Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          1M6ybAAAT/xgnl6C3odBLn5jNis1QW9uCftSdqMPHT0=
Subject key identifier:   29:DF:D9:64:17:15:E8:F8:E0:9C:AE:7B:F2:64:17:6A:B7:02:4D:02
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       1B811AAE8182489D129B40A00867AE7049F30F34
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 14:55:01 +0000
ROA not before:           Mon 16 Dec 2024 14:50:01 +0000
ROA not after:            Mon 15 Dec 2025 14:55:01 +0000
asID:                     262249
IP address blocks:        200.108.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 17:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:81:1a:ae:81:82:48:9d:12:9b:40:a0:08:67:ae:70:49:f3:0f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 14:50:01 2024 GMT
            Not After : Dec 15 14:55:01 2025 GMT
        Subject: CN=29DFD9641715E8F8E09CAE7BF264176AB7024D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:6b:64:61:05:f4:73:b4:51:ce:cb:a4:e7:
                    80:68:36:f5:56:79:49:31:63:ba:87:4f:b1:68:14:
                    ac:4e:b9:c9:01:7d:5c:56:40:9d:c8:66:eb:4d:f7:
                    32:98:14:6d:01:fd:77:0c:e9:e0:4b:20:4a:b1:23:
                    75:a4:fe:76:b1:23:95:6e:7c:00:25:58:40:86:c8:
                    95:03:a6:d0:eb:e5:c0:1c:1e:3a:7e:c4:6b:b8:6f:
                    1f:bf:5f:47:ff:0a:73:ba:28:9b:c6:cd:ad:e8:9b:
                    a1:7a:6d:dc:ef:73:c3:76:4d:27:27:cd:89:e7:70:
                    45:0b:b1:a7:03:21:a4:dd:70:11:62:1c:4c:9c:04:
                    f5:4a:a5:8a:df:3b:0c:75:36:c9:16:32:c6:00:f1:
                    5a:28:e7:c0:56:74:71:cd:10:49:78:25:42:9c:e3:
                    43:0b:2b:f0:af:d5:92:c9:ff:bf:41:8b:71:15:92:
                    64:ad:b9:b3:47:30:01:aa:7e:37:14:bd:c4:4e:21:
                    53:d7:eb:77:db:32:ff:4e:80:07:ab:f3:2a:fc:26:
                    84:ec:d8:db:cf:14:b4:21:69:67:b8:4d:ee:e2:c6:
                    2a:2c:50:f2:b3:2d:a6:df:2f:08:1e:98:b1:0f:85:
                    40:a7:4b:2a:0b:56:19:70:88:97:a6:8a:ff:1b:fd:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:D9:64:17:15:E8:F8:E0:9C:AE:7B:F2:64:17:6A:B7:02:4D:02
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:7a:54:9c:8d:6f:41:14:9c:d6:6e:15:55:b9:19:8f:2e:
         4e:6f:36:70:70:b5:11:f4:f9:5c:d4:a0:3c:91:67:41:15:94:
         bc:0e:7d:b8:d7:4a:e6:ec:42:a7:a1:11:6b:2c:19:e0:8d:5f:
         bd:c4:b4:7d:ca:69:23:f0:e7:6d:bb:9b:b4:68:56:13:8a:17:
         f5:0d:cd:f6:7c:15:8e:2a:60:21:da:f5:df:64:89:11:b7:d6:
         d1:85:31:89:bd:92:c3:92:8c:86:74:3d:a2:c0:3f:24:09:b6:
         6b:0e:eb:11:1a:85:5c:4b:29:84:07:43:77:10:32:90:50:34:
         85:ad:08:35:45:92:1f:f4:da:7d:d1:58:57:e4:a8:9a:8c:72:
         45:a8:70:0d:9e:dd:51:0f:f2:58:17:aa:56:6a:a4:a4:bf:17:
         27:e6:e2:28:57:b4:42:96:19:b7:85:9e:fb:85:15:1b:05:c8:
         de:78:6d:87:ec:ff:d2:61:d4:fe:fe:fc:75:ec:b6:c5:5d:3b:
         81:b0:c3:35:e1:f1:34:d3:4c:8c:4a:fa:1c:f4:15:57:9f:62:
         e4:6a:14:bf:c5:4e:e5:3e:55:0b:e8:6a:50:ea:c0:6d:bf:6c:
         13:92:cb:a2:4e:42:b8:d1:08:02:5d:27:dd:8a:28:34:9f:24:
         74:86:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:55:47 2025 by rpki-client