Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e203238303435.roa
File:                     3230302e312e3135342e302f32342d3234203d3e203238303435.roa (raw, json)
Hash identifier:          MK5s8LTkC+v0VxFmeXx54JrBkQluGIQD+vZv/U2aY1g=
Subject key identifier:   16:F0:A6:58:58:BF:0D:37:BC:D5:9C:87:D2:EE:A6:5B:57:1A:37:DC
Certificate issuer:       /CN=D7C81DA3772B5EEAE19752E755626DBDC73EDFDD
Certificate serial:       1C72699E7AE96614916979D4D07F8433195AAB74
Authority key identifier: D7:C8:1D:A3:77:2B:5E:EA:E1:97:52:E7:55:62:6D:BD:C7:3E:DF:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e203238303435.roa
Signing time:             Tue 04 Feb 2025 18:22:56 +0000
ROA not before:           Tue 04 Feb 2025 18:17:56 +0000
ROA not after:            Tue 03 Feb 2026 18:22:56 +0000
asID:                     28045
IP address blocks:        200.1.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 15:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:69:9e:7a:e9:66:14:91:69:79:d4:d0:7f:84:33:19:5a:ab:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C81DA3772B5EEAE19752E755626DBDC73EDFDD
        Validity
            Not Before: Feb  4 18:17:56 2025 GMT
            Not After : Feb  3 18:22:56 2026 GMT
        Subject: CN=16F0A65858BF0D37BCD59C87D2EEA65B571A37DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:1e:02:76:f3:f9:66:ea:16:d5:67:a1:47:
                    89:b6:37:2e:20:20:cb:2e:ee:1f:83:2b:75:e0:c7:
                    6d:94:89:ac:58:a5:0e:83:17:b2:83:58:34:fc:ab:
                    cb:ae:57:06:16:2b:8d:ee:30:41:a6:99:20:9e:56:
                    b9:9c:b1:67:52:b8:7a:6a:27:fc:a4:70:bb:d0:93:
                    d3:fc:92:d0:99:1b:2e:74:2f:7f:da:76:dc:2a:e4:
                    26:b7:3c:24:1b:e6:10:3f:9b:f7:ba:a1:33:dd:77:
                    03:c3:ec:20:05:f5:cf:50:44:38:df:36:ff:ba:d0:
                    f0:cd:54:1c:10:e4:c2:62:24:8a:01:7a:36:bb:6b:
                    01:b4:6c:59:2c:4d:ac:46:64:de:ed:76:cd:56:c6:
                    e5:9e:e4:5e:04:76:0b:9a:ca:53:dc:6f:c0:1a:b4:
                    77:74:5d:c5:72:2a:86:5f:86:63:fa:ca:c9:f5:37:
                    e6:11:3e:11:04:a9:a2:03:94:92:84:32:53:9d:d2:
                    97:34:7e:dc:df:d8:ec:d5:6a:06:78:65:75:79:5a:
                    30:e8:5a:da:15:b6:ed:1d:94:82:40:d3:6f:db:e7:
                    55:5a:2c:ed:09:7a:0d:45:9e:68:7e:5d:8a:4e:ac:
                    18:5f:5c:9e:6f:6f:f1:16:d8:99:09:4b:f7:d1:fe:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F0:A6:58:58:BF:0D:37:BC:D5:9C:87:D2:EE:A6:5B:57:1A:37:DC
            X509v3 Authority Key Identifier:
                keyid:D7:C8:1D:A3:77:2B:5E:EA:E1:97:52:E7:55:62:6D:BD:C7:3E:DF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e203238303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:87:fb:c9:55:a3:44:1e:48:39:2f:4a:e8:4d:de:7f:ab:
         e3:43:2b:d6:4e:7d:b6:a6:51:c3:ea:91:e6:13:8f:82:b3:6b:
         54:90:a7:33:1d:5a:44:d9:c9:be:ae:bf:da:04:ef:ac:f9:e2:
         4f:5a:01:86:5e:e9:af:de:68:ac:0d:38:0d:d4:49:0f:fd:d8:
         86:ed:c6:19:bb:58:38:5e:bb:54:7c:8a:a6:3c:e3:78:43:e3:
         ae:74:58:ed:2f:af:08:02:79:99:e5:b3:d0:48:ab:d6:9e:1a:
         57:02:d3:82:90:a5:b3:8d:d7:ac:46:54:35:db:5b:7c:5d:86:
         46:e3:1c:05:8d:67:4b:8f:d4:86:be:f4:c2:0a:01:78:1d:b8:
         91:41:25:d1:0e:da:c8:85:6c:d3:c9:41:ab:d5:1d:53:9c:29:
         03:82:67:29:2f:ba:8a:ca:0c:8a:d2:6b:a2:b2:ef:09:33:e8:
         e1:64:ad:97:73:2d:05:fb:c0:b4:39:20:42:d8:62:12:e3:bf:
         24:a2:73:1c:4b:f3:58:3c:ba:c3:90:c2:78:ad:ac:4d:be:10:
         59:05:d2:f3:b0:1b:09:1e:7b:59:30:fc:9f:8d:09:a3:99:c0:
         ce:dd:65:70:9b:d0:6c:eb:46:93:60:b4:a5:22:01:e6:ac:6c:
         4d:ee:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:22:02 2025 by rpki-client