Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34322e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          +L30oyaUawfSjfWYsVbuJ6+WT5bzQBICnygpJKgqLC4=
Subject key identifier:   7C:AB:48:BB:E4:97:E7:0A:83:F7:0E:25:BE:D5:64:C4:08:16:27:45
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       0678CA3B97F060CD5CC4527E9C97EF1A77ADF7FE
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 04 Feb 2025 18:19:43 +0000
ROA not before:           Tue 04 Feb 2025 18:14:43 +0000
ROA not after:            Tue 03 Feb 2026 18:19:43 +0000
asID:                     27810
IP address blocks:        200.14.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:78:ca:3b:97:f0:60:cd:5c:c4:52:7e:9c:97:ef:1a:77:ad:f7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Feb  4 18:14:43 2025 GMT
            Not After : Feb  3 18:19:43 2026 GMT
        Subject: CN=7CAB48BBE497E70A83F70E25BED564C408162745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:54:fd:d3:1f:07:bb:38:eb:fa:2c:0a:b0:
                    7a:db:1e:af:2f:4d:3a:31:d7:5f:4e:fa:21:c2:26:
                    d4:38:47:68:8a:d5:26:11:b2:0e:fe:3a:54:6b:07:
                    79:c8:7c:ff:f7:cf:77:ba:9a:ca:a1:72:8e:97:8e:
                    7d:2c:2c:e5:0f:2c:7f:95:55:c7:2e:ea:eb:c9:26:
                    44:b9:fc:08:45:e4:28:62:2e:3f:de:d0:2f:35:34:
                    1f:4e:a5:b7:df:9b:d3:a3:12:e9:8d:aa:e1:ac:7c:
                    1d:39:5a:6c:d7:6f:75:ad:82:3b:07:66:01:4d:33:
                    ee:cf:8d:d0:39:be:15:94:18:e8:f4:f7:60:86:c4:
                    96:d3:6a:17:55:5c:28:b9:45:01:a4:55:d6:59:91:
                    b5:1b:98:c6:a8:79:ed:48:cc:54:f2:59:82:17:bc:
                    47:ab:81:39:b9:f2:76:ab:68:d0:24:de:f5:f1:f3:
                    26:4e:b6:f0:84:17:26:bf:63:ae:98:24:c7:39:39:
                    2a:4c:29:ec:f2:30:6a:fe:97:93:a2:0a:84:3c:26:
                    81:57:82:1a:5e:82:40:33:99:c2:6b:e5:dc:17:c8:
                    c2:1f:1d:95:f7:8d:cc:52:2c:92:2e:e9:fd:81:b8:
                    a4:21:8a:1b:6a:d8:6d:51:5c:2a:8f:45:43:0e:2b:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:48:BB:E4:97:E7:0A:83:F7:0E:25:BE:D5:64:C4:08:16:27:45
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:3f:18:d6:ef:a2:51:90:ea:55:f5:82:a3:57:3d:94:26:
         fd:ac:fa:46:7a:ab:27:b5:63:2d:2b:d1:e3:92:34:81:60:fe:
         32:ef:e1:8c:a1:ee:cc:5c:7d:5f:ac:bd:0c:33:d1:c8:77:17:
         cb:e8:92:ba:f4:13:ef:3a:97:85:dc:f8:c7:77:35:83:d5:0d:
         07:9a:a9:d2:e4:55:59:f5:b7:7e:33:d0:d3:8d:62:1c:be:df:
         14:0e:42:f3:ed:73:df:56:12:62:28:ca:70:9a:db:1a:8e:c7:
         f6:a2:a6:39:52:fa:de:17:c9:7d:1f:cd:b5:02:36:7a:71:3b:
         20:19:85:75:40:0d:e9:73:c6:7c:a9:2e:00:62:34:7c:85:30:
         21:79:32:9e:be:2e:f6:77:90:bf:55:32:0c:e4:4c:53:39:a9:
         f0:e4:60:41:57:22:a6:19:6d:ec:8f:b8:d5:05:c8:58:c9:d1:
         2c:9f:06:1d:d6:d9:7b:5a:55:19:5b:4b:af:64:bc:10:a3:72:
         df:ca:1e:48:5b:bd:e6:ac:aa:66:b6:0e:7a:c3:36:98:3a:b2:
         83:13:36:1b:4c:41:cb:3f:3d:75:dd:44:4c:79:ea:be:6c:ed:
         b2:e3:8c:d3:a6:ff:20:e9:1e:86:8c:91:5a:53:0b:c1:cf:61:
         de:0a:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:47 2025 by rpki-client