95:cf:d5:b7:93:df:c9:5b:02:03:72:3d:a7:56:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:99:F2:65:CF:E8:FB:3F:E9:B4:92:D6:C6:29:23:60:6D:CD:F8:DB
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:04:cd:c9:c5:f4:a2:ae:47:95:9f:19:56:aa:fe:39:f8:
         6a:c5:a7:03:39:dd:4e:34:cb:52:56:2d:d6:4d:58:7a:38:05:
         04:39:b4:72:33:8f:4d:b8:0f:02:4d:37:28:1a:80:4e:aa:18:
         0d:03:e8:d5:a8:39:02:30:85:45:89:17:68:5d:34:d6:46:08:
         9b:8f:8e:48:d8:3b:02:89:9b:83:8c:17:76:81:ae:eb:43:cd:
         8f:d1:fa:ed:03:17:82:3b:de:eb:ea:ae:7c:24:3a:d8:4c:a3:
         3c:22:3b:b7:45:08:b5:be:99:6a:24:2d:bd:00:32:b3:69:aa:
         73:b0:99:71:b9:58:7b:74:74:c8:3a:a1:1a:d5:cd:46:99:7e:
         bb:53:dd:db:00:d0:db:d8:2b:c3:60:6a:7c:00:85:5c:a5:65:
         06:6b:d0:82:1d:1d:2e:bb:54:72:39:90:91:1d:d4:c9:0b:82:
         3c:b8:d8:ba:f7:a3:47:a2:1a:b2:74:cf:a0:e7:52:c3:a7:2c:
         84:2b:11:3e:0f:92:c4:89:d8:3e:e6:1c:24:29:4c:e8:d0:4d:
         92:1f:e4:4b:7b:e4:25:67:7a:3b:eb:09:6b:40:71:4d:b1:4d:
         8c:e9:ac:92:db:11:7e:0c:ff:6f:7c:29:ca:6c:fd:fb:35:93:
         42:a5:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:52 2025 by rpki-client