Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa
File:                     3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          8IbgMY648rP79p6FmczC5Fp/FD1V4C23yxvUGlMnfcw=
Subject key identifier:   DB:9C:BD:A8:98:E9:2B:D3:E9:C2:46:F7:0D:46:6F:C9:CE:FE:E9:A8
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       1B69CE9EDA32DA64A85FCADFD775B2BE66BAC2E3
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:33:23 +0000
ROA not before:           Tue 04 Feb 2025 18:28:23 +0000
ROA not after:            Tue 03 Feb 2026 18:33:23 +0000
asID:                     27947
IP address blocks:        200.125.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:69:ce:9e:da:32:da:64:a8:5f:ca:df:d7:75:b2:be:66:ba:c2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Feb  4 18:28:23 2025 GMT
            Not After : Feb  3 18:33:23 2026 GMT
        Subject: CN=DB9CBDA898E92BD3E9C246F70D466FC9CEFEE9A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:5e:04:69:04:8f:dc:5e:33:44:84:21:33:
                    cc:1e:fd:1c:56:5d:f6:0e:b2:de:8d:7b:6f:1e:c4:
                    c4:09:38:d3:9a:2d:62:d5:2f:0e:b6:f0:7d:0b:b6:
                    f4:68:73:c8:1f:f3:2b:17:d2:50:61:b6:0f:22:67:
                    4f:33:91:1c:a6:48:2d:fc:6e:ca:8b:f2:be:3e:63:
                    cb:83:2c:23:26:01:47:65:37:56:79:36:02:2e:a6:
                    75:b3:f0:8e:45:0a:bf:6f:19:9b:d8:05:f2:a8:02:
                    af:73:78:64:9d:e6:9f:07:0a:72:1f:d7:3c:df:56:
                    4b:63:22:84:68:71:2c:6c:bf:91:ce:9f:cf:e0:f0:
                    b7:71:e3:26:64:a9:e4:8a:68:d5:ec:3d:f7:a8:ad:
                    54:e3:17:b6:8e:97:9b:eb:81:a8:6b:af:29:58:1c:
                    4e:31:8f:a2:d1:1e:47:35:bd:9c:89:e0:99:e6:d3:
                    e3:84:61:57:e7:71:a1:22:4e:a7:81:9c:63:fd:49:
                    bf:85:c0:51:54:10:ee:69:af:b6:eb:26:ef:e4:1c:
                    62:a4:31:73:2a:17:de:0a:a7:e6:cf:38:6c:70:67:
                    4e:6b:31:88:74:c7:e2:9a:c8:7f:b6:0b:0c:d0:6b:
                    6e:36:35:ad:8d:70:01:73:39:d4:7f:a2:ab:9f:c2:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:BD:A8:98:E9:2B:D3:E9:C2:46:F7:0D:46:6F:C9:CE:FE:E9:A8
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3132382e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f1:cf:db:5f:4e:fb:e0:6f:fb:88:e2:09:6e:da:36:3d:f4:
         54:34:c6:66:73:36:42:e9:73:a5:97:c6:f9:a7:8b:5c:77:4c:
         5d:45:bb:12:15:39:75:7d:0c:e8:8b:ba:88:04:41:26:2a:8b:
         6b:6f:92:d0:c5:74:78:3a:28:86:10:eb:bb:1b:ad:c0:72:0f:
         48:05:a1:af:a2:3c:ac:2f:da:6e:ad:f6:e2:d0:84:de:fb:7e:
         3e:75:ee:a5:82:de:ad:fa:01:c1:d7:35:dd:3f:44:b1:88:3b:
         07:11:0e:68:dd:68:4d:4f:57:4f:4d:0b:7a:c1:54:72:d7:6b:
         34:c1:83:25:56:48:dd:70:c8:ac:29:9e:43:6f:e3:b2:aa:12:
         b8:76:79:af:5c:2d:aa:48:8f:b2:14:6b:88:59:ac:33:eb:c1:
         8f:46:bd:dc:44:28:46:26:29:bc:d7:3a:c0:a0:56:3c:e8:e4:
         dc:55:dc:b9:02:a0:37:c7:25:3d:9b:84:c7:b8:2b:19:10:06:
         96:c0:32:2c:5d:fc:20:f9:b6:99:21:f5:a9:ee:f3:42:92:db:
         32:23:c9:1d:c3:9e:e7:bf:33:8a:52:98:8b:65:8f:7b:6e:77:
         57:1f:97:18:0a:90:ae:bb:0b:2a:fd:25:0a:f9:f6:69:98:0a:
         70:3a:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:51 2025 by rpki-client