Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa
File:                     3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          FSQ3xX7v9yMb1r/CRnYtUDOvu+4hVDPDGmQ0VG4ZXno=
Subject key identifier:   18:DE:0F:C6:40:64:DA:B9:AC:34:79:B1:3D:1D:A3:96:C1:2B:1E:2F
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       30C9399D728C483BAD4CD5D50F04A03899595AC5
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 04 Feb 2025 18:02:50 +0000
ROA not before:           Tue 04 Feb 2025 17:57:50 +0000
ROA not after:            Tue 03 Feb 2026 18:02:50 +0000
asID:                     269931
IP address blocks:        200.125.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c9:39:9d:72:8c:48:3b:ad:4c:d5:d5:0f:04:a0:38:99:59:5a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Feb  4 17:57:50 2025 GMT
            Not After : Feb  3 18:02:50 2026 GMT
        Subject: CN=18DE0FC64064DAB9AC3479B13D1DA396C12B1E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:d2:01:94:78:1e:76:5f:2b:83:14:37:79:
                    b2:a3:d4:c0:cd:06:7c:50:17:a3:e3:98:92:32:ab:
                    32:9f:72:67:8c:23:86:ae:85:95:c9:53:44:54:ae:
                    66:2b:09:8b:7c:87:94:95:40:c1:a6:db:f6:ab:c1:
                    73:fe:f8:47:cb:12:fc:bf:f5:56:90:30:dc:30:97:
                    55:f5:dd:d9:9b:1b:92:3f:75:c7:f0:57:09:f2:2f:
                    c4:69:0c:27:6f:05:8b:04:64:ff:07:66:74:d8:fb:
                    af:db:8f:32:33:25:d7:58:79:e3:94:f6:8a:b3:5d:
                    a8:a0:48:56:b4:c5:57:33:02:b8:63:76:1b:24:12:
                    bc:29:3e:b4:b8:f6:9e:fd:28:15:3f:ff:77:00:32:
                    d3:6d:d8:38:bd:f1:cb:88:31:d1:0f:44:5d:c5:a6:
                    d4:62:0d:52:18:41:fb:30:5c:e0:67:7a:72:f2:cc:
                    0b:89:6a:a9:8b:fd:5b:96:7b:1a:9e:ef:2a:29:ec:
                    93:8c:49:88:53:2e:9e:13:81:23:e4:7e:63:a3:5c:
                    ac:bd:6f:1e:5b:52:67:51:f2:83:df:8f:cb:4c:f6:
                    17:7a:68:1c:b0:27:e4:a3:25:e8:4e:e1:c4:60:88:
                    1f:63:4a:50:15:d4:33:03:3e:62:79:7c:0b:58:81:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:0F:C6:40:64:DA:B9:AC:34:79:B1:3D:1D:A3:96:C1:2B:1E:2F
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:88:c1:50:51:95:f1:ae:af:20:0f:56:70:02:1e:1f:3a:7d:
         e0:f8:39:fc:d5:7d:3d:f6:26:ba:1e:af:36:c9:e9:75:80:e1:
         d3:53:f5:fa:ad:a3:9d:10:cf:ea:3c:4c:99:13:12:82:17:e9:
         ab:f1:49:7b:0d:52:7b:5d:d0:59:43:a8:b4:a7:1d:51:f3:21:
         eb:4e:0d:0f:6c:ec:49:36:c2:4e:d3:75:b7:6b:ed:21:c8:07:
         4f:7d:38:41:67:0f:04:92:72:4e:bf:97:c3:1d:9e:54:c0:73:
         b0:fc:46:59:18:84:bd:52:c5:58:19:36:4e:85:18:51:b9:6d:
         10:20:55:a9:2e:7b:6c:65:bc:50:fd:5a:a4:4d:7e:53:ac:a4:
         c0:09:5e:e6:ad:53:47:6a:a2:3a:d3:3c:27:05:04:ee:e9:d3:
         a6:4e:3c:3b:9a:e3:84:15:50:a9:b2:ac:17:31:24:49:3e:24:
         5f:94:9f:32:59:79:2f:f9:32:05:30:b0:9d:98:50:08:92:b2:
         b5:17:f4:99:0d:64:0f:70:64:dd:2e:55:1b:6e:4d:17:ca:81:
         28:ef:c1:ca:13:4f:6d:1b:4c:08:08:92:4c:a2:33:12:a2:a4:
         f7:e7:13:89:0a:5a:cd:66:61:d9:1d:9b:75:2d:2f:ba:b1:4c:
         7c:61:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:12 2025 by rpki-client