Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e32342e3234382e302f32312d3234203d3e203532333831.roa
File:                     3230302e32342e3234382e302f32312d3234203d3e203532333831.roa (raw, json)
Hash identifier:          04Q7FtU8BUky0V9vTzdwfBkEcIIrVopbE/98M7Jvmp0=
Subject key identifier:   2D:46:16:9F:D8:4E:C6:1F:9C:E0:13:48:C8:DF:47:3E:78:A1:FE:DD
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       2A51A3CC33980F6687D5B9B4FC63C819C8BA0460
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e32342e3234382e302f32312d3234203d3e203532333831.roa
Signing time:             Thu 27 Mar 2025 13:13:01 +0000
ROA not before:           Thu 27 Mar 2025 13:08:01 +0000
ROA not after:            Thu 26 Mar 2026 13:13:01 +0000
asID:                     52381
IP address blocks:        200.24.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:51:a3:cc:33:98:0f:66:87:d5:b9:b4:fc:63:c8:19:c8:ba:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Mar 27 13:08:01 2025 GMT
            Not After : Mar 26 13:13:01 2026 GMT
        Subject: CN=2D46169FD84EC61F9CE01348C8DF473E78A1FEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:a6:f2:55:6c:81:d2:fd:27:f1:ed:0f:f7:
                    cc:60:db:0a:43:83:6b:e4:26:c9:df:5d:d9:d8:60:
                    97:aa:85:b2:74:c0:19:96:b2:01:c4:ab:da:76:e7:
                    e0:38:7c:92:cd:1f:43:94:12:61:3b:4e:b2:db:89:
                    7c:89:80:ea:4e:3f:db:d3:34:25:54:ca:fe:0f:a6:
                    b4:8b:33:54:b9:77:6d:7b:3a:64:f4:35:f2:82:7c:
                    fd:12:78:48:c6:0b:4c:64:b3:7f:11:54:e2:6a:1b:
                    f6:c3:da:4f:da:ab:d7:a1:2e:41:df:fb:c4:58:89:
                    16:8e:94:3d:95:c0:1b:a3:ce:b4:e5:91:f0:7b:d4:
                    a4:93:aa:6a:89:d2:c5:2f:05:fa:2d:78:86:e1:8d:
                    6c:25:e8:be:14:20:e4:bc:04:29:56:ba:0d:77:b2:
                    0e:10:06:4a:a2:5a:89:6d:78:a4:ec:2f:ad:10:38:
                    88:5a:2e:80:c0:89:81:73:07:2d:e1:2d:ce:bf:a9:
                    d5:6f:1f:a6:87:95:17:b9:fa:c4:b8:8b:5d:85:90:
                    bd:7a:17:25:09:23:81:37:82:42:fe:bd:c5:d6:e5:
                    4d:29:ae:f8:e6:2c:3d:a5:36:90:bb:45:e0:1e:98:
                    de:44:69:1b:2c:0f:12:75:3d:b9:58:67:32:4a:87:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:16:9F:D8:4E:C6:1F:9C:E0:13:48:C8:DF:47:3E:78:A1:FE:DD
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e32342e3234382e302f32312d3234203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:2f:8f:49:b7:a1:fa:8a:da:d8:66:bd:07:84:a5:8e:a3:
         bd:b4:6f:7f:a2:30:bb:99:f7:e7:35:76:7b:95:ba:17:c5:06:
         c8:c9:b6:a8:83:27:5c:c2:98:1f:a1:21:96:60:67:9f:52:70:
         c3:da:67:c8:00:71:f5:84:b3:89:6a:8d:4a:68:db:94:a0:39:
         d6:4b:26:f1:b8:a9:63:b7:83:36:85:0f:c3:3c:5f:8c:c7:4c:
         bd:1d:34:db:63:6d:ab:04:44:97:68:eb:f7:92:21:1f:7a:76:
         f5:49:e7:af:cd:e3:c3:3d:92:74:16:36:ef:8c:70:29:3c:e4:
         6a:45:e6:0b:b6:29:7e:03:e1:88:8f:d4:83:fa:c2:0d:62:d0:
         a2:87:d0:67:76:e3:e2:e2:27:23:fc:57:1e:02:76:d6:97:3f:
         6c:af:fe:bf:e3:3b:0c:07:0d:ca:c5:48:64:50:6d:60:6d:ea:
         c0:ad:97:7b:63:c2:52:cf:2b:75:32:8f:a7:2b:23:11:0e:bb:
         f4:6b:7a:49:ad:67:6f:3d:ae:54:7d:1d:c4:8e:6b:09:78:e8:
         3b:e3:93:c3:9a:39:4b:32:e4:e1:34:3c:55:85:1f:78:50:cb:
         2f:36:36:20:af:d5:d3:75:03:4a:3b:3a:fd:29:ec:37:69:d1:
         4b:5c:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:07 2025 by rpki-client