Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34342e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34342e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          qdPg2EGjhWRGuYTZzXbmq9xezwdI8yb+Boky3JM9uUo=
Subject key identifier:   20:F2:41:25:38:66:FB:64:CE:D7:4D:25:AA:94:31:7F:F1:91:89:B0
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       366ED00CB4D24D4F1B0649239CA2812A9352E5BB
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34342e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 04 Feb 2025 18:19:43 +0000
ROA not before:           Tue 04 Feb 2025 18:14:43 +0000
ROA not after:            Tue 03 Feb 2026 18:19:43 +0000
asID:                     27810
IP address blocks:        200.14.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6e:d0:0c:b4:d2:4d:4f:1b:06:49:23:9c:a2:81:2a:93:52:e5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Feb  4 18:14:43 2025 GMT
            Not After : Feb  3 18:19:43 2026 GMT
        Subject: CN=20F241253866FB64CED74D25AA94317FF19189B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:23:24:8e:eb:ad:6d:53:93:6e:ad:77:34:3a:
                    43:a6:13:c3:2b:57:1b:2c:bd:2b:c1:93:7b:31:a7:
                    80:09:0c:49:45:37:90:8b:e4:c9:24:e3:e2:2e:f2:
                    59:3c:62:df:b3:c5:b1:95:3a:b4:87:c5:60:97:c7:
                    35:cb:98:78:3d:4d:0b:3a:45:3d:d2:06:fd:49:54:
                    73:2b:c0:6d:4b:a9:66:84:57:3b:12:00:a3:d9:a7:
                    3e:54:5c:c8:ae:84:16:d7:57:7e:f9:0c:2b:53:45:
                    23:17:3f:09:d8:ee:a6:d1:09:01:b9:9d:a0:93:87:
                    62:1a:fa:c2:90:26:ab:b1:59:cc:a2:2f:f1:d3:43:
                    5c:3c:ae:46:34:55:8f:39:dc:0b:fa:e7:35:58:bc:
                    e1:77:62:61:42:aa:46:85:50:7b:e0:11:a9:24:a5:
                    5a:b2:86:fd:54:05:c4:35:eb:38:88:82:57:dd:28:
                    73:1b:b8:11:be:c3:39:38:b7:b8:5a:ca:35:4e:28:
                    4c:d9:00:15:8c:41:16:e2:8a:1d:0d:4e:79:c5:83:
                    27:d3:4c:49:72:ec:99:21:84:3f:d5:9d:4a:c2:3e:
                    6d:24:e7:7e:52:aa:76:a2:83:f4:d1:7d:95:30:70:
                    8d:68:25:33:0c:62:48:3f:63:e5:93:e0:27:b2:05:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F2:41:25:38:66:FB:64:CE:D7:4D:25:AA:94:31:7F:F1:91:89:B0
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34342e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:c8:5e:4d:10:b9:a5:8d:42:85:53:8b:64:c6:99:91:5b:
         78:eb:99:98:14:eb:cd:9c:76:f7:65:a0:cf:37:a2:49:1a:41:
         fc:ac:9f:93:67:23:5c:79:58:76:1c:5f:a2:55:7a:25:5c:c2:
         a9:c7:d8:0e:24:89:57:be:40:e5:7d:9b:3b:91:55:4b:69:40:
         d8:da:56:ad:6e:02:8b:39:2a:92:b0:ba:db:05:db:d7:93:5d:
         47:5f:3c:69:e3:20:32:f4:97:68:d8:ba:e9:92:15:b1:97:b3:
         24:b3:87:83:a2:76:99:68:ef:52:86:75:ae:18:53:07:fd:b1:
         20:fd:17:1e:b8:e4:b8:8a:87:69:1d:56:41:04:c9:d9:10:0d:
         2a:30:8f:41:e4:64:eb:b9:3e:85:5a:e7:81:35:d9:eb:a8:54:
         ba:96:35:41:79:6e:22:28:f9:a7:f8:2c:4f:d0:11:4e:ab:44:
         34:d8:d6:ff:dc:49:e2:62:97:73:7f:7f:c2:8b:18:de:b0:8a:
         c3:f2:f9:1d:7a:f6:aa:9d:5a:87:b9:1d:e6:ec:16:f6:62:3b:
         36:e1:3b:c7:39:7e:92:6f:95:95:c5:d0:52:2f:02:60:76:8a:
         17:78:b6:47:39:58:bd:9d:b7:79:39:cb:9b:2d:18:3a:23:52:
         1d:af:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:41 2025 by rpki-client