Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3230302e36332e35362e302f32312d3234203d3e203237393235.roa
File:                     3230302e36332e35362e302f32312d3234203d3e203237393235.roa (raw, json)
Hash identifier:          7kcHKlM3piXbEvWBQ8oZ0T6mPTuPInsxYP1THglLpI0=
Subject key identifier:   75:41:DB:5F:A8:4A:8B:D1:05:07:D0:F4:D6:F3:67:F9:65:A0:3F:D0
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       5E7864AF71A5D5DB2AAA437D48DFB72F232DE0D2
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3230302e36332e35362e302f32312d3234203d3e203237393235.roa
Signing time:             Tue 04 Feb 2025 18:44:24 +0000
ROA not before:           Tue 04 Feb 2025 18:39:24 +0000
ROA not after:            Tue 03 Feb 2026 18:44:24 +0000
asID:                     27925
IP address blocks:        200.63.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:78:64:af:71:a5:d5:db:2a:aa:43:7d:48:df:b7:2f:23:2d:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Feb  4 18:39:24 2025 GMT
            Not After : Feb  3 18:44:24 2026 GMT
        Subject: CN=7541DB5FA84A8BD10507D0F4D6F367F965A03FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:fe:19:77:e4:cc:b0:de:2b:ec:cd:ae:4e:
                    a3:9e:75:fb:1a:52:72:d2:ac:33:b0:65:7e:10:b3:
                    d2:fc:4a:bc:e6:8e:68:ed:e9:78:5d:11:00:ad:0a:
                    35:5b:a1:56:17:90:b1:32:ba:08:6f:a0:4a:1e:49:
                    df:e4:40:14:67:3d:c8:53:4d:52:90:28:bd:fc:26:
                    d9:77:6d:7b:95:9f:7c:33:0c:09:54:35:da:6b:43:
                    ba:41:fb:72:6c:e6:32:c9:7a:25:06:78:e3:a2:bf:
                    8a:91:89:e7:aa:d8:2c:ec:9c:1e:f4:e2:c6:49:54:
                    b8:15:d5:f2:23:92:d0:ee:c1:8d:93:26:65:d9:d2:
                    34:ba:e4:00:1d:19:bc:f1:95:b5:1b:0f:bd:62:b1:
                    c6:e6:b2:25:21:a0:78:6d:41:4e:02:bd:79:e6:ca:
                    a5:cd:42:c9:8b:6e:d8:d9:09:28:dd:1e:a6:85:b2:
                    49:17:e5:8f:34:69:4b:9f:4c:34:ca:68:ad:4a:46:
                    77:50:d0:f9:74:35:25:a6:07:0b:a4:56:4a:9a:45:
                    7e:91:52:f1:81:cd:5e:4d:18:1f:6c:d5:66:83:ed:
                    f2:89:1f:6b:93:fd:7c:29:81:b6:1c:7b:e3:be:77:
                    4f:6b:61:0d:1e:df:93:43:9c:2a:8f:47:5e:37:62:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:DB:5F:A8:4A:8B:D1:05:07:D0:F4:D6:F3:67:F9:65:A0:3F:D0
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3230302e36332e35362e302f32312d3234203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:d0:21:64:03:fb:a7:ca:72:48:a1:2d:9f:aa:65:ab:d4:1a:
         f2:ff:c6:cb:b4:f8:e7:38:68:06:c9:c0:b0:81:6b:2a:b0:d2:
         bf:e1:d6:e0:7e:60:fc:b7:d4:8a:76:8c:48:93:be:e9:43:3f:
         d1:7d:63:7f:b7:7d:ee:0a:8a:92:d2:a2:f7:d9:83:5c:47:0b:
         0b:19:3d:8c:58:49:8e:d2:51:2f:6e:fe:5f:8f:2a:b0:ed:1b:
         ae:42:78:29:da:03:29:12:b5:65:47:87:b9:00:22:ec:cd:5a:
         92:f7:47:8a:c9:71:40:5d:88:a6:83:d5:9c:cf:9f:e6:eb:fd:
         a5:bb:fb:bf:1e:52:99:34:dc:cb:ea:a2:a0:cd:da:46:02:eb:
         99:37:dd:0a:e7:66:22:35:ce:d9:32:a8:cc:f2:ca:42:a2:4b:
         2a:48:6a:92:8f:d2:39:9e:3a:85:ba:ca:40:c6:dc:df:de:31:
         54:3e:67:6c:1c:96:a0:bf:51:57:65:99:f9:fa:4c:a5:6d:07:
         7f:4e:61:4b:96:4e:1d:11:bd:f7:98:65:e3:f9:f2:ec:c3:2a:
         a1:ef:17:0d:03:1a:f8:a0:6b:3f:3c:44:b0:01:52:5b:95:1a:
         e2:49:78:57:44:cc:79:1f:c8:50:b5:97:2d:5a:e4:7c:e4:52:
         f8:30:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:13 2025 by rpki-client