Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232342e302f32312d3234203d3e203237393236.roa
File:                     3230302e3130372e3232342e302f32312d3234203d3e203237393236.roa (raw, json)
Hash identifier:          3swFDTg0M3+nOYL90sVTZngDlxXsyE7G7rvBHosz4gQ=
Subject key identifier:   B1:1D:DD:5C:87:9A:2E:5E:70:9D:32:EF:F1:98:13:14:8F:E1:50:92
Certificate issuer:       /CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
Certificate serial:       5709DF9C9B6CA622C53448DF38B8455D2968C812
Authority key identifier: 6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232342e302f32312d3234203d3e203237393236.roa
Signing time:             Tue 04 Feb 2025 18:01:55 +0000
ROA not before:           Tue 04 Feb 2025 17:56:55 +0000
ROA not after:            Tue 03 Feb 2026 18:01:55 +0000
asID:                     27926
IP address blocks:        200.107.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:09:df:9c:9b:6c:a6:22:c5:34:48:df:38:b8:45:5d:29:68:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
        Validity
            Not Before: Feb  4 17:56:55 2025 GMT
            Not After : Feb  3 18:01:55 2026 GMT
        Subject: CN=B11DDD5C879A2E5E709D32EFF19813148FE15092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:b8:02:86:5e:b3:d5:02:32:0d:5e:5b:0e:
                    4e:55:5a:45:7b:fa:73:47:16:04:0f:96:fc:03:2c:
                    36:42:40:5b:ca:94:f0:4f:12:bc:6c:f5:28:62:3d:
                    fd:4a:de:5e:66:db:be:e0:aa:14:ec:c0:84:1d:cb:
                    4e:3d:98:3c:01:31:25:4c:f9:0c:5c:8d:33:31:44:
                    0d:3e:0e:6e:6f:7d:ae:28:33:91:4f:67:43:c7:49:
                    98:3b:47:b8:e5:9e:e4:c7:8e:55:40:20:28:11:08:
                    75:26:99:5f:ad:ab:81:11:f9:b3:62:d1:98:6d:89:
                    b3:31:84:00:8e:3d:2b:00:1a:a5:a1:aa:1d:50:e1:
                    ea:ac:55:29:bd:61:f2:df:9c:9b:24:0f:ff:df:87:
                    56:d9:41:dc:a9:7f:5a:4f:e7:ed:d3:2e:7d:95:be:
                    ed:e7:f5:88:d2:7c:47:7f:5a:29:07:28:92:e3:a8:
                    04:61:9c:7a:6f:a7:0b:b8:54:55:86:32:51:6e:9f:
                    d7:7e:16:9a:9f:7f:ac:e9:05:c5:de:f9:5d:ca:59:
                    97:b7:8a:e1:b3:44:b8:35:c0:85:07:51:ea:c4:18:
                    08:70:ae:17:89:1a:ab:86:88:9e:11:69:af:34:53:
                    75:26:a4:eb:c4:b4:78:2b:63:a5:f0:df:0f:2b:e5:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:DD:5C:87:9A:2E:5E:70:9D:32:EF:F1:98:13:14:8F:E1:50:92
            X509v3 Authority Key Identifier:
                keyid:6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232342e302f32312d3234203d3e203237393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:91:6d:ff:14:1c:15:47:c4:ec:5a:1d:f1:73:9c:f9:d3:
         80:51:28:da:1d:ca:b8:dd:50:57:30:98:0f:31:8e:63:0b:78:
         cf:e8:c6:20:3f:d8:ed:88:a1:c1:b3:2f:13:d7:25:2c:bd:ac:
         1a:a8:89:cf:a2:d3:cf:0c:e7:79:08:b5:6d:d3:c4:7e:17:1c:
         98:8c:cf:3f:c2:8d:b5:f3:1c:a7:ab:d0:62:96:33:20:7e:6c:
         18:2f:1b:a2:4e:f9:05:5e:11:dc:da:f3:28:26:40:6e:62:f4:
         b3:65:1f:52:68:ae:5f:65:9a:1b:92:25:36:10:f9:20:56:44:
         4c:48:18:82:8e:a2:4a:8f:29:a6:57:06:28:02:2e:c8:ff:b4:
         5e:9e:d3:dd:7c:74:04:e0:c7:11:aa:f3:47:33:15:29:d5:4c:
         b7:31:75:26:d6:64:74:d6:e5:ed:77:9e:4d:e9:cd:3f:c3:a8:
         7b:ec:c5:6c:3d:c8:66:98:94:f6:47:39:57:2f:67:3e:18:9f:
         c3:d7:89:51:34:c0:9c:bf:71:4e:f1:da:0c:ca:c1:2e:a1:1e:
         3f:c8:bd:38:5b:40:e9:ef:72:ac:5d:4d:f0:5f:f3:22:1f:98:
         fc:38:11:86:a6:d3:13:61:e6:b2:60:53:66:8b:51:6a:eb:ad:
         18:0a:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:38 2025 by rpki-client