Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3138342e302f32342d3234203d3e2036343239.roa
File:                     3230302e32392e3138342e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          5kheac703KQiexSnpejc8DGq218NbnTB5ejHCiKwS54=
Subject key identifier:   19:3A:C6:5B:D0:45:6F:A8:4B:CC:47:28:3C:C0:1F:3B:5E:A5:6D:C5
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       5601BE16EAA575C541AB5C0A42BA34E6617C4A3D
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3138342e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 20:03:28 +0000
ROA not before:           Tue 04 Feb 2025 19:58:28 +0000
ROA not after:            Tue 03 Feb 2026 20:03:28 +0000
asID:                     6429
IP address blocks:        200.29.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:01:be:16:ea:a5:75:c5:41:ab:5c:0a:42:ba:34:e6:61:7c:4a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:28 2025 GMT
            Not After : Feb  3 20:03:28 2026 GMT
        Subject: CN=193AC65BD0456FA84BCC47283CC01F3B5EA56DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b2:8b:c7:bc:83:e6:f9:1b:97:00:a2:10:a6:
                    de:2d:9f:d4:68:d3:d5:90:35:68:d4:62:21:a2:d2:
                    17:d3:2c:a4:b5:04:0c:ca:11:f8:91:76:7c:52:73:
                    47:3b:0d:65:5e:69:d8:74:48:1f:74:66:a3:65:b3:
                    7a:bd:e3:ac:dc:37:75:68:b7:6f:4e:39:db:5e:a4:
                    fb:dc:ae:ae:4d:db:25:fc:78:5e:fa:dc:18:ed:c3:
                    52:b0:16:b0:64:0e:e2:3c:73:9a:8b:aa:5b:6e:12:
                    a2:e2:14:2b:2f:74:86:57:d4:27:d2:cd:51:91:5c:
                    3b:4f:27:19:31:3b:ad:a3:00:c7:9e:f1:67:3e:52:
                    91:b5:f3:e3:8b:84:f4:fb:89:4a:2c:11:2d:8c:98:
                    b4:c8:19:9b:f8:4e:b0:ac:87:9e:29:95:2e:a8:1e:
                    2c:3d:79:5f:c8:85:d2:79:9d:0e:7c:69:cb:89:b0:
                    89:ab:b5:b9:01:b4:45:aa:4f:3a:65:ce:1b:09:02:
                    7c:a8:bd:be:aa:b1:b5:38:47:9a:ed:93:6f:da:a2:
                    d5:17:90:3c:c8:72:37:fa:3d:4a:36:08:d0:82:dc:
                    2a:69:ed:91:d0:3d:17:b8:23:d1:27:80:2c:10:5f:
                    0e:37:7e:23:f1:75:e3:e2:fa:71:4b:87:9d:87:b0:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:C6:5B:D0:45:6F:A8:4B:CC:47:28:3C:C0:1F:3B:5E:A5:6D:C5
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3138342e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:31:cb:e8:f8:79:67:5a:ce:0e:4f:0b:3b:8a:73:4b:35:bc:
         3b:28:16:70:04:ad:ee:58:cf:6d:89:b8:cd:1b:80:cb:8d:51:
         d8:97:80:b3:e0:ec:48:1e:c1:2c:1e:15:3c:e5:50:55:e4:de:
         34:f9:7e:15:75:90:17:c2:3f:c0:ee:f1:5e:24:9d:12:55:75:
         74:50:d7:1b:ba:97:2c:30:13:68:59:a2:7e:7b:bf:50:ef:2f:
         95:ed:4a:70:87:ac:3f:9a:a3:bc:e3:95:8f:93:e5:ba:6a:7e:
         b0:7b:9d:1a:e7:4e:b4:c0:7a:30:82:16:c7:d7:3d:23:f9:73:
         da:d5:7b:fe:39:88:3a:0b:2d:23:fd:35:2d:13:87:0f:e8:79:
         c2:f6:86:37:57:84:e9:cb:df:b5:b7:a3:e8:6e:c8:d9:e0:fa:
         8b:6a:f2:b9:6c:9f:77:42:11:c1:7b:da:7b:37:60:0d:7f:66:
         72:09:cc:ca:d3:8e:93:14:6e:55:3d:d3:6a:18:1d:9d:0e:3b:
         c8:2e:f5:29:24:48:7d:24:a9:40:f3:41:86:04:e5:3b:f4:90:
         a4:06:98:52:f2:1f:b5:31:24:ec:3a:90:82:5b:bf:10:a6:33:
         14:da:aa:66:9e:ef:e9:f0:a6:1b:33:9a:46:54:5f:1b:50:66:
         5e:54:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:59 2025 by rpki-client