Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e37312e3132342e302f32322d3232203d3e20323633383231.roa
File:                     3230302e37312e3132342e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier:          VwExklf/Y/jBimNsO3s8rbqfa69GPVu0bSqAln14JAY=
Subject key identifier:   0A:34:A4:D2:C9:02:C5:0F:0B:3E:49:46:98:63:6E:5F:8F:A5:1B:9D
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       762DB7407762EB1756ADCDA865C0DB4254CB348C
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e37312e3132342e302f32322d3232203d3e20323633383231.roa
Signing time:             Tue 04 Feb 2025 18:39:17 +0000
ROA not before:           Tue 04 Feb 2025 18:34:17 +0000
ROA not after:            Tue 03 Feb 2026 18:39:17 +0000
asID:                     263821
IP address blocks:        200.71.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2d:b7:40:77:62:eb:17:56:ad:cd:a8:65:c0:db:42:54:cb:34:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Feb  4 18:34:17 2025 GMT
            Not After : Feb  3 18:39:17 2026 GMT
        Subject: CN=0A34A4D2C902C50F0B3E494698636E5F8FA51B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:00:f6:b5:96:3d:88:3b:cb:30:0b:02:70:
                    02:d9:86:7f:50:c2:99:c2:0e:b4:c3:b8:f8:a4:10:
                    de:01:a1:51:6b:7c:e3:ec:17:68:4c:d2:85:cd:bc:
                    2f:7d:d8:4d:1d:3d:a0:53:84:dc:cc:ea:e6:23:26:
                    d4:5f:fa:05:39:31:fc:fa:25:ef:fa:a1:95:4f:af:
                    c4:92:ad:6c:0c:98:53:21:9d:5e:a9:8a:60:a8:07:
                    fd:92:d0:44:4a:2a:47:47:3a:13:14:17:07:4e:be:
                    a6:18:70:cc:e2:10:70:25:42:52:50:af:99:76:1f:
                    91:44:d3:4f:e5:98:df:38:59:13:02:50:ca:84:42:
                    8f:dd:21:15:e7:51:7c:1b:5b:32:24:d1:44:3d:d2:
                    49:44:f7:c6:48:ae:62:fa:8f:eb:db:ea:09:00:9d:
                    0d:2a:2b:6b:b6:3f:49:68:f1:36:b2:79:d1:76:ca:
                    f4:fa:56:05:81:3b:70:71:d7:4f:78:d3:0e:79:e7:
                    4a:39:1d:1b:9a:19:4b:80:55:1c:0c:54:5a:da:af:
                    02:36:b1:00:71:27:f4:68:ce:7a:10:32:75:c5:4a:
                    87:f2:97:b0:ab:22:e4:67:81:a0:fb:79:18:ab:b2:
                    0f:d8:f2:b1:c2:49:d0:92:a1:2e:3a:27:e9:11:b2:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:A4:D2:C9:02:C5:0F:0B:3E:49:46:98:63:6E:5F:8F:A5:1B:9D
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e37312e3132342e302f32322d3232203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:aa:c2:84:83:6a:02:e3:b1:a4:89:62:47:2c:1c:b3:cb:d1:
         22:3e:c8:a5:a6:70:a1:53:ac:63:e7:1d:6d:01:12:54:45:de:
         6a:58:a1:ec:ed:22:1f:fb:9e:51:d4:ce:ff:a7:0a:07:a1:25:
         c9:ee:6d:53:40:2d:31:1b:ed:2a:e5:f1:ea:7e:80:5a:7e:0f:
         4c:71:1d:e3:f7:62:6d:8a:c8:a1:f8:b4:c5:a1:e2:09:76:12:
         80:68:2c:0e:12:72:88:75:1b:dc:0c:0f:1b:b0:22:18:3c:fb:
         34:fb:15:a1:1c:72:77:b2:cd:a3:38:01:bf:60:f3:04:62:cd:
         a6:2b:69:86:a8:69:82:2e:4d:86:87:bb:67:00:8d:e4:98:07:
         86:ad:6c:87:0f:4d:cf:69:94:53:ef:2a:bc:a1:45:ef:9e:2f:
         54:ff:7e:9a:86:22:e6:20:98:ef:4f:ef:fe:f4:c5:9b:57:87:
         fc:c0:41:ca:3e:eb:21:c0:98:37:d2:f7:73:80:23:cf:86:c8:
         40:37:04:6c:d6:c0:83:50:2c:c2:7f:d6:aa:b5:2b:2f:42:9d:
         b5:5c:2d:d4:3d:6f:2d:2c:0f:e7:1f:2a:f9:6c:36:63:62:83:
         8e:f9:0a:57:a2:7f:25:ca:5c:98:bb:ed:e5:c7:38:20:c1:60:
         c1:45:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:55 2025 by rpki-client