Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132342e302f32322d3234203d3e203237383134.roa
File:                     3230302e3131302e3132342e302f32322d3234203d3e203237383134.roa (raw, json)
Hash identifier:          Dr83BFTgTtSHVA0HXqfB+mQo05PUsTvDslyl9FLa3zw=
Subject key identifier:   5A:71:46:A3:5E:8F:98:48:EC:97:61:91:33:78:73:08:EA:F9:FB:17
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       420B4EB80579C83C6B525672F2ED3A5CCA4B00C0
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132342e302f32322d3234203d3e203237383134.roa
Signing time:             Tue 04 Feb 2025 20:08:53 +0000
ROA not before:           Tue 04 Feb 2025 20:03:53 +0000
ROA not after:            Tue 03 Feb 2026 20:08:53 +0000
asID:                     27814
IP address blocks:        200.110.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0b:4e:b8:05:79:c8:3c:6b:52:56:72:f2:ed:3a:5c:ca:4b:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Feb  4 20:03:53 2025 GMT
            Not After : Feb  3 20:08:53 2026 GMT
        Subject: CN=5A7146A35E8F9848EC97619133787308EAF9FB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:82:85:b7:d1:8f:56:bb:9b:93:ec:b6:3d:
                    05:a4:54:60:90:11:d4:d8:26:60:03:e1:02:ac:90:
                    bd:2e:69:11:ab:22:8f:d4:63:d2:fb:ef:c9:d2:26:
                    12:2a:8a:fb:de:2f:f4:6a:89:71:c3:53:18:25:eb:
                    c7:c5:f4:7f:53:bf:07:47:0b:90:7c:05:c0:93:16:
                    9c:44:78:3d:61:3d:bb:fd:04:05:1f:b8:70:88:9a:
                    ef:46:28:c8:ff:de:7a:f3:bc:2a:b8:8b:99:20:a4:
                    5a:2a:35:bf:c9:36:cb:d1:79:32:43:61:ea:58:d3:
                    53:1a:b1:5b:0b:72:9a:bf:e5:92:2c:f8:db:c5:6e:
                    a5:d4:d1:55:60:ce:68:d0:86:ed:e3:e3:01:93:01:
                    d3:8d:4d:ec:df:7f:7c:b4:ee:96:c6:fb:e3:cf:74:
                    e6:c4:68:bf:bd:14:6a:14:13:76:9f:04:8c:e7:1f:
                    ce:56:c6:ff:0e:51:d1:7d:a1:a8:e8:27:8c:24:c1:
                    1a:cc:51:9c:cf:ca:90:0b:b2:40:d5:cf:d6:9e:48:
                    12:ae:6e:9d:6d:fa:47:b9:37:6a:19:c5:2a:e3:8c:
                    e0:ea:3e:fa:57:ed:f6:8e:2e:09:24:eb:81:b3:62:
                    28:ff:37:c9:64:00:46:bc:5e:6d:4f:a4:88:75:10:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:71:46:A3:5E:8F:98:48:EC:97:61:91:33:78:73:08:EA:F9:FB:17
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132342e302f32322d3234203d3e203237383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:42:01:5c:6f:7f:02:58:d8:9a:91:a4:52:2f:5c:bb:bc:
         09:b0:f9:7e:4b:66:67:5a:5b:4c:4c:19:31:f5:39:84:f9:f7:
         f8:3b:85:a1:28:6e:3d:cc:54:f4:c2:33:3f:c7:b3:18:bc:49:
         48:d9:e9:d2:57:30:3f:2b:21:04:a5:69:d6:23:05:ab:87:8c:
         de:46:ad:1f:12:4b:2b:91:04:55:d2:eb:11:25:1f:2f:20:b0:
         57:33:60:24:53:70:c9:04:0b:81:0c:de:89:76:05:5a:b7:45:
         cb:e4:d7:14:dd:8e:ce:3c:2d:37:d2:f3:4c:f3:d8:64:5a:fd:
         8d:78:67:7b:b9:8f:25:51:58:b6:04:83:29:4f:b6:48:8f:2a:
         b3:18:a8:45:5c:6b:a4:f5:ea:a2:88:38:c5:99:03:de:e3:f9:
         9c:ca:04:3a:aa:67:ef:ae:82:54:5c:95:d1:93:76:44:0a:b8:
         ad:6e:f7:fc:07:7e:cf:3b:25:12:c3:b9:4b:fe:dd:f8:c1:09:
         20:36:ce:ed:43:40:9b:31:56:e1:c3:e3:04:c8:29:92:d0:5d:
         ab:ed:87:3e:fe:8d:5c:0d:cf:86:d7:e1:54:fe:64:d8:1c:98:
         df:34:b2:12:4f:67:ca:23:41:c9:4c:f2:42:09:61:53:7b:0f:
         a1:d3:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:13 2025 by rpki-client