Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/3230302e36312e3235342e302f32332d3233203d3e20323632313734.roa
File:                     3230302e36312e3235342e302f32332d3233203d3e20323632313734.roa (raw, json)
Hash identifier:          mHfYDbznc/EFsXW/UtniBvS/fH8hhV6/aagspziX5jM=
Subject key identifier:   6D:E9:E0:B4:E8:49:F4:E6:A9:18:7E:3D:AA:6C:9C:B8:DB:87:19:DA
Certificate issuer:       /CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
Certificate serial:       2D9EEDF6D3187D22C63EC4123C29030C2EE93248
Authority key identifier: 5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/3230302e36312e3235342e302f32332d3233203d3e20323632313734.roa
Signing time:             Tue 04 Feb 2025 18:51:12 +0000
ROA not before:           Tue 04 Feb 2025 18:46:12 +0000
ROA not after:            Tue 03 Feb 2026 18:51:12 +0000
asID:                     262174
IP address blocks:        200.61.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9e:ed:f6:d3:18:7d:22:c6:3e:c4:12:3c:29:03:0c:2e:e9:32:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
        Validity
            Not Before: Feb  4 18:46:12 2025 GMT
            Not After : Feb  3 18:51:12 2026 GMT
        Subject: CN=6DE9E0B4E849F4E6A9187E3DAA6C9CB8DB8719DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:e5:6c:65:8a:1a:cf:50:39:78:f8:39:2f:
                    bf:70:55:6e:d4:3a:72:32:96:3c:33:6e:4e:e0:d5:
                    11:95:c2:5c:be:a3:86:e8:cf:ac:3b:5a:1b:5c:11:
                    6c:46:93:86:19:58:e1:5e:dd:80:11:9f:a6:0d:e1:
                    04:51:79:d2:6f:78:d0:9f:4f:73:1a:ea:b9:38:4d:
                    fa:30:ac:64:77:5b:9c:97:dd:58:7c:3f:d3:aa:f0:
                    5f:3a:3b:e8:71:81:1e:da:e0:35:67:a7:3f:10:08:
                    db:8f:ac:d7:a9:40:7f:34:2f:20:a3:8e:aa:2b:e5:
                    16:dd:7a:fb:21:9b:7d:f7:a2:ff:87:42:dc:28:d9:
                    08:3a:18:11:88:a7:b2:62:06:bd:30:59:09:13:b0:
                    43:0c:8c:14:63:50:1f:9e:56:e3:d4:58:76:ca:07:
                    fd:7e:3e:b1:11:8f:ae:21:04:dd:0e:66:e7:ad:c9:
                    e5:75:99:48:d7:8e:97:9b:28:7a:c9:6a:57:3e:8e:
                    92:75:4f:4a:e3:3b:07:a4:5b:c6:87:84:ab:84:54:
                    bb:46:5b:e6:41:6c:63:13:d7:1d:b7:c5:2b:b8:9d:
                    00:06:47:c6:6e:d9:10:2d:eb:62:bb:44:42:e5:64:
                    53:c5:97:85:d3:8a:be:36:4b:fe:03:f8:2b:3b:f9:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:E0:B4:E8:49:F4:E6:A9:18:7E:3D:AA:6C:9C:B8:DB:87:19:DA
            X509v3 Authority Key Identifier:
                keyid:5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/3230302e36312e3235342e302f32332d3233203d3e20323632313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:32:36:94:16:d9:10:48:56:28:77:29:b8:04:06:b9:8e:
         8d:31:e9:9f:ec:42:51:0a:ee:e2:8b:de:31:08:c9:b6:00:16:
         a1:ab:c9:be:c8:9c:94:e0:e4:06:54:f2:36:d9:04:1e:10:49:
         4e:65:8b:fa:6e:f9:a0:4f:52:d2:4e:54:98:7c:31:74:8f:01:
         56:f0:9b:4c:4e:6e:fe:73:9d:00:bd:ab:b4:cd:8f:70:d6:a7:
         34:95:b6:18:ba:34:ac:9b:9f:1a:9c:1d:ee:9d:67:db:a7:f8:
         4d:9f:17:23:b4:21:67:1e:a3:e2:57:aa:11:6f:66:3b:29:f4:
         78:27:b0:ea:cb:bc:50:bc:b9:fa:f5:7b:bf:db:64:0b:bd:cd:
         ff:d5:e8:17:b6:7c:fe:a4:92:b9:42:67:95:1e:39:26:0b:2c:
         f2:4c:e4:03:d7:83:66:4e:d9:99:f9:7e:71:df:6a:0a:cc:32:
         2d:53:2f:bd:61:eb:32:19:ff:01:20:02:18:b7:8e:23:53:6d:
         62:f7:5d:9e:56:77:d4:a4:71:df:7d:f0:61:a5:45:dd:f0:10:
         9c:7a:bf:fb:1b:f7:09:d8:93:7d:15:90:56:6b:b4:c9:7b:b4:
         45:40:c0:aa:5c:6b:da:af:51:b8:8b:a3:7f:6a:3c:62:8c:aa:
         4f:b9:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:50:22 2025 by rpki-client