Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235312e302f32342d3234203d3e203135323038.roa
File:                     3230302e31302e3235312e302f32342d3234203d3e203135323038.roa (raw, json)
Hash identifier:          q/yCqMPk3dfmTqCxpJ/2+a3yZAQJscE+2aT+84DOde4=
Subject key identifier:   9C:47:42:AE:C7:FC:A0:78:31:C2:E5:16:B0:13:80:97:71:B6:18:F6
Certificate issuer:       /CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
Certificate serial:       3E8ABB75B47FD20A66B6857498C4976350724FB6
Authority key identifier: AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235312e302f32342d3234203d3e203135323038.roa
Signing time:             Tue 04 Feb 2025 18:07:24 +0000
ROA not before:           Tue 04 Feb 2025 18:02:24 +0000
ROA not after:            Tue 03 Feb 2026 18:07:24 +0000
asID:                     15208
IP address blocks:        200.10.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:bb:75:b4:7f:d2:0a:66:b6:85:74:98:c4:97:63:50:72:4f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
        Validity
            Not Before: Feb  4 18:02:24 2025 GMT
            Not After : Feb  3 18:07:24 2026 GMT
        Subject: CN=9C4742AEC7FCA07831C2E516B013809771B618F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:7b:d0:c4:94:d1:0f:f9:65:29:f7:78:3c:
                    62:d2:62:de:4d:71:ac:4c:d4:d8:d0:69:e7:f3:c4:
                    28:ec:35:bf:a0:a9:ad:ab:5b:9e:cd:81:3e:20:04:
                    37:ae:19:fa:9e:a1:6d:26:0c:b3:a5:7b:f1:da:44:
                    17:cd:11:a9:13:53:d2:df:19:d5:b1:cc:41:ef:8b:
                    d3:a3:c3:33:de:5d:f4:53:2a:14:63:27:76:4c:54:
                    29:f1:1b:d1:86:bd:3f:e7:82:51:8d:b6:91:d0:88:
                    7b:a7:a2:5a:df:22:48:bd:26:ff:1a:03:7d:cf:4f:
                    e6:1b:61:f8:5e:1b:89:1c:53:13:33:61:2b:09:51:
                    3c:ee:52:8b:9a:77:ac:63:e0:b4:28:5b:d7:90:ed:
                    a8:77:9d:a1:57:5e:a9:55:a5:b4:cc:fd:c6:df:b4:
                    7a:71:b3:10:ec:a6:a9:9f:9a:5b:8f:11:7d:b2:47:
                    5a:aa:2b:ff:8b:6a:7f:3f:ac:a5:12:28:52:6b:25:
                    5e:f2:15:79:7b:0e:da:7d:f4:ce:bf:01:5f:2a:74:
                    5e:a2:92:9c:8c:08:20:cb:02:75:e1:a2:de:01:ef:
                    0f:80:d6:e7:7f:3d:b4:7d:d2:d6:d6:62:54:81:84:
                    83:bf:f8:1c:c1:d7:ad:59:c1:30:91:ce:5c:c8:60:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:47:42:AE:C7:FC:A0:78:31:C2:E5:16:B0:13:80:97:71:B6:18:F6
            X509v3 Authority Key Identifier:
                keyid:AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235312e302f32342d3234203d3e203135323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:33:3e:f0:2b:0e:af:73:58:b0:09:0a:d4:e1:19:79:77:44:
         ba:9b:c9:cb:03:06:be:72:98:2f:dd:8b:e9:86:5e:01:2b:ad:
         53:53:0c:c8:3a:4c:d9:bd:d2:56:03:7a:59:cb:6a:cd:db:20:
         7e:39:f3:7c:72:3b:bd:d1:0b:5b:f6:a3:39:8e:ec:8a:38:a8:
         c6:99:bd:49:20:22:04:09:4c:90:38:71:8b:72:52:88:ae:a7:
         57:a9:eb:e5:7f:69:e7:94:98:41:5e:89:13:13:3e:51:17:4e:
         6b:fa:a4:c6:3f:e7:b1:1b:31:c4:a2:e1:ea:4f:c3:0e:07:c0:
         cf:e2:62:f2:f3:f6:e8:6d:46:a0:be:02:fb:c0:0b:31:09:b4:
         06:2d:08:11:43:2d:e3:12:82:5f:07:98:24:20:71:40:ab:6c:
         2f:56:bc:c5:dd:41:90:dd:c3:47:54:69:6e:53:eb:28:1b:2c:
         bc:4c:38:22:22:ee:4f:53:64:31:7a:83:05:c1:8c:34:e7:a9:
         18:b3:5b:6d:45:9b:06:7b:a5:ef:a9:26:b2:74:b6:ec:ce:3a:
         15:54:97:86:b6:af:d2:a1:b7:4a:b9:de:0b:54:51:1b:de:83:
         2f:02:c1:9d:64:aa:77:3c:40:3a:62:a8:cc:8d:b6:3d:da:9e:
         6a:46:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:13:19 2025 by rpki-client