Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa
File:                     3230302e38392e39362e302f31392d3234203d3e2038313633.roa (raw, json)
Hash identifier:          aQmBXfH3+KGTR+hVWgCH9IGFLVWb+XIfFJ5G83yq4ng=
Subject key identifier:   79:A7:C5:89:5F:3D:58:19:5B:DF:C9:3A:19:55:6B:EF:30:D3:EA:DA
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       2253BD07EB63FA9A17F819ED571AEE558DDBFFF3
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa
Signing time:             Tue 04 Feb 2025 18:46:46 +0000
ROA not before:           Tue 04 Feb 2025 18:41:46 +0000
ROA not after:            Tue 03 Feb 2026 18:46:46 +0000
asID:                     8163
IP address blocks:        200.89.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:53:bd:07:eb:63:fa:9a:17:f8:19:ed:57:1a:ee:55:8d:db:ff:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Feb  4 18:41:46 2025 GMT
            Not After : Feb  3 18:46:46 2026 GMT
        Subject: CN=79A7C5895F3D58195BDFC93A19556BEF30D3EADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:09:66:d7:77:8e:c7:3a:47:07:2f:4a:9e:
                    96:ff:6c:1d:97:f7:f8:38:2c:84:31:b3:e9:99:59:
                    28:9a:ba:17:8e:c8:e7:82:36:5e:a2:95:59:6f:bb:
                    76:f7:30:ee:3a:1d:a4:cf:77:70:1a:cc:fc:30:b7:
                    7b:ed:fa:7e:32:5d:f6:39:9f:4e:9c:3a:38:90:e9:
                    cf:fd:e3:0b:57:70:4c:08:ff:15:c5:3e:73:46:97:
                    d8:a4:ba:6b:b1:cc:38:80:6d:38:22:63:6d:3c:61:
                    fe:2c:35:40:98:e8:f3:15:76:a3:f9:9a:fe:c3:f7:
                    19:84:0f:a6:73:3c:86:c2:58:eb:43:50:94:f2:0c:
                    cb:57:b9:90:e0:a0:30:5a:66:1c:0a:c3:e3:19:11:
                    3a:26:70:93:63:11:66:4f:75:03:59:6f:5b:d1:03:
                    b3:85:66:ca:1a:66:ca:4a:30:03:37:3f:a2:4f:02:
                    b4:87:35:db:84:22:6a:28:92:94:82:04:4b:c2:9d:
                    25:ad:9d:44:7f:a3:3b:4c:32:1a:25:ed:45:ca:03:
                    32:93:ab:4e:b0:ba:19:47:79:b1:31:e2:58:36:dd:
                    1a:c7:56:a7:d5:0b:f2:1d:cc:ea:eb:a2:83:07:c7:
                    6a:55:45:5d:47:1c:93:35:47:22:8a:7a:aa:af:65:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A7:C5:89:5F:3D:58:19:5B:DF:C9:3A:19:55:6B:EF:30:D3:EA:DA
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:46:1d:d9:5f:0b:d5:a1:3a:bf:24:99:0e:fc:74:f4:0d:
         eb:88:7d:82:1f:53:61:56:ca:05:8d:f5:3c:a6:3b:11:5f:28:
         c1:ea:22:86:64:b3:44:a5:3c:eb:41:7c:02:91:db:a1:8c:fb:
         5d:ce:49:70:81:57:b9:6f:d0:5f:fe:57:a6:b7:e5:4e:de:69:
         14:35:8d:59:eb:1a:e0:3d:43:95:a2:b4:a6:d2:53:3e:5e:bb:
         81:6d:11:b3:dc:82:df:81:69:18:12:69:4d:0c:cb:23:89:92:
         bc:cc:80:2e:83:3d:60:b4:a6:be:58:fc:e0:7d:67:8d:32:58:
         5c:ca:42:54:97:f2:9b:45:46:0e:0d:6a:dd:3e:d4:bc:f5:c9:
         72:4a:e6:d2:73:19:01:ef:e8:8c:3f:72:92:45:c9:68:bb:6b:
         9f:8f:3b:f8:78:d9:5c:49:50:a3:02:d6:17:e8:57:d5:0f:4d:
         f9:61:51:71:3b:0a:b6:d1:92:16:f8:31:d2:3e:e2:d6:55:36:
         5a:d6:52:33:5f:95:65:63:ce:61:0b:e4:ac:6e:00:0d:4c:ad:
         b4:dc:20:58:dd:3f:f1:1d:1e:e8:56:a7:a0:54:54:57:32:0c:
         54:f0:3e:94:80:1d:fb:8d:5d:9c:8d:92:b7:02:6e:a0:ba:a6:
         84:16:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:39:15 2025 by rpki-client