Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38342e302f32342d3234203d3e203532353030.roa
File:                     3230302e3131352e38342e302f32342d3234203d3e203532353030.roa (raw, json)
Hash identifier:          VUqQGkil8T5pbo4S0FePv5r1IGtjAg2abPfJqgv44aw=
Subject key identifier:   6F:E2:7E:B2:38:31:96:5D:F0:93:FE:5E:AB:58:08:82:F0:BB:C1:8C
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       6BB77644DDB54DA06630F9451E7F5286B2BC73CA
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38342e302f32342d3234203d3e203532353030.roa
Signing time:             Tue 04 Feb 2025 18:35:20 +0000
ROA not before:           Tue 04 Feb 2025 18:30:20 +0000
ROA not after:            Tue 03 Feb 2026 18:35:20 +0000
asID:                     52500
IP address blocks:        200.115.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:76:44:dd:b5:4d:a0:66:30:f9:45:1e:7f:52:86:b2:bc:73:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:20 2025 GMT
            Not After : Feb  3 18:35:20 2026 GMT
        Subject: CN=6FE27EB23831965DF093FE5EAB580882F0BBC18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:45:75:aa:5a:f0:8f:60:8d:94:45:00:11:
                    21:32:fa:3c:7b:88:b9:52:e2:a8:6a:31:41:1f:fc:
                    e2:cc:aa:6b:08:3e:d2:7c:f0:99:8a:4c:90:ba:ab:
                    71:39:19:28:e1:8b:5f:87:b1:b4:1b:8b:fd:f8:56:
                    ff:85:49:f3:bf:a5:c8:19:88:fe:d4:b7:dd:4e:22:
                    43:c8:bf:21:9c:f1:ef:c1:ab:c5:5e:4a:a8:87:85:
                    a0:e4:73:b8:02:21:70:db:27:aa:b5:dc:71:a1:50:
                    5d:a1:85:f2:c1:bb:3b:cb:d2:51:d3:b3:a9:6c:5b:
                    b1:98:32:a9:5c:bd:4a:2b:0c:29:cb:71:06:86:37:
                    93:3e:34:3b:5d:7d:9e:4c:38:cb:fd:d9:a3:25:3f:
                    51:a6:b3:a0:89:b2:62:1e:94:d5:6b:9f:ec:2f:53:
                    75:71:4a:36:f5:72:b0:d8:e9:93:28:15:6d:46:b0:
                    79:90:fb:e8:6d:86:2b:f2:42:9c:45:bf:31:05:09:
                    15:ce:d0:a0:e8:00:aa:b3:f8:e9:5b:47:1a:59:8b:
                    27:44:8a:28:e0:24:8e:a6:d5:7f:58:1a:6e:8d:11:
                    3f:d0:0a:e0:bc:de:76:e9:d2:34:53:3c:4a:01:5e:
                    5e:02:ae:95:13:19:d5:48:98:6f:9e:0e:50:25:9d:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:7E:B2:38:31:96:5D:F0:93:FE:5E:AB:58:08:82:F0:BB:C1:8C
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38342e302f32342d3234203d3e203532353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:ca:9e:8d:1b:6c:45:0f:d8:44:35:79:4a:ff:02:50:f1:8c:
         53:f2:33:4e:48:4f:10:d0:ae:79:bd:d3:3c:13:2b:ea:45:c1:
         15:21:86:8d:b1:b0:18:cf:de:d4:bf:11:d3:9d:23:3d:09:78:
         d0:a6:3c:e8:38:d6:51:09:6f:48:80:33:be:af:c1:20:1b:15:
         32:5b:05:4a:e1:e1:f3:66:2c:d8:61:3c:ec:98:dd:c1:9c:c5:
         ae:e9:a7:63:90:48:a5:56:cb:74:c3:09:e9:aa:72:c1:f0:4d:
         41:09:12:ec:a8:fe:ec:04:97:2f:86:f5:45:1f:ea:ce:a5:de:
         fc:ab:e2:73:af:3a:3f:88:55:41:30:d2:c7:df:17:64:83:7e:
         0a:01:9a:2b:de:f8:79:13:a3:8b:ed:d5:bc:18:1c:16:fd:8b:
         f1:86:ad:29:48:1c:5e:03:62:b8:96:9d:da:14:08:bb:10:24:
         ce:00:e5:7a:b5:a7:cb:27:a7:a2:bc:58:4f:c0:58:9f:48:ed:
         38:67:fc:95:db:71:93:82:4b:62:4b:43:6e:a0:26:89:f6:a8:
         e1:ae:91:ea:fa:49:be:61:99:fb:b9:ed:b3:b8:b1:bd:66:8f:
         b5:9e:21:78:68:a9:5d:45:85:6e:0c:25:ce:b8:9d:25:78:a2:
         7a:a8:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:52 2025 by rpki-client