Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e31312e34302e302f32312d3234203d3e203139343239.roa
File:                     3230302e31312e34302e302f32312d3234203d3e203139343239.roa (raw, json)
Hash identifier:          1tevM/o002uFGYBj6ErYMM88rLpcYCinkqTpUkvVZNk=
Subject key identifier:   B8:32:46:76:B8:BF:BE:7E:74:CF:74:C4:D0:B9:B2:18:1E:C1:4B:83
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       3EEDBE692105D30C847837EB889BE28E56B9D2DB
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e31312e34302e302f32312d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:54 +0000
ROA not before:           Tue 04 Feb 2025 18:12:54 +0000
ROA not after:            Tue 03 Feb 2026 18:17:54 +0000
asID:                     19429
IP address blocks:        200.11.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ed:be:69:21:05:d3:0c:84:78:37:eb:88:9b:e2:8e:56:b9:d2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:54 2025 GMT
            Not After : Feb  3 18:17:54 2026 GMT
        Subject: CN=B8324676B8BFBE7E74CF74C4D0B9B2181EC14B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:61:ad:d4:f6:ea:a2:6d:cf:33:10:23:08:
                    78:a5:fb:1a:52:00:c7:bb:82:dc:cd:ec:c2:17:0b:
                    f9:0d:61:77:1f:9d:3f:93:59:c9:87:ba:6a:57:bd:
                    5b:85:90:46:d7:94:c1:15:25:d5:49:8d:ea:fd:3a:
                    6d:e3:d9:8f:e2:7b:cc:e2:86:17:25:18:aa:e2:5c:
                    f2:25:83:88:7f:28:75:a3:f2:98:8e:61:bc:5f:1a:
                    7d:d8:51:7d:d5:02:fa:08:25:6c:16:52:4e:7e:6c:
                    6e:f6:b5:e3:aa:a6:82:ba:5b:98:a8:ed:67:94:c8:
                    5f:5f:52:77:01:4e:ed:e3:e6:a1:f4:de:0d:db:3b:
                    13:1b:50:9e:bd:c3:f0:f9:ff:2d:1e:99:17:2e:05:
                    ca:51:82:eb:9c:72:28:3c:09:48:90:6b:53:03:4b:
                    9d:ed:0a:4f:a0:b4:78:b1:33:da:c7:d2:dd:44:20:
                    20:25:45:99:a0:57:a4:48:80:c7:cc:aa:8f:28:1b:
                    f4:34:8c:8d:5c:1c:8c:1b:cd:fa:9f:35:da:a6:67:
                    3d:60:7c:5e:62:7b:e9:a1:70:5d:bc:67:41:02:04:
                    00:b6:f3:5c:db:41:8d:72:a6:7f:3f:f3:a6:52:c4:
                    17:b8:bf:4b:b8:20:d6:3c:b2:23:4f:e6:79:f3:b4:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:46:76:B8:BF:BE:7E:74:CF:74:C4:D0:B9:B2:18:1E:C1:4B:83
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e31312e34302e302f32312d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:a5:ef:35:30:a6:f8:41:a7:7a:4a:a5:49:3a:6e:60:06:
         d4:af:6d:45:29:55:e7:a7:45:51:f8:d3:5c:5e:05:a9:a6:88:
         ff:b9:df:4b:b0:03:40:cb:1c:f8:55:f3:15:1e:27:b3:59:e3:
         09:5a:69:cd:5f:f2:fc:3b:55:c7:dc:70:e5:27:0b:d1:49:e2:
         d4:5d:5f:26:85:ab:c3:62:eb:4f:f0:ee:3c:b1:64:78:fe:9e:
         fd:59:7d:1d:8d:4a:e9:1e:53:86:1f:09:94:29:95:9f:a4:c7:
         7b:0b:ff:e0:1d:59:0e:98:af:45:32:3b:53:8d:84:ef:70:38:
         0e:4a:7a:e9:bb:1c:2e:c9:66:ce:00:4e:ba:02:b8:ed:42:a7:
         60:a3:b0:53:8a:a7:73:72:45:e2:e0:02:54:e0:b9:85:6f:79:
         2c:75:1a:db:cd:d8:f0:05:20:23:63:3b:1a:63:65:ea:e4:de:
         68:3a:03:7e:da:e7:ea:bd:a0:82:9c:3a:08:f1:93:f1:5c:5f:
         e9:41:bb:7a:45:64:52:6e:1a:19:9e:f5:e7:0a:ed:d0:ee:17:
         3e:23:6b:f7:75:48:b6:55:8c:cb:be:91:96:33:41:6c:b9:ab:
         b2:c7:b2:66:52:d2:2a:49:1d:9f:11:8d:77:67:87:f2:8f:0f:
         ea:16:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client