Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135342e302f32332d3234203d3e203134373534.roa
File:                     3230302e3131392e3135342e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          1WTVUBd21ZlA/fHSNWbV05WRcJP1+1QnTr49ABNbWV8=
Subject key identifier:   45:E3:27:93:8E:39:60:7F:CF:25:6B:AE:F8:D8:70:57:71:0C:FF:9D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       703ECADD411DF5D05F75F5C90F4C6C748211A5DE
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135342e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:15 +0000
ROA not before:           Tue 04 Feb 2025 18:50:15 +0000
ROA not after:            Tue 03 Feb 2026 18:55:15 +0000
asID:                     14754
IP address blocks:        200.119.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3e:ca:dd:41:1d:f5:d0:5f:75:f5:c9:0f:4c:6c:74:82:11:a5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:15 2025 GMT
            Not After : Feb  3 18:55:15 2026 GMT
        Subject: CN=45E327938E39607FCF256BAEF8D87057710CFF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:e0:e4:92:37:60:a0:1f:27:1c:f3:c9:63:
                    6f:e2:95:45:28:62:0a:c5:a7:db:6c:4c:f4:e4:6c:
                    39:00:15:16:b0:9c:c9:3a:77:89:be:11:51:26:21:
                    db:79:fd:82:66:47:cd:8a:ba:14:04:b7:3c:1a:d1:
                    17:06:2c:e9:71:16:bd:52:78:fd:2a:a5:9e:4c:4d:
                    b5:16:05:d8:a5:09:1b:fd:fe:2e:b3:85:50:57:03:
                    93:39:d8:9b:1a:89:c3:46:7e:15:64:2f:a4:c7:78:
                    f1:9e:8f:4f:67:8a:88:18:ef:f4:8e:bf:24:96:e7:
                    41:db:41:e9:46:78:bd:5d:e3:f9:4e:36:0b:54:c5:
                    f5:c6:05:00:b4:42:6b:af:87:a0:33:f9:75:a0:bc:
                    cb:0a:81:20:c7:3e:2b:24:57:21:96:c7:5b:a2:0f:
                    d5:ef:e2:62:10:bd:fd:4b:16:6b:22:53:43:b8:b9:
                    90:15:cb:44:6c:2e:b6:8b:64:fd:10:9d:f4:e2:45:
                    7e:e4:0f:9c:cf:f4:6d:0f:ea:b4:fc:b7:e4:ad:3b:
                    df:1b:63:0e:56:f0:b6:ee:6f:e8:41:9c:36:f8:42:
                    db:f9:61:1c:2a:1f:1a:42:c0:e7:d2:34:2a:8a:12:
                    75:6d:92:a0:e2:5c:f4:27:8e:71:df:7b:b8:66:4b:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:27:93:8E:39:60:7F:CF:25:6B:AE:F8:D8:70:57:71:0C:FF:9D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135342e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:ab:cf:8e:6b:ac:7d:60:a0:bc:3b:1a:b7:99:cf:24:1f:
         c4:be:f5:24:27:b4:ed:ce:74:14:b6:57:d8:04:85:74:f9:f3:
         ae:3b:84:65:d0:e1:39:2a:ff:19:b9:98:7f:f0:6e:c7:35:16:
         8e:7d:11:ae:94:36:41:8a:27:a7:83:3d:15:e2:61:24:0f:23:
         c1:d6:55:54:bd:6a:b5:5b:f6:64:a8:a5:14:41:7f:9d:d5:b3:
         cf:2c:cd:f6:94:b5:2b:68:65:aa:57:9e:f2:09:b2:61:e1:c4:
         6c:99:32:bb:6a:42:89:d6:94:d8:25:d2:e7:68:8f:41:5c:01:
         61:50:bb:92:89:18:d0:b9:bb:26:40:3e:7a:b8:92:8b:1b:15:
         74:c1:bf:28:cb:36:24:a0:2a:2e:32:ce:18:6e:b5:ad:75:a1:
         df:b6:dc:19:fc:d6:f2:bc:05:76:6a:9c:bf:50:3a:ce:02:49:
         ad:24:32:e5:61:96:b6:07:9d:dd:f9:d5:80:8f:0f:66:50:63:
         a7:c0:79:8b:53:70:47:85:cf:71:81:44:14:0a:9f:44:88:10:
         8b:46:71:03:e3:05:ec:97:5c:f0:8a:a3:78:76:99:fd:f6:ee:
         0b:dd:58:21:5a:df:b1:8a:f2:29:d2:72:ac:55:0f:e4:90:72:
         db:c0:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:57 2025 by rpki-client