Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38322e302f32342d3234203d3e203532343033.roa
File:                     3230302e3131352e38322e302f32342d3234203d3e203532343033.roa (raw, json)
Hash identifier:          4irjs3+s2b3zo/fmEpj+EliU5SD2l8ocmFnQc050n0o=
Subject key identifier:   DD:FC:18:11:E0:A6:61:B8:CC:24:94:BB:B9:0A:B5:1B:A6:72:6B:3B
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       484C7F76ADF883E5DDE14260302223F98B1B4F18
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38322e302f32342d3234203d3e203532343033.roa
Signing time:             Tue 04 Feb 2025 18:35:12 +0000
ROA not before:           Tue 04 Feb 2025 18:30:12 +0000
ROA not after:            Tue 03 Feb 2026 18:35:12 +0000
asID:                     52403
IP address blocks:        200.115.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4c:7f:76:ad:f8:83:e5:dd:e1:42:60:30:22:23:f9:8b:1b:4f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:12 2025 GMT
            Not After : Feb  3 18:35:12 2026 GMT
        Subject: CN=DDFC1811E0A661B8CC2494BBB90AB51BA6726B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:4c:63:8d:99:22:24:d3:24:7c:b0:65:06:
                    0e:dc:44:78:f8:9e:b3:90:a9:b8:d6:73:48:f4:54:
                    8a:51:c7:dc:d1:f9:93:e0:74:a9:de:86:9d:55:8a:
                    a2:95:26:5d:15:76:d8:43:d8:5e:55:a2:ef:fd:b6:
                    e4:a6:3f:df:98:e7:3d:61:64:2a:ba:a6:3f:ae:57:
                    ad:c5:3d:95:51:e9:84:e2:92:22:cc:1d:fc:97:d6:
                    e5:fb:6a:99:63:7d:aa:b9:a2:63:13:9d:b2:cf:a4:
                    da:e6:60:25:c4:0b:94:b8:fc:55:30:f0:e6:74:07:
                    1e:85:b5:bf:d7:a6:ec:3a:95:5e:1f:0c:3f:97:37:
                    42:1d:07:3e:98:20:07:bb:09:40:65:ae:63:55:f9:
                    e1:15:a4:2c:4f:eb:fa:91:36:0f:87:d0:86:ad:a6:
                    c7:b3:b5:a5:30:63:1b:b2:ec:5c:75:79:05:07:63:
                    bf:45:33:48:c6:ca:c2:78:30:33:3a:97:54:62:e2:
                    13:c3:70:f2:89:d9:b9:0c:92:d0:6c:6f:cf:ef:b8:
                    5f:a4:43:23:d9:ff:eb:2f:93:17:3b:55:f3:15:32:
                    9c:40:97:ae:c2:8c:5c:ec:03:90:0b:85:df:ed:36:
                    a9:64:7b:d9:fd:35:bc:05:f3:6a:dd:68:90:4f:15:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FC:18:11:E0:A6:61:B8:CC:24:94:BB:B9:0A:B5:1B:A6:72:6B:3B
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38322e302f32342d3234203d3e203532343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:b2:65:2a:5a:d4:7a:0d:52:4d:76:0d:33:1c:67:23:23:3a:
         f6:d2:0b:f9:a3:09:cd:cf:16:ab:40:f8:d8:e2:ee:35:6c:bf:
         ff:59:62:16:a4:cd:99:b3:bf:9b:9c:32:8c:bd:5e:19:d7:bb:
         ec:f0:aa:0b:d0:6b:4f:bb:cf:ad:f0:bf:26:cb:45:c0:33:b8:
         de:e0:1c:88:77:a3:c8:dc:dd:1a:c5:90:c1:a6:17:86:a9:26:
         9d:f0:0f:d1:3e:7c:3f:17:ab:23:8f:83:79:0c:e1:8f:c3:b1:
         2e:ee:c5:da:73:18:7c:f8:3d:13:c3:24:5a:0d:7e:b9:a1:34:
         fc:e8:db:55:48:85:a2:22:5d:76:bb:a8:24:d8:51:de:5b:71:
         0b:03:9c:56:ef:91:4f:10:0b:78:53:a5:30:bf:4d:8d:ed:a2:
         b0:06:41:83:eb:54:d8:c2:79:07:55:f9:42:d6:7f:5f:44:a9:
         9c:15:5f:e7:e0:0f:5d:9c:df:61:20:50:a9:01:65:cd:28:9e:
         57:65:b7:4d:90:de:3c:ff:3e:39:b4:28:91:5a:79:21:8a:ea:
         57:4e:e7:2e:ab:ce:f4:1d:36:ac:88:b6:a1:0c:41:ff:25:dc:
         b2:0b:aa:f7:ef:2e:12:83:b5:48:bc:45:3c:e9:ec:04:bb:8d:
         5b:ce:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:05 2025 by rpki-client