Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31392e302f32342d3234203d3e203532323934.roa
File:                     3230302e302e31392e302f32342d3234203d3e203532323934.roa (raw, json)
Hash identifier:          04F0Yc88EyE1D56HUNdsjznVn4ms7Z4VJEUkhjITE+E=
Subject key identifier:   5B:0E:96:43:89:4D:E3:0F:59:ED:DB:C2:45:74:C3:8E:C6:36:1F:CC
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5C83580798937653241F8ACEE5F96C39A9EC6A0D
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31392e302f32342d3234203d3e203532323934.roa
Signing time:             Tue 04 Feb 2025 18:35:11 +0000
ROA not before:           Tue 04 Feb 2025 18:30:11 +0000
ROA not after:            Tue 03 Feb 2026 18:35:11 +0000
asID:                     52294
IP address blocks:        200.0.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:83:58:07:98:93:76:53:24:1f:8a:ce:e5:f9:6c:39:a9:ec:6a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:11 2025 GMT
            Not After : Feb  3 18:35:11 2026 GMT
        Subject: CN=5B0E9643894DE30F59EDDBC24574C38EC6361FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:2a:35:cb:36:db:ce:85:41:46:46:90:51:
                    06:d0:49:38:c9:48:71:f4:a6:cd:a0:82:17:e1:65:
                    c0:c1:cc:52:24:2d:46:71:9e:d7:1d:ef:08:97:e6:
                    21:fa:68:c5:82:bf:ba:4f:01:a0:f0:46:6e:da:44:
                    72:30:67:33:3c:73:c9:e9:77:79:e7:c2:42:2f:e5:
                    42:4c:5f:29:07:1d:0b:28:3b:87:de:1b:54:b2:b7:
                    00:a9:b5:ee:82:6a:85:09:40:af:fd:bf:7f:ef:e2:
                    0f:f6:6b:7a:95:1c:7d:6b:cb:ed:74:3b:c3:f6:7f:
                    f4:0b:e3:f3:05:58:40:ea:bb:5d:8b:aa:ec:1e:29:
                    ad:e3:a4:a9:8c:f4:39:57:a8:fa:3f:85:fa:62:bc:
                    35:25:88:e4:dd:6b:c7:1e:b3:55:44:8d:f6:92:c3:
                    c9:bf:e8:49:22:b1:99:b5:2e:ef:cb:08:cc:e4:da:
                    61:34:ac:91:0e:78:c5:1f:49:50:a0:44:da:28:ec:
                    ac:18:d9:10:61:69:cb:2f:d7:85:c9:10:07:26:8e:
                    5e:29:03:49:c7:bb:a0:84:5c:19:35:1e:c4:b2:f8:
                    66:07:a7:48:1b:97:bc:8a:29:d4:de:78:a3:22:a2:
                    16:46:c6:8c:cc:75:ac:2f:0c:ac:a6:e9:18:d8:e9:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:96:43:89:4D:E3:0F:59:ED:DB:C2:45:74:C3:8E:C6:36:1F:CC
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e302e31392e302f32342d3234203d3e203532323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:38:11:fe:bc:48:cd:49:63:41:9b:8f:53:f2:c4:c4:8f:21:
         ee:c9:a3:fb:9e:c9:70:7f:51:29:3c:92:7a:b5:b2:20:6c:0d:
         6f:0d:06:16:1c:37:69:6f:cc:57:f0:ff:76:6b:07:22:3e:44:
         d7:10:2a:84:2d:f2:6b:3b:b7:8f:59:cf:4e:7e:c7:b9:d1:86:
         90:dd:ae:b8:92:b2:81:60:2e:9b:4a:11:58:87:93:2e:a1:b1:
         b1:0a:4e:59:95:1b:b0:f6:58:f7:ac:6f:58:2c:cd:c0:a2:59:
         23:42:29:ea:97:51:ba:52:3a:54:60:73:95:2f:47:42:6d:79:
         b3:86:73:a3:a8:e0:b2:e9:35:15:df:8d:99:06:57:aa:d3:47:
         d1:a3:e6:8f:06:d3:a7:64:f7:0a:50:9f:f1:56:73:65:13:26:
         4b:b6:5a:53:fc:ee:e6:3b:c9:7e:d3:a5:84:68:4a:dc:bf:ee:
         72:af:eb:07:69:0f:b5:ad:19:a2:f7:6c:3d:9f:cd:75:25:1e:
         e4:e3:89:dd:fb:52:8a:10:9b:39:3c:2e:fa:5f:3e:bf:04:96:
         cb:a5:13:5c:44:1f:31:8d:62:91:90:7d:1e:f7:d8:46:70:80:
         3e:a9:4f:e3:30:fa:33:d8:b6:d6:d8:b7:fd:21:40:18:a7:5b:
         a6:62:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:33 2025 by rpki-client