Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272883.roa
File:                     AS272883.roa (raw, json)
Hash identifier:          cqQiQOBt610vPBkCN0MlvSub8EUCU9ZcYqWn1iiReoM=
Subject key identifier:   AB:6E:04:6D:C1:7F:6A:60:A3:D6:70:37:0A:D5:8C:2F:34:0A:A2:55
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       5047EC870E9C0B845F10D4C477E1A8CB43421D1C
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272883.roa
Signing time:             Thu 13 Feb 2025 15:10:00 +0000
ROA not before:           Thu 13 Feb 2025 15:05:00 +0000
ROA not after:            Thu 12 Feb 2026 15:10:00 +0000
asID:                     272883
IP address blocks:        200.7.222.0/24 maxlen: 24
                          200.7.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:47:ec:87:0e:9c:0b:84:5f:10:d4:c4:77:e1:a8:cb:43:42:1d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb 13 15:05:00 2025 GMT
            Not After : Feb 12 15:10:00 2026 GMT
        Subject: CN=AB6E046DC17F6A60A3D670370AD58C2F340AA255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:49:92:14:c7:f2:f9:32:00:4d:30:a4:85:
                    a9:e1:ca:d6:93:40:d2:8d:0c:94:08:cb:d6:96:4e:
                    4b:d1:f7:3e:d0:7b:d0:82:69:32:4b:75:83:ab:2d:
                    8f:31:73:d5:7a:68:6f:82:17:9d:88:c8:a7:3f:21:
                    f7:b2:64:86:78:42:0b:0b:4c:37:06:8c:2c:37:e2:
                    d0:b5:f6:eb:98:ce:ec:3d:22:3c:09:1b:f9:49:88:
                    a1:cb:d3:2e:e1:31:87:7a:2d:0b:95:8c:31:eb:78:
                    34:73:78:6d:2f:6c:ee:1e:65:04:c4:5b:52:25:c6:
                    3d:2f:b9:ef:55:e2:f6:ff:1a:f5:f3:bd:0d:e0:8a:
                    9e:13:4a:8b:e0:95:70:a1:1b:9e:16:26:96:7b:cf:
                    7b:5a:74:87:42:33:68:cf:d4:36:ed:23:11:22:37:
                    f7:be:97:cc:b4:e9:4a:be:00:c9:99:57:4e:66:e1:
                    d7:f6:19:77:91:fc:af:48:13:3d:b6:67:6b:48:10:
                    2c:9f:5b:ec:ce:96:bf:ef:8b:b4:ad:58:5f:a8:57:
                    0a:c6:95:bc:7e:1a:3b:44:4e:fe:68:83:1e:fd:f5:
                    5f:5a:da:15:89:0c:67:22:e1:78:24:ab:dc:cf:23:
                    3f:1e:22:1e:1f:b2:38:5f:9e:ae:e0:52:fb:19:66:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:04:6D:C1:7F:6A:60:A3:D6:70:37:0A:D5:8C:2F:34:0A:A2:55
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272883.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.222.0/24
                  200.7.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:64:03:06:1c:23:a4:13:43:59:6a:08:e1:07:18:11:18:83:
         c0:89:dc:4d:6c:3d:06:8c:92:ba:a2:3d:bb:39:3a:23:33:60:
         21:95:bd:d4:b0:5d:33:07:0f:d7:2e:6f:b4:f8:f0:13:c8:2d:
         59:75:cf:8b:d6:c1:f8:8b:43:ad:3d:05:40:cb:e9:fe:3b:e3:
         f7:98:28:6a:41:da:75:89:6e:3d:b3:11:95:e3:ba:58:34:11:
         52:bc:88:8e:c3:76:07:12:81:76:87:cc:15:8d:df:05:f7:b5:
         2a:1c:59:7a:a4:ac:09:71:85:43:42:de:42:72:0d:c6:c1:01:
         9b:d9:a0:5b:ff:4a:f8:05:f6:14:05:49:91:1b:c7:81:9c:c2:
         f8:db:30:dd:59:fb:72:55:4c:58:62:bf:aa:cf:dd:86:a0:75:
         e3:31:42:a0:64:4e:5a:c3:45:b6:0e:42:ae:d1:78:7a:d4:eb:
         34:7d:84:ab:1c:6e:2b:e7:24:8d:fc:a7:15:2e:6c:78:80:86:
         c1:63:32:08:b0:d0:63:25:77:cd:48:69:35:80:b9:a4:2e:4b:
         c8:51:56:8c:6b:08:c0:41:fe:9b:ce:f9:d0:f7:07:33:65:64:
         aa:62:a4:d8:92:33:03:96:e9:99:b0:9a:17:58:f3:ed:28:c9:
         22:24:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:11 2025 by rpki-client