Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa
File:                     3230302e3131352e39312e302f32342d3234203d3e203532343033.roa (raw, json)
Hash identifier:          vrhwEnc2eSDpVyG7j84oJ/Y3WmufYGym9WKelUkyD9Y=
Subject key identifier:   E8:E9:C8:61:EC:ED:34:9F:E0:27:37:FF:25:F4:BA:D0:10:4C:A3:68
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       2A764ECC7AD31CF55327ED8C0A01E09DAEF5571E
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa
Signing time:             Tue 04 Feb 2025 18:35:21 +0000
ROA not before:           Tue 04 Feb 2025 18:30:21 +0000
ROA not after:            Tue 03 Feb 2026 18:35:21 +0000
asID:                     52403
IP address blocks:        200.115.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:76:4e:cc:7a:d3:1c:f5:53:27:ed:8c:0a:01:e0:9d:ae:f5:57:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:21 2025 GMT
            Not After : Feb  3 18:35:21 2026 GMT
        Subject: CN=E8E9C861ECED349FE02737FF25F4BAD0104CA368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:4e:cb:bd:7b:ec:47:bb:68:bf:51:34:24:
                    4b:5b:94:87:61:5b:2d:84:99:5d:4f:97:14:86:2f:
                    fc:8b:50:93:74:a4:63:6d:39:02:01:62:70:eb:9a:
                    2c:53:b6:e3:15:f1:92:92:1f:52:58:1a:b0:08:4d:
                    64:d0:f8:7e:8b:92:09:81:7e:5f:02:9e:c3:7f:aa:
                    cd:c5:e5:58:29:8a:f4:a0:4c:74:39:75:85:30:5e:
                    32:d6:bd:0e:b8:b3:6d:8a:d3:3c:2f:7e:87:ce:f5:
                    00:ba:d0:3d:f5:b6:9f:11:b0:7c:ab:d8:89:88:3d:
                    15:a3:66:81:d8:52:7e:cd:ca:7b:0b:b8:c9:d0:55:
                    9b:80:85:43:51:0d:21:80:a1:f9:71:66:23:8b:b5:
                    9c:c9:fe:fe:18:5e:9b:63:67:f1:fa:e5:4a:2a:7e:
                    d4:cb:17:33:a3:f9:47:3a:4f:c2:c9:65:b5:02:6e:
                    1e:b7:43:96:ca:7f:a9:38:d2:ec:fa:94:e6:29:28:
                    bf:f5:da:5b:90:05:01:88:38:1f:cf:14:70:5a:af:
                    94:25:f8:dc:1b:2e:ab:e4:dd:64:89:3d:d7:db:67:
                    78:d9:f6:cf:b6:0e:46:a2:8d:1e:17:26:a0:ed:b3:
                    5b:0d:fe:b4:60:c0:41:c3:17:27:2a:87:e5:da:61:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E9:C8:61:EC:ED:34:9F:E0:27:37:FF:25:F4:BA:D0:10:4C:A3:68
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:53:2b:ba:7b:6e:8c:dc:cc:22:c2:cc:19:c8:18:3c:b5:
         c6:9e:20:90:ad:4b:f2:98:bf:65:c1:50:4f:11:18:8b:0e:53:
         ef:c6:c4:c3:dc:c4:7d:d4:e7:03:30:af:76:7e:67:27:b0:77:
         99:ea:2e:4c:b8:7c:5b:62:c5:8f:18:82:62:ba:30:21:3d:37:
         bd:6c:1d:da:b8:8f:39:cb:e6:2b:e0:b9:b8:23:dc:f0:90:94:
         73:be:f6:0c:ef:1a:7a:93:4e:e7:78:04:d0:9c:44:55:8e:a8:
         ec:62:be:31:07:5e:e6:a8:da:f6:30:a3:2a:dd:6b:8d:8e:72:
         a5:67:ed:0c:99:b4:f8:f5:72:35:62:e7:fa:01:d0:9e:82:e0:
         e6:81:b9:3f:fb:b5:c6:66:24:ad:c6:2d:1c:38:e0:a3:af:44:
         2b:32:c3:ed:29:ef:13:da:6b:47:86:02:07:e1:cd:e3:07:cf:
         f1:bc:22:6b:88:0e:33:e2:30:f7:a7:dd:b3:98:58:13:cc:6f:
         aa:05:03:58:f2:af:20:d2:c9:32:d2:d0:b6:54:1c:51:de:b5:
         24:0d:4b:46:0b:94:0e:98:f8:d1:93:ab:0b:a8:50:87:62:1a:
         42:4d:36:29:9e:b4:dc:f2:b9:3b:c2:7f:00:fa:69:2a:a6:63:
         bf:f9:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:22 2025 by rpki-client