Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e203133363832.roa
File:                     3230302e3131392e3137362e302f32312d3234203d3e203133363832.roa (raw, json)
Hash identifier:          16qdD0AEijMB016jIBMQcmLYyi/Sk5GeKhtHgiMhuMI=
Subject key identifier:   90:E0:88:A0:51:38:4D:49:C6:F8:B1:B5:3F:16:5F:53:5C:B4:0E:6A
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       44ECA6CAABD1E91DA5FC217B01B2D953602BA0A3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e203133363832.roa
Signing time:             Tue 04 Feb 2025 18:55:21 +0000
ROA not before:           Tue 04 Feb 2025 18:50:21 +0000
ROA not after:            Tue 03 Feb 2026 18:55:21 +0000
asID:                     13682
IP address blocks:        200.119.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:a6:ca:ab:d1:e9:1d:a5:fc:21:7b:01:b2:d9:53:60:2b:a0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:21 2025 GMT
            Not After : Feb  3 18:55:21 2026 GMT
        Subject: CN=90E088A051384D49C6F8B1B53F165F535CB40E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:13:d4:23:e1:ba:69:49:f6:81:09:d4:83:
                    75:84:bc:e1:e6:0c:38:c1:a2:a0:7e:61:e9:60:86:
                    06:d8:94:68:09:73:2e:9e:e8:cf:e6:3f:7e:30:6b:
                    5e:1c:84:6d:ac:0d:bf:03:ae:bb:52:3b:1a:c2:3f:
                    1b:a5:96:14:e7:ec:56:4a:8d:d6:c8:91:3a:ec:c6:
                    75:63:3c:95:f4:02:25:a8:66:3b:91:03:fb:58:3e:
                    c5:3a:03:36:5e:76:90:e2:8f:32:45:92:fe:a5:2d:
                    4c:d7:78:d2:71:1f:20:a3:06:2f:e6:07:07:8a:7a:
                    0d:4b:df:11:3a:46:59:6b:e8:6a:17:df:d7:ab:f1:
                    e3:81:f1:02:57:c4:98:5b:66:03:c6:63:99:68:88:
                    c7:0c:2f:19:48:ee:d6:27:d3:6a:59:0d:7c:5c:f1:
                    63:29:70:2f:48:7c:ad:7c:ea:d5:d3:6f:88:13:4c:
                    8f:b2:d9:c9:39:bd:9b:4d:d2:3e:4c:da:81:0a:7e:
                    5e:6e:a3:d1:2d:2f:7d:de:a0:33:e8:95:38:67:7e:
                    66:ec:f5:08:4e:87:24:56:b8:7a:88:da:ba:b2:14:
                    04:73:06:28:30:e6:44:20:d9:bb:69:a7:df:7c:d9:
                    b0:69:ac:7e:4c:ca:94:2f:b9:e3:ab:10:ee:c8:d7:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:88:A0:51:38:4D:49:C6:F8:B1:B5:3F:16:5F:53:5C:B4:0E:6A
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:21:da:fc:5c:08:ec:e6:6b:84:d9:9b:a2:7f:ea:71:27:4d:
         c3:b7:75:04:4b:3c:14:9b:3d:50:f2:77:4b:5b:aa:ca:cd:39:
         29:5e:15:30:1a:c4:00:1d:f4:8f:bd:b9:25:80:53:73:25:04:
         58:94:bb:b4:92:20:a6:95:40:8a:f5:7a:16:08:fa:10:ac:bf:
         1c:26:0e:a3:06:9b:89:16:f8:31:85:ff:16:bc:7b:53:9d:e9:
         d2:2f:c2:3b:45:a7:50:9a:07:ca:33:43:bf:ce:19:6e:80:94:
         2f:3f:34:eb:19:18:e1:9f:71:c7:5b:ca:e6:b9:7a:f7:f6:4d:
         f0:db:81:03:37:2a:e7:b7:0d:3b:5b:1c:81:7e:aa:6a:f4:83:
         90:ce:a6:01:e5:44:0d:0e:15:d2:14:70:ca:18:98:66:a8:87:
         00:2d:c5:3e:0b:d8:7d:07:d5:78:35:f9:d0:bd:75:95:78:ab:
         23:b7:c7:c7:3c:73:51:a8:3b:b3:0d:ff:3d:a6:cc:31:a8:c5:
         d6:9c:99:6e:43:cc:11:ae:e4:38:05:b5:49:b8:27:23:6e:ed:
         83:66:d7:83:c0:83:6e:00:ba:3f:b7:55:3e:c5:d9:7c:be:20:
         2d:b7:64:da:4e:ef:ca:28:9f:98:aa:de:1a:a3:ba:33:82:40:
         d0:ba:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:40:00 2025 by rpki-client