Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235332e302f32342d3234203d3e203135323038.roa
File:                     3230302e31302e3235332e302f32342d3234203d3e203135323038.roa (raw, json)
Hash identifier:          nvPyrtVVBv46Zq9VFpj/6RsaZiH8xcFn/+CV1i0k66M=
Subject key identifier:   84:0A:B8:5B:BD:AE:99:20:EB:64:24:A9:39:AF:E5:D4:F1:6F:AF:48
Certificate issuer:       /CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
Certificate serial:       75FCD6F47BC878E90032D64A723A1E9A593E2CFA
Authority key identifier: AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235332e302f32342d3234203d3e203135323038.roa
Signing time:             Tue 04 Feb 2025 18:07:24 +0000
ROA not before:           Tue 04 Feb 2025 18:02:24 +0000
ROA not after:            Tue 03 Feb 2026 18:07:24 +0000
asID:                     15208
IP address blocks:        200.10.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fc:d6:f4:7b:c8:78:e9:00:32:d6:4a:72:3a:1e:9a:59:3e:2c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
        Validity
            Not Before: Feb  4 18:02:24 2025 GMT
            Not After : Feb  3 18:07:24 2026 GMT
        Subject: CN=840AB85BBDAE9920EB6424A939AFE5D4F16FAF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:93:10:a2:4f:e8:f4:6e:04:97:c8:02:10:
                    0c:31:86:68:be:a7:30:e2:14:48:af:87:d3:99:dc:
                    f3:19:b2:0f:71:02:84:cd:74:94:0d:7a:44:05:a1:
                    68:60:53:6c:fc:d0:07:78:6d:23:af:2b:24:a0:80:
                    21:aa:21:14:18:f9:31:fd:4e:7e:55:84:f3:85:a3:
                    13:67:cf:f5:35:b5:58:91:af:e3:cd:d7:de:5a:89:
                    fc:1b:8a:39:aa:ab:f7:d4:6e:01:26:8f:ac:07:e2:
                    a7:60:e9:87:12:5c:e8:83:b8:4c:3a:c8:85:88:c9:
                    3c:1e:70:cd:0d:9e:57:b2:5e:05:63:c7:d8:26:af:
                    b0:28:69:66:eb:cc:89:8d:be:f0:4c:5c:de:93:44:
                    51:e2:9c:69:d6:d2:79:d2:f9:91:f8:58:41:5d:bb:
                    ba:d2:d4:a4:3f:cc:6b:7f:8a:54:9b:b0:71:a6:b2:
                    97:87:71:69:ea:67:ba:2b:01:bc:8b:52:5f:88:9c:
                    3f:18:5f:5f:f0:9a:76:a6:49:1c:d2:22:40:2b:24:
                    7a:aa:46:e1:c8:77:8f:de:eb:61:7c:45:a4:83:47:
                    95:c0:af:0b:78:ce:de:ba:dd:9d:c6:be:de:d4:cc:
                    d5:51:40:d7:c1:63:dd:f0:2c:dd:05:64:65:c4:17:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:B8:5B:BD:AE:99:20:EB:64:24:A9:39:AF:E5:D4:F1:6F:AF:48
            X509v3 Authority Key Identifier:
                keyid:AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235332e302f32342d3234203d3e203135323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ba:4a:31:63:19:66:3e:1e:f7:47:3b:cb:ad:a6:af:7a:63:
         9c:61:cc:cd:1f:5d:11:c8:93:33:c0:35:aa:cd:0b:84:ab:7a:
         9f:ef:55:69:ab:a8:88:1d:ed:61:f0:d8:b1:30:9a:29:03:77:
         af:ae:b8:f9:6c:1f:40:72:32:ae:ec:b1:87:eb:01:c0:11:17:
         e4:22:63:08:d2:8c:09:54:5d:a2:52:d5:05:a2:c6:0f:f4:2f:
         90:8c:17:01:92:d5:8d:b5:bf:ca:4f:41:87:cc:00:cd:d3:28:
         3a:34:0c:9b:84:50:80:b4:10:b6:aa:11:36:7f:de:b8:bd:87:
         5b:ad:b6:fe:ff:ed:c0:85:da:f6:5d:66:5f:9e:62:46:4b:5b:
         94:f3:68:76:6a:8c:e3:75:f8:87:94:20:6a:23:13:3b:8c:cb:
         a5:5c:09:e9:33:13:8c:e8:f3:21:13:a2:aa:19:79:f9:8c:d3:
         30:63:86:a8:a8:7b:43:3c:9f:b9:3a:ce:ad:0f:21:ec:4a:c4:
         94:29:94:95:45:69:8e:7e:7c:fd:42:42:a7:e4:2f:d9:ca:53:
         79:1e:5e:da:c8:d2:f6:6d:fe:da:6c:dd:f8:1a:c5:02:5b:c3:
         45:8e:25:64:26:e9:ef:75:60:f6:73:48:20:cf:a5:11:79:61:
         fe:90:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:13:18 2025 by rpki-client