Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/3230302e33332e3137382e302f32342d3234203d3e203134313738.roa
File:                     3230302e33332e3137382e302f32342d3234203d3e203134313738.roa (raw, json)
Hash identifier:          1wbsjFf/dGvtYfEJkuB0OHqbioAj3pK48TI2IG2YSH4=
Subject key identifier:   75:D9:7F:8A:78:BB:CE:FF:89:A3:1D:9F:E0:0E:DB:3D:AF:49:D3:1D
Certificate issuer:       /CN=5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9
Certificate serial:       315030F779A6D2430A663857495D2C8780DDFD14
Authority key identifier: 5F:7F:E9:5C:E5:CE:A7:0F:86:66:F9:48:A2:AC:E9:4C:D5:17:B2:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/3230302e33332e3137382e302f32342d3234203d3e203134313738.roa
Signing time:             Tue 04 Feb 2025 19:58:46 +0000
ROA not before:           Tue 04 Feb 2025 19:53:46 +0000
ROA not after:            Tue 03 Feb 2026 19:58:46 +0000
asID:                     14178
IP address blocks:        200.33.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:30:f7:79:a6:d2:43:0a:66:38:57:49:5d:2c:87:80:dd:fd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9
        Validity
            Not Before: Feb  4 19:53:46 2025 GMT
            Not After : Feb  3 19:58:46 2026 GMT
        Subject: CN=75D97F8A78BBCEFF89A31D9FE00EDB3DAF49D31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:1a:ef:a3:69:f0:d3:cd:05:c0:bd:f6:85:
                    9d:ea:b3:09:17:b3:e2:70:4b:2a:8c:43:fd:81:d6:
                    6a:39:af:7c:81:af:f7:80:42:90:54:77:17:20:42:
                    49:4d:5c:ae:10:b7:8a:4f:ec:08:fb:5f:df:56:36:
                    6f:c8:a9:e8:bf:d9:af:1d:fc:c9:8f:4d:a0:32:34:
                    f6:e8:22:b4:92:4d:1a:63:14:95:32:72:40:28:b8:
                    0a:19:65:72:e4:28:4b:0c:f0:72:e3:c5:b0:f2:34:
                    11:1e:93:d5:f7:c2:aa:72:45:a2:75:0f:29:13:c7:
                    bd:a5:41:49:75:d8:f0:a4:e5:1f:57:d8:bf:61:56:
                    b8:24:74:92:49:5c:39:0d:fd:43:fe:01:1d:6b:a9:
                    6f:f1:04:c6:18:df:b4:82:5f:1a:a1:05:31:74:53:
                    57:33:23:be:84:47:4d:1b:d9:b3:4b:90:36:6b:45:
                    b5:36:0f:06:b0:38:fe:91:ba:18:7e:48:d6:06:04:
                    b0:4c:53:fc:ca:96:de:42:c6:33:c7:ba:c9:d9:76:
                    3a:c1:51:69:92:ba:e1:a7:b2:17:19:f2:dd:e0:d5:
                    d0:43:c4:0a:57:44:3a:a4:6f:42:36:49:b4:4a:f3:
                    33:f2:84:8e:e6:8f:3a:2b:d3:84:b7:a3:f8:52:0b:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D9:7F:8A:78:BB:CE:FF:89:A3:1D:9F:E0:0E:DB:3D:AF:49:D3:1D
            X509v3 Authority Key Identifier:
                keyid:5F:7F:E9:5C:E5:CE:A7:0F:86:66:F9:48:A2:AC:E9:4C:D5:17:B2:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/3230302e33332e3137382e302f32342d3234203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:cc:7b:97:b0:24:77:51:6d:af:09:da:73:fe:d0:21:84:1d:
         a4:39:2d:09:73:31:c1:07:9b:53:5d:b9:9d:03:e7:f0:f9:df:
         27:42:44:c4:69:cf:b1:bc:d6:36:49:1f:20:3c:c7:fa:5f:92:
         94:12:2d:53:05:4d:5f:f1:d4:bc:e4:f9:2a:b9:13:05:63:de:
         4e:8c:d0:58:ea:dc:16:b9:c1:a7:f4:51:1e:c2:f7:af:74:ed:
         95:6d:ec:73:88:52:1a:87:0b:3a:c5:c7:27:9a:6b:25:62:0e:
         f9:60:7c:90:33:8a:2e:df:86:e4:cc:2f:3f:3c:4d:88:4a:28:
         55:00:b8:fc:1f:0f:4e:af:da:14:1b:23:e1:a7:42:c2:c9:58:
         e6:e4:fd:cd:8c:c8:3f:21:3a:e6:4c:a0:c9:f9:79:2a:0a:e1:
         39:ca:39:20:ae:7e:c5:9c:9b:5a:c8:5d:79:3a:7d:81:88:16:
         a6:95:cd:15:09:00:a6:cb:1a:78:88:43:d0:02:35:b4:73:a5:
         3f:d4:01:66:d8:fd:0a:d6:8e:17:04:57:22:a1:41:3b:16:45:
         ae:a7:da:68:74:b8:68:02:c5:87:42:e2:48:af:3d:09:83:2f:
         81:29:61:91:99:fb:5e:ee:43:e1:52:2c:be:e0:48:34:7a:89:
         2e:ed:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:32 2025 by rpki-client