Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e3131392e302e302f31372d3234203d3e203139343239.roa
File:                     3230302e3131392e302e302f31372d3234203d3e203139343239.roa (raw, json)
Hash identifier:          FLnaaYsa263VE4xIauXnvMmkIwl9ClnL/1rByPGxxRA=
Subject key identifier:   A2:75:2B:D8:0F:64:8D:8A:E8:8C:90:CE:5E:BF:F8:6B:57:69:93:D1
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       6D82EB7EAF2525A33D8F38A4E07F3F09534B407B
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e3131392e302e302f31372d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:57 +0000
ROA not before:           Tue 04 Feb 2025 18:12:57 +0000
ROA not after:            Tue 03 Feb 2026 18:17:57 +0000
asID:                     19429
IP address blocks:        200.119.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:eb:7e:af:25:25:a3:3d:8f:38:a4:e0:7f:3f:09:53:4b:40:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:57 2025 GMT
            Not After : Feb  3 18:17:57 2026 GMT
        Subject: CN=A2752BD80F648D8AE88C90CE5EBFF86B576993D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:ae:5f:a0:53:73:79:35:16:dd:34:ff:5b:
                    af:80:a9:a7:c2:2b:f9:51:ac:bd:bc:04:56:97:bf:
                    7e:60:d0:1f:a9:ae:dc:6a:40:cf:eb:f8:73:79:f6:
                    cc:13:95:9a:58:ea:63:63:76:5e:33:05:ed:03:e6:
                    8f:35:68:ca:09:ff:ac:96:49:3f:20:5e:bf:a9:74:
                    33:da:cb:c1:3e:d0:38:b8:eb:c5:b9:77:c0:94:a6:
                    e7:c3:32:6f:ec:e5:11:25:ca:13:e4:e3:82:b5:71:
                    b8:3d:1c:a0:a4:c4:72:df:68:62:87:b2:78:96:e5:
                    78:46:62:82:43:3f:a4:77:a4:a3:8b:30:36:27:48:
                    22:eb:11:d6:13:d5:4e:40:5c:06:2f:7a:29:b1:12:
                    ea:77:2c:12:08:a9:dc:71:a0:f1:b3:7d:2c:a7:16:
                    6f:c9:be:66:78:df:71:86:8d:22:50:c1:2a:14:3c:
                    0d:85:4a:a9:df:bb:0e:60:a6:4e:c3:b6:c5:b7:68:
                    45:04:60:e1:40:a4:2c:0f:20:7c:10:37:aa:2e:e2:
                    64:f3:86:9d:11:5f:dc:7a:10:d7:56:54:2b:4a:ac:
                    26:b3:2a:f5:4a:d2:d1:68:cd:36:ff:13:db:1b:b0:
                    7f:67:1f:af:85:cb:54:89:0f:2c:60:8e:4c:1e:9a:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:2B:D8:0F:64:8D:8A:E8:8C:90:CE:5E:BF:F8:6B:57:69:93:D1
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e3131392e302e302f31372d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         33:97:23:8c:5f:d1:0b:c6:b9:52:ae:fb:3d:31:71:d2:75:e7:
         01:d9:c0:c2:6f:4c:e6:09:67:be:59:44:f5:f0:15:77:ce:dd:
         27:d3:88:c7:3c:67:fe:c2:a6:26:92:52:ff:dd:1a:bb:a7:d0:
         1a:bd:66:e6:df:ec:bc:06:4c:41:3e:5a:08:47:a3:b0:4f:78:
         b5:df:e6:8b:79:7f:89:b7:90:ef:0d:34:f4:57:e3:f0:f3:ed:
         91:76:38:71:a1:ff:ea:9e:df:e9:d1:d6:55:fd:8a:2f:a8:a0:
         29:f6:d3:09:4c:6f:80:5c:7e:3f:fc:83:36:e6:0d:8b:f0:b9:
         ec:b1:3f:44:49:24:3b:b2:15:73:9c:b1:2a:b2:ff:c1:7a:a0:
         18:8f:53:c1:d9:26:14:d3:09:3c:c0:17:95:38:bd:35:31:a8:
         11:04:92:fa:6f:6f:39:3c:af:9d:ca:a9:d5:c6:b2:54:2d:f3:
         a6:ff:5c:4e:17:43:71:ee:42:3a:47:14:8b:5d:f0:99:8b:eb:
         c4:54:98:4c:bf:ce:28:64:f5:c7:d1:9c:11:8a:c7:75:4c:3b:
         2b:fa:5e:8e:b3:4d:74:4d:ac:dc:59:dd:2a:d3:91:74:b5:63:
         83:6d:5c:88:79:ca:ed:1f:54:df:7d:c0:c9:62:4d:0c:73:eb:
         2a:d4:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:38:36 2025 by rpki-client