Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3132352e36342e302f31382d3234203d3e203237373437.roa
File:                     3230302e3132352e36342e302f31382d3234203d3e203237373437.roa (raw, json)
Hash identifier:          6m/FL76KTyHsZyJWOZ9sG3dTeDmUSAvgwsVTsI4ZYL4=
Subject key identifier:   F8:E6:C8:51:48:38:CC:59:A5:25:BE:EB:B6:9A:67:C3:1C:92:23:85
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       41164D0CBDD842856A5CA5E4D710A0BF91ABFAD7
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3132352e36342e302f31382d3234203d3e203237373437.roa
Signing time:             Tue 04 Feb 2025 18:34:52 +0000
ROA not before:           Tue 04 Feb 2025 18:29:52 +0000
ROA not after:            Tue 03 Feb 2026 18:34:52 +0000
asID:                     27747
IP address blocks:        200.125.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:4d:0c:bd:d8:42:85:6a:5c:a5:e4:d7:10:a0:bf:91:ab:fa:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Feb  4 18:29:52 2025 GMT
            Not After : Feb  3 18:34:52 2026 GMT
        Subject: CN=F8E6C8514838CC59A525BEEBB69A67C31C922385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:b1:bb:13:d9:fe:1d:58:bb:ce:ed:07:69:
                    48:4e:24:eb:51:6d:c2:4f:2d:50:aa:c6:45:f2:cf:
                    a5:c6:be:fe:1b:f2:5d:dc:82:1e:d0:f2:06:66:b8:
                    be:cf:52:e3:e2:2a:ca:02:f2:a9:36:82:19:d0:45:
                    db:9a:62:af:96:33:8c:7d:a3:1a:e8:7f:23:2f:7f:
                    50:c2:7e:8d:8f:d1:58:93:01:7d:17:eb:76:bd:71:
                    9c:52:40:36:32:c8:bb:9f:19:f4:3d:25:53:1c:04:
                    e8:5e:5c:33:0f:2d:17:f0:cf:88:55:1a:f9:2b:d5:
                    c2:0f:4b:c6:bd:ac:7b:0f:74:d8:d2:c4:3b:04:7a:
                    0e:ed:b6:d1:d7:b4:5d:b9:6d:ea:46:7f:8a:58:3e:
                    c8:fa:e3:31:17:6e:41:9a:b4:c2:f8:d3:6a:17:b1:
                    75:ce:41:f3:27:f9:35:10:e5:47:cf:77:6d:67:b0:
                    75:82:70:6a:85:7c:22:69:3b:dd:75:d3:53:de:0f:
                    bb:eb:2f:ae:cc:6c:99:1b:17:e2:f9:c3:13:fa:65:
                    5f:43:6d:0f:2b:af:f1:3d:79:85:2f:4a:fb:6d:49:
                    98:63:4b:9f:18:a8:bb:d8:0b:2d:aa:ab:2d:50:f8:
                    cd:c2:08:f0:9f:82:e4:9d:c5:9f:81:99:cf:5e:a6:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:C8:51:48:38:CC:59:A5:25:BE:EB:B6:9A:67:C3:1C:92:23:85
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3132352e36342e302f31382d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d3:a8:18:96:d4:00:bc:30:10:07:d1:47:5a:27:dc:26:13:0d:
         8d:4f:42:86:a2:1e:81:b7:8b:76:aa:24:f4:16:a7:48:9f:40:
         dd:4e:de:50:45:df:a1:f1:54:34:08:b3:66:a9:cc:a7:0e:92:
         80:46:c0:af:94:c6:47:28:47:68:32:60:d4:00:34:a6:b1:10:
         9c:e9:5d:b8:3e:8d:51:59:6e:e7:ba:58:cd:69:51:33:9b:96:
         81:54:93:7d:31:11:04:d8:1a:73:26:76:58:fa:21:af:21:5c:
         a7:55:6e:14:95:e3:4f:72:98:91:82:fa:fa:a1:f4:b1:dc:6a:
         95:dc:a1:19:f5:d6:7f:62:51:08:0d:41:78:f9:a7:2a:33:c3:
         06:9c:57:20:4e:64:27:15:e3:57:04:13:1e:50:f7:19:af:02:
         55:05:a3:cb:aa:bc:29:66:2e:f6:bc:37:46:d0:eb:e0:6f:cf:
         1f:b3:14:e4:56:55:f1:8b:d2:22:30:a3:30:ca:45:90:99:de:
         2f:8e:9f:a4:2c:46:63:99:43:e1:24:41:96:10:d3:64:2e:8f:
         d3:28:77:94:91:70:bd:35:f6:d9:9c:34:46:c1:7b:42:e4:3d:
         56:80:ad:17:90:ad:37:33:f7:9d:bb:b6:b3:46:0a:a4:36:3c:
         16:03:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:11:34 2025 by rpki-client