Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134322e302f32342d3234203d3e20313938393439.roa
File:                     3230302e3131392e3134322e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          60gsRPT3MuidOe75Q31jOSeFkXm2MywzBlFoZo0Vhl8=
Subject key identifier:   6D:5E:33:C1:49:0E:F2:88:60:97:A3:B5:75:6D:DC:C8:25:39:9B:8C
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0F2F92021CE2DA28229EDBC4510C91FDE0DDC893
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134322e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 04 Feb 2025 18:55:21 +0000
ROA not before:           Tue 04 Feb 2025 18:50:21 +0000
ROA not after:            Tue 03 Feb 2026 18:55:21 +0000
asID:                     198949
IP address blocks:        200.119.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2f:92:02:1c:e2:da:28:22:9e:db:c4:51:0c:91:fd:e0:dd:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:21 2025 GMT
            Not After : Feb  3 18:55:21 2026 GMT
        Subject: CN=6D5E33C1490EF2886097A3B5756DDCC825399B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:61:62:66:4c:48:f0:c9:9c:1b:a5:67:ea:
                    b0:76:3f:f4:76:52:2b:df:e0:1b:44:f1:74:70:02:
                    1e:e7:14:d7:36:b8:3f:8d:0d:ae:26:60:41:37:cd:
                    53:56:cb:85:a1:3f:be:52:8d:53:17:cc:c0:eb:96:
                    1f:8b:21:9f:dc:8b:fe:15:e9:b5:3a:ef:f9:11:3d:
                    7d:03:28:09:6f:6d:e0:72:82:65:e3:2b:96:04:f1:
                    ff:a7:77:97:7c:a3:41:17:e7:f6:e4:72:17:ec:c0:
                    11:c5:83:ba:c0:c6:e1:f5:40:7c:f4:14:7d:29:52:
                    b1:5a:20:b9:db:5b:fc:fc:95:08:33:6b:7d:c3:6a:
                    1a:a7:b6:88:c6:e4:10:a3:84:32:39:54:db:75:c2:
                    5c:ac:12:1f:b9:b5:cc:ce:97:cf:5a:7a:05:89:32:
                    8f:bb:37:a7:00:e5:c5:1b:d1:5e:a6:e5:53:42:fc:
                    81:46:83:95:c5:a4:99:9e:f9:72:6b:ce:dc:21:16:
                    b7:4c:66:c6:63:b4:9f:59:41:a2:c1:c8:98:18:56:
                    51:8a:cd:54:80:ca:a2:ec:6c:a3:39:0f:56:e0:cd:
                    43:d9:d0:44:fc:d2:0e:1d:2a:e6:46:0e:a3:5c:5b:
                    06:24:bb:90:0c:68:f4:3b:72:e7:bd:ef:d4:69:d8:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5E:33:C1:49:0E:F2:88:60:97:A3:B5:75:6D:DC:C8:25:39:9B:8C
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134322e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:86:5b:f5:84:c2:49:07:79:d1:e3:91:bf:22:1e:33:de:a7:
         ce:65:69:dc:c8:8c:aa:c9:4e:52:c0:4e:d3:6b:3b:b1:b4:ab:
         2e:16:ac:0e:0b:81:6a:a9:37:54:83:bb:3b:48:13:8a:02:fa:
         4a:11:ec:b0:a5:0d:87:d7:3f:af:08:46:c7:6d:c3:ba:c2:cd:
         62:c9:16:62:cb:74:66:47:bf:f0:f8:e8:4c:d4:83:38:cb:ae:
         8b:b5:2d:55:1a:96:2f:20:8a:c4:3a:fb:8c:ac:59:83:1d:63:
         2b:13:76:4b:fe:09:49:b8:53:76:a6:5b:ad:bf:8b:c8:05:8d:
         c6:9d:c9:14:f4:d3:37:09:45:b4:73:52:98:48:69:dd:09:82:
         05:9f:27:33:e5:92:53:20:0c:1d:71:aa:67:64:db:29:ae:b9:
         d3:5d:d1:03:24:45:21:93:c4:47:c9:e3:9f:59:96:23:08:95:
         80:4f:38:04:be:73:6c:40:58:6f:dd:d9:7a:e5:6c:34:17:0b:
         c9:74:46:1a:61:9b:28:d9:b1:9f:b4:e7:0c:fe:c6:3a:6e:29:
         e1:b6:93:f0:44:5f:d6:84:e1:79:c5:ac:19:03:3a:71:d2:68:
         07:1a:97:85:ae:a8:ea:20:f8:01:31:95:10:a5:24:a1:f5:80:
         eb:7b:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:55 2025 by rpki-client