Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa
File:                     3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa (raw, json)
Hash identifier:          thErJ5FrMns6C5ACyYtoOkkZKeM88J0/zzkcOe6GS9E=
Subject key identifier:   54:0C:CF:D9:44:DE:1D:4A:11:23:07:7B:3A:17:61:76:E2:FC:6D:49
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       3B5FE16F5FB795A671577903524979F26A3A5F22
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa
Signing time:             Tue 04 Feb 2025 18:54:00 +0000
ROA not before:           Tue 04 Feb 2025 18:49:00 +0000
ROA not after:            Tue 03 Feb 2026 18:54:00 +0000
asID:                     271866
IP address blocks:        200.36.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5f:e1:6f:5f:b7:95:a6:71:57:79:03:52:49:79:f2:6a:3a:5f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Feb  4 18:49:00 2025 GMT
            Not After : Feb  3 18:54:00 2026 GMT
        Subject: CN=540CCFD944DE1D4A1123077B3A176176E2FC6D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:98:fa:76:21:ff:01:25:34:66:8c:e0:50:
                    e1:ae:7b:ca:23:a7:8d:5b:db:f7:1c:d9:c0:e7:f3:
                    16:73:d1:da:42:38:71:85:20:b6:55:ec:38:c9:49:
                    25:04:aa:29:72:ac:b3:e2:3d:ea:df:00:45:9d:6e:
                    7e:96:b7:9c:c7:65:8e:35:c4:ff:b3:b3:92:7a:27:
                    0e:61:fc:c0:38:ec:cd:45:21:71:f8:6b:3a:54:ce:
                    9e:ff:41:2b:40:0b:a6:f1:cb:1a:9d:d8:d1:28:97:
                    fa:fd:22:ef:35:45:42:2f:83:72:ce:35:5b:20:2a:
                    b1:2a:c0:5b:d5:47:e6:a7:af:d6:47:c6:18:15:e3:
                    8a:ea:6d:fe:a2:d6:4c:b9:58:35:c0:9d:1a:ea:a0:
                    c3:cb:31:79:b2:98:03:87:89:8a:ec:49:63:11:59:
                    49:2c:ba:04:90:df:4c:05:b1:31:26:c2:71:ad:90:
                    dc:b9:0b:a6:5c:a7:05:e4:64:55:2c:38:5b:de:37:
                    52:15:98:11:99:71:5f:86:29:0f:9d:38:79:57:12:
                    1e:6c:ab:f7:90:68:d3:8f:f3:79:10:73:5e:85:d4:
                    a4:1c:c6:49:5c:69:c7:2a:b3:37:48:fc:40:65:51:
                    5f:8e:b5:f3:4e:a2:f0:42:6b:a5:c7:74:12:13:38:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:CF:D9:44:DE:1D:4A:11:23:07:7B:3A:17:61:76:E2:FC:6D:49
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:19:5a:18:3f:24:4a:66:62:48:4e:b3:0a:bd:2e:83:e0:cb:
         40:05:f4:24:64:48:d1:ea:54:a2:fd:99:3b:2a:ae:bc:56:16:
         aa:3f:ab:d4:88:1b:43:b6:87:d5:b9:44:f5:a3:30:5a:f1:d6:
         8a:66:21:58:58:bb:70:b7:36:21:c3:b0:ef:67:0c:72:3a:1c:
         ca:35:53:8d:9f:87:0d:55:d5:db:0a:16:08:a2:9d:34:ab:fa:
         79:dd:05:86:b1:f9:3e:6d:ef:46:63:61:63:ca:d2:72:6f:40:
         ac:d8:ef:1b:1c:b9:5a:54:a0:42:8f:27:9d:55:b6:e1:7b:7a:
         ab:dc:05:63:36:8c:a6:c8:11:40:f2:d8:96:20:52:6d:b9:86:
         55:7d:6c:ad:0c:13:9f:9a:b9:17:d7:72:00:6c:57:75:f3:c5:
         84:f7:c9:b6:c0:eb:3e:32:98:4e:c8:0a:04:34:38:39:9a:42:
         b0:f1:d4:dd:5b:99:96:f0:7d:27:f2:12:62:94:a7:5f:8d:ec:
         11:35:02:85:51:40:9c:cc:76:02:e8:7d:ca:a8:df:4c:69:be:
         85:16:36:14:1c:1d:3f:a0:87:dd:a1:96:34:b4:22:cf:63:30:
         12:14:3f:75:6a:b5:59:fb:21:1c:22:1a:ef:02:8a:11:c4:5b:
         f5:66:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:30 2025 by rpki-client