Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e39332e3132382e302f31382d3234203d3e203139343239.roa
File:                     3230302e39332e3132382e302f31382d3234203d3e203139343239.roa (raw, json)
Hash identifier:          sIBOnqn3GMYl/+o6Wrx0TbQBusKOfwLuTCyyI6RKH2k=
Subject key identifier:   50:FF:27:B3:2C:12:73:64:82:29:93:2F:13:CF:E6:5B:39:53:BE:C5
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       42B0FDE6DAC3051EA7A7F020050F59DF28536DDC
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e39332e3132382e302f31382d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:57 +0000
ROA not before:           Tue 04 Feb 2025 18:12:57 +0000
ROA not after:            Tue 03 Feb 2026 18:17:57 +0000
asID:                     19429
IP address blocks:        200.93.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:fd:e6:da:c3:05:1e:a7:a7:f0:20:05:0f:59:df:28:53:6d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:57 2025 GMT
            Not After : Feb  3 18:17:57 2026 GMT
        Subject: CN=50FF27B32C1273648229932F13CFE65B3953BEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:ed:de:31:50:51:cc:c7:7d:8b:5b:57:ef:
                    26:14:9b:28:a2:24:6d:05:d1:cc:74:94:a4:92:1e:
                    c0:93:af:8f:be:80:45:16:14:1c:e8:04:1d:a3:94:
                    5c:71:fd:98:fc:1c:0f:79:9a:83:e0:a6:7d:d2:f0:
                    8e:50:ed:b0:01:7c:c0:00:29:64:67:dd:23:16:15:
                    93:45:99:4e:73:ed:fa:2f:ca:b7:31:8b:ac:06:5a:
                    36:62:ef:fc:8a:d6:f2:c8:bf:f1:ad:45:72:24:d3:
                    5a:e2:18:1b:a2:35:e0:2b:eb:96:4b:d6:ab:ab:3a:
                    fb:da:23:2d:55:c0:8e:05:79:78:af:42:1f:46:8d:
                    3c:9d:92:88:3a:42:7a:44:f3:5e:29:09:6e:ed:4a:
                    f1:61:22:26:81:60:72:55:84:45:c9:7d:6b:e3:e2:
                    2b:00:ef:1b:df:5f:95:37:18:e4:e9:9a:e3:cd:e7:
                    db:91:b8:a1:f1:97:89:34:ce:23:6b:b1:24:cb:13:
                    a7:78:12:d0:35:50:8b:ee:48:66:86:e3:3f:a9:bb:
                    a1:22:ba:e3:d7:b5:25:2b:0b:f9:db:36:2a:1d:97:
                    cd:56:56:fe:ed:34:99:a5:f6:2e:37:07:56:b1:ce:
                    25:1c:c2:d2:72:53:51:a5:d6:49:28:92:a0:f1:95:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FF:27:B3:2C:12:73:64:82:29:93:2F:13:CF:E6:5B:39:53:BE:C5
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e39332e3132382e302f31382d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:43:7a:01:fd:23:49:81:4c:d7:3f:ee:1c:fe:48:33:a7:42:
         6e:1c:fe:93:6c:f6:cd:b3:4d:ce:e6:50:b8:1f:4d:5a:9a:60:
         24:ba:cd:c2:26:56:65:6c:2f:fd:80:c8:14:96:d3:4c:60:03:
         08:dd:79:db:9f:1e:c9:3e:54:23:5a:d3:af:b4:50:b6:66:01:
         8b:9f:cd:a2:57:2e:df:c6:e5:06:26:62:ca:de:5c:7a:54:6c:
         01:03:d6:24:9d:a4:9c:b3:9a:06:69:a6:2f:5c:fb:eb:46:79:
         e5:5a:f5:67:f6:6b:1f:78:9c:9c:e2:72:96:af:03:a8:80:2b:
         e0:12:57:1b:1d:1f:d5:41:96:1a:9b:0f:18:ec:3a:9c:ec:06:
         12:7b:43:b3:a2:df:66:52:f6:8a:1f:30:99:26:ed:5f:9e:3c:
         77:69:c2:38:d5:3b:45:13:88:ee:b2:2b:57:db:db:dd:ea:6a:
         dc:a3:f6:88:d5:34:14:5d:d3:71:8f:58:59:f3:52:6d:bc:64:
         9d:1d:3a:55:22:65:3f:90:16:59:12:63:9e:da:d1:ca:8e:7f:
         57:fa:7c:55:5e:fa:c0:e4:68:b3:54:c3:f5:0d:1b:38:2e:da:
         81:b4:64:2d:c1:27:6a:a7:67:f9:0b:f9:43:c8:a1:47:ff:52:
         bf:2c:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:52 2025 by rpki-client