Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2036313437.roa
File:                     3230302e33362e3135362e302f32332d3234203d3e2036313437.roa (raw, json)
Hash identifier:          Iv2z5szWUx3DIFzs2oEkfIuuDJYc5jQT5fsoD4gZVrI=
Subject key identifier:   DB:17:C6:9A:CB:5D:5D:74:5D:A6:70:E0:E1:9F:04:66:7F:5B:24:3E
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       10742D287702807B8B16CF3A4B5B31DF837BBE66
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 18:54:01 +0000
ROA not before:           Tue 04 Feb 2025 18:49:01 +0000
ROA not after:            Tue 03 Feb 2026 18:54:01 +0000
asID:                     6147
IP address blocks:        200.36.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:74:2d:28:77:02:80:7b:8b:16:cf:3a:4b:5b:31:df:83:7b:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Feb  4 18:49:01 2025 GMT
            Not After : Feb  3 18:54:01 2026 GMT
        Subject: CN=DB17C69ACB5D5D745DA670E0E19F04667F5B243E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:98:63:fd:8d:f8:30:2d:54:12:66:47:a4:
                    01:98:37:ea:88:2c:6f:40:75:12:1a:eb:57:43:47:
                    3f:1f:67:ad:24:5b:94:f6:c5:f5:a9:a4:f7:fc:2c:
                    0e:71:9d:2a:c6:37:62:e7:d2:8e:6f:3a:d9:49:6a:
                    03:22:cf:93:b2:a3:ec:19:80:1a:ac:4e:d0:e4:a0:
                    57:fd:a0:61:d9:d4:40:33:b0:a7:f2:f8:65:19:3a:
                    1f:84:f0:53:ff:27:f9:74:e1:e1:5b:50:52:fb:53:
                    12:c0:31:07:6c:f5:ac:ce:6f:32:ef:71:99:31:e1:
                    6a:4e:0e:e6:bd:9f:33:84:26:be:23:18:9a:d4:d3:
                    b4:36:ac:78:f2:0c:2c:6e:0e:25:22:e2:a8:b4:b0:
                    44:c1:c1:29:1f:78:8a:60:4a:c2:c3:2f:eb:d3:56:
                    d5:a4:59:af:10:56:0a:0a:e4:2c:22:f0:76:4c:19:
                    c4:cc:3e:fe:79:33:8a:39:c3:8d:0e:aa:87:78:e7:
                    2d:3e:81:00:b7:56:10:85:d7:9c:85:2b:41:ab:ab:
                    76:c2:1f:f5:3d:1c:02:58:5d:90:e3:0b:c6:fa:7a:
                    87:aa:99:c7:2b:86:97:18:dc:87:61:ee:b2:b1:25:
                    8d:47:88:75:38:08:04:d1:c4:3d:1a:2f:75:35:bf:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:17:C6:9A:CB:5D:5D:74:5D:A6:70:E0:E1:9F:04:66:7F:5B:24:3E
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:28:2a:04:f8:21:52:4c:4d:77:69:70:44:6d:7c:05:ea:02:
         6d:47:b3:b0:1a:34:bd:c9:3b:02:3f:e8:d4:f6:16:85:af:3c:
         d1:dc:c1:9b:80:f8:3f:f3:60:a6:07:4e:de:4f:bd:60:bf:52:
         9b:55:63:9e:56:2f:6c:c7:27:aa:e8:d5:37:29:3b:2e:cf:bf:
         ba:a3:34:1d:f4:74:c8:d9:48:59:f3:9d:5f:d9:e0:f5:c9:5b:
         60:a9:f6:77:8e:5a:a2:6d:e7:a6:60:38:d0:72:76:71:d7:ab:
         71:bc:65:ea:1c:1a:f2:a8:8d:13:21:5c:e8:f1:e5:d2:f8:24:
         78:52:52:d0:36:b4:35:37:c2:a8:fb:16:d9:33:38:f3:41:cb:
         46:72:01:0b:c4:81:6f:e2:90:62:7b:4e:4e:07:84:77:f3:5d:
         97:56:84:b1:a1:f6:7f:2b:db:6e:e9:00:c3:10:29:6a:b5:18:
         b7:4f:60:a5:c6:e8:f6:bb:1d:62:6b:d5:ec:b3:f2:28:77:c6:
         c9:9e:59:16:78:bb:b2:01:2c:be:07:43:d7:86:d3:f4:2d:bd:
         15:50:37:1d:a2:e3:c4:32:cc:38:7a:c0:c3:6b:2e:6d:49:ed:
         ff:23:8d:78:ce:b1:06:87:4d:9f:65:bd:4e:8f:7a:57:e4:fa:
         b5:07:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:04 2025 by rpki-client