Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
File:                     3230302e302e36382e302f32332d3234203d3e203631343535.roa (raw, json)
Hash identifier:          l99NaxWtAQEjzojqp2E0Ki0Svy2nS/JzhpTmnuh1K/g=
Subject key identifier:   25:29:C5:09:05:23:08:03:BD:9A:8C:05:C6:FE:7B:FB:DB:69:91:A9
Certificate issuer:       /CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
Certificate serial:       3D0ECDECCECE6E83A6373B2E5F3AEE3716993D29
Authority key identifier: 1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
Signing time:             Tue 04 Feb 2025 18:16:03 +0000
ROA not before:           Tue 04 Feb 2025 18:11:03 +0000
ROA not after:            Tue 03 Feb 2026 18:16:03 +0000
asID:                     61455
IP address blocks:        200.0.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:cd:ec:ce:ce:6e:83:a6:37:3b:2e:5f:3a:ee:37:16:99:3d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
        Validity
            Not Before: Feb  4 18:11:03 2025 GMT
            Not After : Feb  3 18:16:03 2026 GMT
        Subject: CN=2529C50905230803BD9A8C05C6FE7BFBDB6991A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:43:e0:84:1e:92:ab:e0:c2:e7:58:87:d4:
                    5f:a1:ea:ff:4c:3f:65:e2:62:d8:ee:73:ba:2b:b5:
                    e1:c4:ac:2f:3c:52:17:b9:19:cc:43:7f:91:05:86:
                    f8:44:ba:13:b7:12:d6:bb:26:c8:73:d5:b0:fc:e1:
                    73:77:8b:38:c8:e7:91:59:a4:c7:8a:d3:03:7e:50:
                    d4:3b:6e:34:7b:b7:06:e0:97:2d:a0:48:11:11:c5:
                    c7:6d:16:35:14:fc:56:aa:f9:18:9f:51:d0:8f:74:
                    49:06:e6:d1:17:bc:da:7c:d2:84:83:22:fa:0c:eb:
                    8a:15:b1:8e:74:bd:d1:7b:35:02:77:61:5b:14:ee:
                    30:8f:d7:da:db:c5:bb:b0:29:50:e1:55:53:7f:ef:
                    aa:c2:64:77:33:90:52:88:83:06:b1:76:61:e9:0e:
                    6a:ea:de:f7:b4:aa:e7:79:46:f9:cf:60:b1:9f:ae:
                    3e:ea:db:36:9a:b9:8f:24:1e:85:b6:f0:b3:2f:84:
                    5f:ac:c2:51:2f:5c:16:06:64:f1:c2:21:a4:9e:a6:
                    9f:dd:e9:a1:c7:1b:5c:77:2c:73:e3:fb:d3:87:d8:
                    a7:d4:a8:11:6e:6c:b3:f6:8d:7a:37:3b:50:9c:57:
                    af:be:33:09:c6:ac:8e:86:fb:d7:a5:ca:77:c4:fa:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:C5:09:05:23:08:03:BD:9A:8C:05:C6:FE:7B:FB:DB:69:91:A9
            X509v3 Authority Key Identifier:
                keyid:1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:76:79:f4:a3:d3:de:f1:d3:9b:5f:6c:8e:58:80:63:ff:18:
         c8:13:54:2a:20:9a:71:3c:82:a6:8b:b3:50:0c:71:09:7a:f1:
         bb:27:3c:76:ef:72:8b:38:f2:d8:c4:90:f2:0e:1c:d2:e2:e5:
         7b:d8:96:64:b6:93:8d:86:15:da:f0:3c:c6:c3:70:39:46:49:
         09:86:9f:5e:00:f6:73:a0:da:42:58:87:5d:ba:20:96:4b:13:
         2e:ea:75:57:da:aa:2c:79:cf:61:ec:c1:59:bd:7e:65:d7:13:
         42:a2:e0:ad:04:9d:7d:7e:b2:83:c2:af:d2:ab:c0:ba:95:07:
         98:39:1a:4e:c8:18:39:18:35:87:c4:bf:79:60:ca:b5:0c:23:
         c2:bc:f6:02:14:a0:88:e7:08:7f:a1:93:8a:a6:4a:3a:37:8b:
         c1:46:65:ed:61:1d:14:ba:bb:62:4b:a4:1e:ba:4d:6d:da:f9:
         3c:41:ee:95:89:8c:ab:c4:9b:6e:f1:8c:f8:85:a9:bd:0e:aa:
         5a:09:80:5e:b4:71:78:23:09:6a:bb:87:61:48:01:c3:3d:5d:
         fa:c3:26:46:75:42:7c:be:2f:a3:54:9e:70:a8:b7:ac:bb:33:
         22:34:2d:ec:13:8d:65:f6:63:ea:7f:d6:10:d1:29:63:d1:45:
         4a:d0:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:58 2025 by rpki-client