Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
File:                     3230302e39312e35362e302f32312d3234203d3e203532343836.roa (raw, json)
Hash identifier:          rZi61WpkDjymw3VldkwSmgt5IxdV4Pd0eYIJnatg514=
Subject key identifier:   85:4C:01:90:DC:29:5E:C7:9E:5C:DB:D2:91:BE:C7:7E:D2:30:2A:8F
Certificate issuer:       /CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Certificate serial:       2DD1BD53C3149F1123F8D7794EF62F06D7888D5E
Authority key identifier: D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
Signing time:             Tue 04 Feb 2025 18:26:11 +0000
ROA not before:           Tue 04 Feb 2025 18:21:11 +0000
ROA not after:            Tue 03 Feb 2026 18:26:11 +0000
asID:                     52486
IP address blocks:        200.91.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d1:bd:53:c3:14:9f:11:23:f8:d7:79:4e:f6:2f:06:d7:88:8d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
        Validity
            Not Before: Feb  4 18:21:11 2025 GMT
            Not After : Feb  3 18:26:11 2026 GMT
        Subject: CN=854C0190DC295EC79E5CDBD291BEC77ED2302A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:38:67:8e:66:cc:5f:39:7c:ae:a4:c2:ac:
                    20:76:28:43:e2:35:b8:ce:81:df:f4:5d:8b:36:2e:
                    0b:39:0c:83:39:c0:98:38:05:48:ef:04:9d:8d:e9:
                    32:36:af:cf:28:42:a3:60:e0:17:cf:d7:0d:45:1f:
                    14:84:96:ca:d0:53:12:5e:80:70:38:d0:6a:6b:c4:
                    28:27:d2:e2:42:46:5e:5a:90:44:6d:8c:2b:6a:47:
                    9c:3e:da:5e:33:23:59:25:8f:c2:5d:68:98:e3:93:
                    de:f7:77:77:d1:24:b7:f0:93:36:a4:ec:1f:af:a9:
                    0c:c4:1f:a5:92:29:84:eb:5d:15:3a:c9:4d:c8:7d:
                    af:15:77:90:68:37:d9:e3:70:16:3c:f6:bf:c8:aa:
                    51:56:3b:aa:3b:aa:77:64:c0:40:4f:b9:2a:ba:fa:
                    8b:8d:05:45:02:f5:1e:cb:42:f5:04:ed:09:c5:2d:
                    56:a5:9a:6c:b6:10:98:32:92:31:7d:1b:c3:9b:88:
                    22:a6:2e:5b:80:c4:32:78:9a:01:3a:24:82:1b:05:
                    e1:40:2b:95:35:ff:1f:20:60:77:3f:f8:7b:f9:14:
                    23:13:b6:f7:6e:40:e6:5f:e4:de:47:ce:97:58:f0:
                    dc:e8:d7:36:44:ac:f7:ad:4c:03:84:ba:ea:a8:e5:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:01:90:DC:29:5E:C7:9E:5C:DB:D2:91:BE:C7:7E:D2:30:2A:8F
            X509v3 Authority Key Identifier:
                keyid:D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:0a:3e:20:f3:64:00:c1:5a:4b:f0:38:3d:44:51:05:ba:
         5a:24:a2:39:13:6b:05:53:2d:63:1d:c2:e1:aa:15:dc:c4:66:
         d0:40:66:65:e3:7b:94:18:de:e8:e1:a7:62:b9:3d:62:12:a3:
         bf:5c:ae:ec:4f:13:9e:4b:0e:cb:8d:a1:f2:70:57:eb:d1:4a:
         a5:15:e6:48:b7:81:08:ac:b1:ff:70:8f:b9:71:1b:b4:32:03:
         92:29:a6:1b:22:eb:1e:2e:d9:7a:f9:f8:14:7d:cb:53:09:df:
         05:27:74:28:c6:41:e8:c9:7e:26:77:a7:21:4a:03:ee:77:4c:
         8e:94:b4:50:a8:a6:c1:5e:7e:0c:76:15:dc:8f:75:37:99:88:
         f9:1d:24:7d:a6:f2:1c:a8:a1:f3:6b:c7:ad:a3:70:49:61:bc:
         f0:e5:06:a7:bf:a7:09:62:cd:b6:59:f0:dd:b6:e1:38:77:21:
         68:b1:98:9b:f8:0e:7d:6c:06:43:4b:c1:d4:e4:23:6c:e2:e7:
         47:b9:1a:74:0e:df:90:88:c1:31:3d:bb:1c:d7:4b:7f:b3:21:
         de:ec:df:05:70:ba:f5:ea:be:66:5f:51:3f:9c:d2:6a:c0:00:
         13:7e:78:1b:a2:19:8f:71:39:14:1e:72:b0:27:d9:22:7d:81:
         52:22:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:26 2025 by rpki-client