Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e203134373534.roa
File:                     3230302e3131392e3134342e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          YU6uBjPYfoG+NMSgpYLE9mMaOA02ng0Z6SVxLCYo+ZU=
Subject key identifier:   72:71:62:60:5F:8E:D5:46:E2:31:A7:27:A5:E6:4A:08:4B:7F:1D:47
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3AA8A986FAD7C9CBE833B6E299601CE0D296F3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:11 +0000
ROA not before:           Tue 04 Feb 2025 18:50:11 +0000
ROA not after:            Tue 03 Feb 2026 18:55:11 +0000
asID:                     14754
IP address blocks:        200.119.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a8:a9:86:fa:d7:c9:cb:e8:33:b6:e2:99:60:1c:e0:d2:96:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:11 2025 GMT
            Not After : Feb  3 18:55:11 2026 GMT
        Subject: CN=727162605F8ED546E231A727A5E64A084B7F1D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:c5:eb:3b:f2:7f:9d:8f:9c:5f:f4:24:c1:
                    ae:f4:a9:5e:dd:03:3c:aa:9f:7a:c2:15:b2:83:0e:
                    ab:e7:4e:cd:93:d7:43:bd:e2:e2:f2:17:6c:75:10:
                    3f:c0:6e:c4:d9:a4:90:09:fc:37:26:ce:5c:6c:7f:
                    4c:ad:09:8a:d4:d9:5b:10:d9:dc:24:e7:ed:dc:79:
                    a7:41:4e:e0:e1:dc:64:4b:46:9d:aa:87:57:91:61:
                    3e:b1:62:b0:32:de:ed:39:76:50:e9:a5:76:cd:f2:
                    34:df:34:ce:57:69:55:79:47:14:b6:ab:04:0a:5d:
                    b4:c3:1d:2d:c9:78:ac:c6:45:93:2a:d1:ae:a0:fe:
                    e7:5f:fd:52:71:da:8d:c9:a9:a9:80:d4:5d:63:ca:
                    b2:ed:86:ec:ea:3f:ce:ce:ac:29:e3:87:91:b0:74:
                    eb:ab:9f:b2:72:2c:80:1e:8c:de:68:c2:55:60:c7:
                    a6:08:e1:59:e3:b0:79:e1:7e:ed:19:20:fc:31:58:
                    77:25:8f:a7:05:bc:1b:3a:0c:14:52:52:ac:22:9c:
                    b9:ab:05:56:7c:9a:4e:b5:68:a2:a5:f0:bc:91:1c:
                    31:2b:6d:a7:43:f4:ee:e3:a4:40:b9:f5:25:07:52:
                    b1:a0:a1:7c:9c:59:86:a4:66:bf:96:be:55:4d:b0:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:62:60:5F:8E:D5:46:E2:31:A7:27:A5:E6:4A:08:4B:7F:1D:47
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:86:f4:de:de:fb:95:b5:06:2b:bc:a5:d6:40:51:f7:ab:2a:
         c9:51:42:e9:c8:68:3a:61:df:07:95:3b:c0:00:f9:a1:24:b3:
         28:24:75:f4:84:13:06:c3:67:43:8f:6c:1c:95:db:51:e2:6d:
         95:94:a7:f1:ab:c5:c4:c2:98:cd:7f:88:f7:75:b7:b9:98:5f:
         1d:25:67:41:de:84:02:e9:2b:bb:a7:41:df:51:29:ab:9c:ca:
         9d:cf:ea:f7:1b:9b:e9:92:2d:5a:b4:1e:bd:03:bf:cc:ee:55:
         e4:93:6b:b0:3e:7f:aa:09:5f:a9:ee:02:70:7d:d6:71:03:e1:
         6c:c2:b2:ea:43:c8:38:23:5e:50:21:27:83:46:88:8d:5a:ad:
         30:99:b9:e2:d6:f2:ce:13:17:7d:d0:60:25:97:7f:45:d6:da:
         db:6f:9e:83:55:06:ef:fd:f8:d8:fc:f6:d6:0e:95:18:99:9b:
         9a:2b:f4:76:5b:d9:9f:72:f0:a8:de:e7:58:aa:8e:e1:1a:ff:
         8d:d8:ec:b8:3c:5f:4c:b8:6b:54:2b:6e:3f:5e:6a:9b:1a:ba:
         78:a4:f8:e1:29:1f:a7:59:ab:e1:b2:b6:f9:60:89:fe:c2:06:
         e8:60:58:d8:8b:20:57:60:49:f8:53:a1:a9:83:a6:1f:4e:07:
         b8:79:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:57 2025 by rpki-client