Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/3230302e362e39362e302f31392d3234203d3e203237363539.roa
File:                     3230302e362e39362e302f31392d3234203d3e203237363539.roa (raw, json)
Hash identifier:          RRnbUS0Qe88PbJLhNZN42JAlFKTwGrpqz7KIkIfXCAo=
Subject key identifier:   31:C2:55:25:C2:9A:6E:5C:37:BC:5E:8D:61:29:F3:66:D0:7E:B6:D0
Certificate issuer:       /CN=8D2583CCB91894057397D5D0034AC586BBE52555
Certificate serial:       7D56FF00528B255EB7B3F58AD313A221F941F59C
Authority key identifier: 8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/3230302e362e39362e302f31392d3234203d3e203237363539.roa
Signing time:             Tue 04 Feb 2025 14:35:00 +0000
ROA not before:           Tue 04 Feb 2025 14:30:00 +0000
ROA not after:            Tue 03 Feb 2026 14:35:00 +0000
asID:                     27659
IP address blocks:        200.6.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:ff:00:52:8b:25:5e:b7:b3:f5:8a:d3:13:a2:21:f9:41:f5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2583CCB91894057397D5D0034AC586BBE52555
        Validity
            Not Before: Feb  4 14:30:00 2025 GMT
            Not After : Feb  3 14:35:00 2026 GMT
        Subject: CN=31C25525C29A6E5C37BC5E8D6129F366D07EB6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:6a:23:9f:44:47:df:f7:5f:92:b5:57:98:
                    bb:56:cc:95:2b:58:60:3c:ff:91:d3:a0:f4:aa:8b:
                    77:5f:6b:1e:0c:16:c0:9e:00:b7:65:e3:8e:b7:38:
                    bb:73:17:d3:20:fb:f7:bd:33:84:f2:3f:5a:32:3a:
                    e8:ea:b3:74:83:c9:11:cf:f0:ff:4a:b5:62:81:73:
                    96:01:c0:ce:07:b6:22:6b:6d:e3:94:3a:ff:ee:82:
                    34:fa:bc:b8:47:65:b3:bb:2d:ba:7f:cc:7e:62:8f:
                    52:e9:61:83:34:05:96:b0:e6:eb:a5:24:44:e7:e5:
                    1e:1b:c6:72:41:25:52:84:66:96:0d:23:1c:4c:02:
                    2d:9e:f3:f3:2a:3f:2c:4e:11:c9:3a:af:c8:dd:c7:
                    14:30:bd:bf:3c:53:63:5e:18:52:8d:4f:52:b8:63:
                    ab:cf:24:66:ec:6e:0c:0e:67:ac:8c:55:b3:64:d5:
                    aa:e6:e6:74:64:17:e9:9c:28:e0:ce:29:74:94:7b:
                    f4:21:c4:ca:31:c3:41:85:fe:3d:d1:ec:70:84:f3:
                    9d:8d:3e:17:8b:65:e0:f4:12:c1:c1:48:ea:68:2e:
                    96:bb:af:18:18:09:dd:c4:c5:6c:e1:72:cc:c6:fe:
                    71:d3:8f:20:fc:30:9b:0b:a1:88:9c:e3:f9:37:b5:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C2:55:25:C2:9A:6E:5C:37:BC:5E:8D:61:29:F3:66:D0:7E:B6:D0
            X509v3 Authority Key Identifier:
                keyid:8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/3230302e362e39362e302f31392d3234203d3e203237363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:25:25:8d:c5:59:2a:c7:54:8b:56:2b:50:33:ad:ea:85:ba:
         3d:4c:98:57:98:3a:79:13:b5:4d:ac:f6:e1:f5:6e:3c:9d:96:
         80:2a:2f:f7:f2:4c:a6:53:b8:86:7b:60:a7:4f:cf:5f:76:af:
         bd:63:90:dc:99:4a:b0:16:41:fe:5f:21:fe:b6:17:b7:7b:da:
         ac:5d:61:cf:78:a7:ad:ff:88:27:93:1d:0f:aa:3e:f3:0e:c0:
         9e:e7:ad:dd:c8:58:40:06:b3:ed:88:ce:c3:91:17:af:c6:09:
         74:27:ac:fc:64:02:9d:60:d3:99:92:48:35:fd:3d:a0:56:65:
         b1:af:81:57:8d:36:a0:1e:7b:f1:59:df:13:5e:18:dd:a4:3a:
         5c:76:1a:f8:d2:b7:bb:42:91:89:60:90:c9:8f:1f:0b:c4:ce:
         c7:f7:0f:27:37:0d:f3:a2:a9:e3:ab:85:69:e6:fb:12:9b:d4:
         3f:b8:60:4d:26:f0:79:33:7a:8b:ac:1e:eb:55:86:4a:87:66:
         bc:75:16:b2:40:c0:5b:c3:ae:d4:f0:ea:19:c6:5f:0f:b6:f3:
         77:94:3d:80:dd:e3:93:f5:13:67:31:ae:4f:8a:08:82:31:9f:
         66:48:cd:2d:4a:09:f1:92:ff:d8:3e:3d:a8:70:fc:13:c3:5c:
         10:86:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:15 2025 by rpki-client