Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235322e302f32342d3234203d3e203135323038.roa
File:                     3230302e31302e3235322e302f32342d3234203d3e203135323038.roa (raw, json)
Hash identifier:          wcZ+KMvGTbaLJiHkX8Nnds5AibH4756EGeyhS44ybuc=
Subject key identifier:   DA:6A:64:FA:1D:B4:9E:24:6A:E3:73:AD:F4:9F:ED:CF:3D:D2:7A:00
Certificate issuer:       /CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
Certificate serial:       765A27CAD50704F91BFD7258E9E3AF09CF5938AC
Authority key identifier: AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235322e302f32342d3234203d3e203135323038.roa
Signing time:             Tue 04 Feb 2025 18:07:23 +0000
ROA not before:           Tue 04 Feb 2025 18:02:23 +0000
ROA not after:            Tue 03 Feb 2026 18:07:23 +0000
asID:                     15208
IP address blocks:        200.10.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5a:27:ca:d5:07:04:f9:1b:fd:72:58:e9:e3:af:09:cf:59:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
        Validity
            Not Before: Feb  4 18:02:23 2025 GMT
            Not After : Feb  3 18:07:23 2026 GMT
        Subject: CN=DA6A64FA1DB49E246AE373ADF49FEDCF3DD27A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:b1:e3:7a:ce:1d:99:39:15:db:39:21:44:
                    de:fa:85:d7:da:0b:d8:d1:3b:ae:f9:d6:07:0f:a3:
                    fc:e2:83:36:a4:29:8f:35:2d:25:c1:a3:e8:96:c5:
                    08:56:1e:65:16:d1:64:07:13:c7:4e:ec:f2:fc:a3:
                    92:71:2d:71:cd:7f:f5:94:97:20:61:cf:12:23:55:
                    45:01:d4:51:62:0c:e9:3f:34:05:a0:2e:1d:01:7a:
                    c2:1c:a3:3a:b1:2b:01:7b:d5:01:26:d9:4c:0a:be:
                    99:37:d1:de:8f:3e:1e:d4:be:34:2a:de:27:fa:4b:
                    8f:1d:4b:9d:6a:23:fa:33:0e:9f:c3:7b:8c:79:ef:
                    12:df:59:88:82:c8:86:4f:7f:90:98:0f:cb:16:d8:
                    39:ba:b3:c0:dc:0f:7e:b1:d5:c4:7d:cd:61:3f:f2:
                    41:76:93:ea:3b:2a:0e:ab:4a:1a:ad:1a:5a:60:a5:
                    cf:d7:30:dc:93:cb:df:90:96:32:4a:39:94:a3:05:
                    b0:39:b5:76:bf:9b:98:92:98:22:5b:8c:36:e8:00:
                    ce:96:5b:8a:d8:d8:bf:6e:56:db:cf:78:6f:54:5e:
                    1f:d7:ba:93:d0:5a:41:f5:41:3f:5f:64:8d:18:15:
                    d3:14:9a:b9:83:0b:fa:d3:ed:90:16:f3:56:9b:90:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:64:FA:1D:B4:9E:24:6A:E3:73:AD:F4:9F:ED:CF:3D:D2:7A:00
            X509v3 Authority Key Identifier:
                keyid:AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235322e302f32342d3234203d3e203135323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:c4:5c:d2:4d:fc:b6:ec:28:3d:d7:2b:68:de:4e:8f:27:
         28:49:e2:ed:33:02:0e:50:f3:10:cd:3c:c4:73:df:52:41:86:
         02:4a:50:1a:7b:6d:79:49:fb:c8:dd:1c:37:64:7e:bb:e1:85:
         65:34:4d:64:a9:0b:38:99:04:7e:c9:29:00:e5:a7:14:84:4d:
         b8:d3:e0:2d:27:2f:f4:f0:31:97:25:58:9a:9e:34:b3:83:61:
         72:33:32:4c:2a:ab:56:94:a1:e9:15:c8:d6:c0:ec:5c:b6:b0:
         09:f7:bd:03:10:9b:40:9a:c6:ef:1f:17:ba:a7:e4:b6:d1:de:
         f9:89:8a:93:ef:f5:56:8d:19:7a:fd:40:4e:a5:0c:20:fc:85:
         07:ff:ae:0c:c4:27:8d:cf:aa:09:dd:71:4c:2a:dc:0a:93:40:
         4f:5e:d3:b2:68:1b:14:99:29:80:29:d6:37:40:04:45:49:8a:
         8b:4e:92:0b:a1:42:88:0c:ef:36:df:5d:e1:75:8f:d0:bf:92:
         61:e8:21:4c:01:cc:93:c5:ee:d2:d6:c2:84:a7:d9:6e:d0:ea:
         7c:70:32:d6:26:54:77:0c:59:65:b7:07:81:7a:0c:55:0a:58:
         b2:18:87:23:ce:9d:5e:08:4b:ed:57:0f:75:ad:3b:f1:ac:86:
         c1:8d:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:13:18 2025 by rpki-client