Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
File:                     3230302e39312e36342e302f31382d3234203d3e20323032.roa (raw, json)
Hash identifier:          BNNljWMUuoBJRpfcK1I/dDhEGqWvygZRpct81W5nRd4=
Subject key identifier:   91:86:33:8C:A4:4F:FF:7A:61:1E:CE:3F:D0:CD:66:CD:BD:5C:3A:AE
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       14732D72031201A8EF20F76ABE6E61E2F6A68537
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa
Signing time:             Tue 04 Feb 2025 18:36:35 +0000
ROA not before:           Tue 04 Feb 2025 18:31:35 +0000
ROA not after:            Tue 03 Feb 2026 18:36:35 +0000
asID:                     202
IP address blocks:        200.91.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:73:2d:72:03:12:01:a8:ef:20:f7:6a:be:6e:61:e2:f6:a6:85:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:35 2025 GMT
            Not After : Feb  3 18:36:35 2026 GMT
        Subject: CN=9186338CA44FFF7A611ECE3FD0CD66CDBD5C3AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:13:0e:90:14:65:88:fb:d3:fd:5b:5c:84:
                    bc:19:3e:22:c7:1f:10:15:e9:53:d8:46:e9:a8:6e:
                    ef:86:d5:8f:ad:f1:cd:f7:ec:79:c9:13:e2:11:fa:
                    3e:5d:44:88:8e:68:88:e0:06:43:4e:56:08:9e:46:
                    4a:06:e5:68:f9:4d:79:3b:8b:e7:79:a5:bc:76:f7:
                    f5:44:bc:4f:36:f9:25:28:08:a9:a6:dc:3c:db:a2:
                    cb:d7:c9:05:66:5e:c3:95:e3:ed:c8:2c:83:7b:2b:
                    0a:fd:c4:fd:b9:b3:e1:29:40:a4:df:f9:5c:ae:ff:
                    2d:07:8c:b0:1e:47:69:a0:c4:28:66:bb:d8:3a:cd:
                    d7:d7:59:33:99:76:52:2d:01:11:20:52:87:7f:f8:
                    77:56:98:b3:9e:f2:e6:e0:4f:28:e5:89:ef:33:56:
                    13:45:44:c7:b4:81:cf:57:c0:28:fc:0e:08:27:c7:
                    c7:60:a0:59:3f:90:31:47:29:e1:96:56:5c:df:3e:
                    0c:b1:7e:2d:be:0d:41:f2:e8:2d:16:1c:88:ef:a8:
                    49:a3:f4:71:01:42:14:6f:72:79:5b:b8:e0:a1:77:
                    c3:7e:8e:c6:22:df:9e:2c:d7:30:33:57:91:53:0a:
                    2d:63:40:45:48:51:2b:bb:70:c0:7d:ae:3c:da:db:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:86:33:8C:A4:4F:FF:7A:61:1E:CE:3F:D0:CD:66:CD:BD:5C:3A:AE
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:53:d8:eb:9c:12:c8:f1:0d:81:ee:7f:81:b4:08:c3:a5:
         09:75:c4:c1:4a:ec:5d:13:e1:64:d6:cb:7e:7f:ca:ef:66:31:
         49:c7:e0:db:76:66:81:4d:49:9d:5d:f0:dd:59:3f:7d:94:b3:
         85:8a:2b:f4:f4:67:63:6f:0f:b8:ad:9b:34:dd:0f:bb:bf:e2:
         13:60:c9:6f:36:f7:93:6a:f4:2d:70:ee:de:6d:a0:f4:0f:63:
         58:bf:fd:1b:26:60:8e:ec:65:af:2d:3f:67:2c:8f:4c:71:c3:
         4f:e7:4a:28:d4:8d:a8:ad:d5:e9:7a:ef:de:41:0f:84:b9:ae:
         c0:86:d4:b8:4c:0a:aa:26:e6:61:e3:52:06:be:f3:f5:eb:59:
         53:bd:81:03:23:c4:f2:ea:ae:78:71:f9:3e:8f:81:81:63:e5:
         5d:a5:ee:45:64:af:94:45:d0:33:68:d2:1b:f0:dd:42:f2:02:
         f1:da:47:60:7c:5d:15:c0:d8:65:3d:fd:3e:6e:1c:9f:b2:d8:
         89:73:0a:2e:e8:2d:89:91:49:c9:ee:b7:ba:e1:3a:77:34:f3:
         64:ec:7a:71:f7:c9:44:b4:50:85:10:92:80:16:b9:12:0b:2b:
         4c:d5:3e:ac:1d:73:36:29:02:53:c1:ea:aa:61:e4:fa:70:b4:
         84:2c:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:21 2025 by rpki-client