Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/3230372e3234382e39322e302f32322d3232203d3e203238313030.roa
File:                     3230372e3234382e39322e302f32322d3232203d3e203238313030.roa (raw, json)
Hash identifier:          d/YdghTNXIH8nyDthTfE8sF0UcM7nTKkTEsHopwlLFc=
Subject key identifier:   D8:C9:B9:21:65:F4:72:04:65:80:B0:4C:FB:9C:0F:6A:51:47:4D:B6
Certificate issuer:       /CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
Certificate serial:       76D7BA1B2CE1E6BC8F4B8DC4C3D50D95CE8EBA29
Authority key identifier: 1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/3230372e3234382e39322e302f32322d3232203d3e203238313030.roa
Signing time:             Tue 04 Feb 2025 18:53:09 +0000
ROA not before:           Tue 04 Feb 2025 18:48:09 +0000
ROA not after:            Tue 03 Feb 2026 18:53:09 +0000
asID:                     28100
IP address blocks:        207.248.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:ba:1b:2c:e1:e6:bc:8f:4b:8d:c4:c3:d5:0d:95:ce:8e:ba:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
        Validity
            Not Before: Feb  4 18:48:09 2025 GMT
            Not After : Feb  3 18:53:09 2026 GMT
        Subject: CN=D8C9B92165F472046580B04CFB9C0F6A51474DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:2e:6c:b5:bc:18:e3:d9:1c:9f:78:b9:07:
                    31:c0:97:9d:f9:f2:2f:e2:5a:88:00:3e:b7:37:cd:
                    9c:20:51:7a:6c:4f:16:d1:d6:46:04:fc:cd:d9:a5:
                    f1:b9:40:24:12:59:dd:0a:ed:d5:76:dc:a3:b9:c3:
                    1b:4d:16:c6:87:18:1d:fc:4a:4e:3b:12:bb:7a:87:
                    ee:2d:a3:91:08:b9:5b:bf:8a:23:b6:92:e9:4e:40:
                    2c:1b:99:13:24:44:9d:f3:f6:e9:d4:c7:36:75:82:
                    72:b6:e0:87:0b:a0:6f:f5:33:2b:71:bb:e0:74:2f:
                    1d:9b:3c:65:fc:77:98:f8:e7:c9:44:fa:18:97:60:
                    6e:cf:32:dc:44:ee:cd:d5:8c:43:98:c1:34:e2:15:
                    ed:ae:9e:db:a2:9a:bf:c6:0f:57:a4:19:60:b7:0c:
                    36:47:96:14:5d:a4:95:82:a6:1f:10:2c:16:cf:8e:
                    86:0f:70:7d:2f:e1:cf:12:e4:e1:70:bc:19:c7:c1:
                    82:21:66:88:09:89:3e:fc:3e:74:e7:d7:eb:9c:25:
                    fe:e0:da:30:fd:85:3f:62:fa:0f:71:17:3d:7d:3e:
                    34:63:73:b7:70:12:18:bc:f1:44:f5:bc:fa:83:aa:
                    08:3c:4f:ed:65:59:a9:91:af:e3:df:2b:d2:55:ae:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C9:B9:21:65:F4:72:04:65:80:B0:4C:FB:9C:0F:6A:51:47:4D:B6
            X509v3 Authority Key Identifier:
                keyid:1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/3230372e3234382e39322e302f32322d3232203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:7b:ad:26:8e:01:e5:ca:87:33:ba:ef:c8:56:62:eb:01:
         16:13:e9:3d:e0:a1:d7:ce:54:05:2f:cf:03:a0:aa:4c:be:e3:
         1b:f4:4d:7c:30:06:36:86:e3:36:3c:bb:2c:50:5f:3b:8e:ed:
         35:b3:6d:b3:7a:eb:60:d1:de:d1:f1:9c:88:49:ee:ca:59:24:
         95:e3:97:e0:cc:c3:70:bf:7f:fb:0d:11:d2:74:a6:06:cb:a5:
         d4:bf:8b:28:b7:d4:28:06:08:49:c3:11:fb:cd:86:7f:4b:f8:
         85:97:70:9c:99:99:27:3f:0d:30:cb:61:f2:b8:cf:de:16:57:
         19:b2:6f:24:e8:9c:ae:2d:44:26:eb:8d:dd:8b:55:48:e5:76:
         29:64:a5:0a:dd:85:0f:10:bf:b8:62:a1:93:69:c8:a1:c9:3d:
         47:54:e9:e0:c3:2c:7d:51:64:25:49:fb:cd:78:97:4e:cd:e9:
         00:53:e1:ad:8b:d4:a2:af:ba:02:7d:e0:7c:a6:7f:e7:d5:f6:
         b7:d0:93:75:e5:aa:3b:36:cb:1f:cd:4f:c8:cf:00:16:8d:fc:
         e7:78:88:4f:44:98:9a:25:77:a8:6b:d7:f1:d8:3a:3c:e6:67:
         65:ba:c4:08:49:2e:bb:72:6d:94:b0:24:b3:12:60:d8:a8:a9:
         ae:71:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:02 2025 by rpki-client