Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20313938393439.roa
File:                     3230302e312e3137352e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          IuNDruUFDb/1gXTEWMKvULe36Cb6hm83cOJvKbMUIxY=
Subject key identifier:   D9:10:A2:FE:68:61:26:96:67:18:0D:7E:23:0D:56:81:26:2D:3C:7F
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       368223A7F25A1013FF9F49DC25C73A9F2F093428
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 04 Feb 2025 18:07:19 +0000
ROA not before:           Tue 04 Feb 2025 18:02:19 +0000
ROA not after:            Tue 03 Feb 2026 18:07:19 +0000
asID:                     198949
IP address blocks:        200.1.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:82:23:a7:f2:5a:10:13:ff:9f:49:dc:25:c7:3a:9f:2f:09:34:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:19 2025 GMT
            Not After : Feb  3 18:07:19 2026 GMT
        Subject: CN=D910A2FE6861269667180D7E230D5681262D3C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:fb:94:59:de:ad:cd:ac:40:92:b9:81:11:
                    10:10:1d:26:9f:7b:c7:ff:40:45:35:19:a8:d6:b1:
                    3b:ba:e2:49:1e:53:8b:e3:ec:ef:5f:e8:0e:fc:16:
                    88:56:17:cc:48:47:49:50:cb:00:1d:96:d2:38:ed:
                    7b:fe:29:12:04:b0:64:e4:d8:30:31:9f:21:a0:1a:
                    d0:7d:95:3f:0d:9c:7e:08:ce:8b:9c:56:a3:b7:3c:
                    91:34:68:01:30:d1:e3:b3:06:16:a6:a5:d3:44:ce:
                    90:16:dd:1f:33:f4:3b:68:01:4a:44:b1:8c:96:ac:
                    16:61:22:9f:ee:5d:c6:8a:20:6f:94:49:c5:58:31:
                    26:5d:24:3c:74:6b:e2:25:66:5e:57:e0:9f:1a:2f:
                    33:78:45:48:8f:d5:39:5d:ee:23:db:81:98:df:34:
                    f1:d9:70:4c:33:80:aa:71:c5:33:e1:30:1b:2f:a3:
                    23:4e:6b:30:f1:f7:9e:27:9c:5d:18:a1:24:c3:66:
                    d8:9f:0f:b9:be:d0:a3:49:d7:6b:0e:b8:fc:12:b0:
                    b0:a0:2a:ef:e5:72:bf:e1:c6:c3:17:4c:62:8f:69:
                    12:98:d9:af:dd:88:be:72:c5:98:df:e7:c8:15:ae:
                    f2:96:02:b9:41:44:17:9f:6b:78:16:f1:97:09:33:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:A2:FE:68:61:26:96:67:18:0D:7E:23:0D:56:81:26:2D:3C:7F
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:79:1f:e6:8f:77:2e:3c:a8:b0:99:23:21:81:5e:41:10:
         15:5b:5d:c3:25:cf:d5:35:13:4a:a3:44:17:32:86:5d:45:7f:
         2a:a3:4b:6f:72:dd:df:1a:e6:aa:9d:66:62:49:83:e3:14:96:
         f5:af:a4:8b:41:67:e0:84:56:78:e7:3b:e9:d4:10:d4:55:ff:
         d0:5a:5d:37:53:06:c3:60:e8:fe:ae:27:f6:65:42:32:d0:93:
         eb:f3:2b:55:69:60:63:37:45:1a:81:8c:a6:a1:0e:15:d7:74:
         28:a3:30:79:51:c3:ee:21:1a:f3:eb:be:50:06:af:67:43:0e:
         de:47:bf:2c:29:f9:f9:8f:7c:45:c1:37:b9:b8:47:5f:38:92:
         4f:a2:03:16:44:75:1c:ae:52:54:5c:72:eb:46:4c:1e:71:67:
         a9:c0:ec:09:9f:d8:f7:55:53:18:b5:67:f8:91:10:70:65:b3:
         6b:25:8a:ab:de:22:98:49:04:0a:32:49:03:e4:ac:74:90:f3:
         bd:0e:fb:4a:fc:fe:f4:e1:00:a1:05:6c:f0:cd:80:c9:32:84:
         fd:81:a2:9b:97:16:52:bd:94:6b:2a:5e:aa:44:af:06:ef:79:
         f2:f3:48:74:b0:c0:e4:46:fe:d1:42:f2:b4:87:63:53:1f:4c:
         d6:bb:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:30:40 2025 by rpki-client