Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/3230302e31302e3134302e302f32342d3235203d3e203237383835.roa
File:                     3230302e31302e3134302e302f32342d3235203d3e203237383835.roa (raw, json)
Hash identifier:          v+v6xvdSfwowd+MtMHkUsyHSrRzjAK2NFsar174C8jA=
Subject key identifier:   A0:68:E8:AE:E4:56:4F:EA:8F:A5:4F:45:A7:1C:5B:9B:E6:65:69:6D
Certificate issuer:       /CN=F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32
Certificate serial:       534AFF230EA9E1932DA851B0BA51D8BEABE5A267
Authority key identifier: F7:3C:D7:8F:DE:AB:A7:DF:B3:E1:34:73:A6:BF:E1:2B:E9:0D:0B:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/3230302e31302e3134302e302f32342d3235203d3e203237383835.roa
Signing time:             Tue 04 Feb 2025 18:43:48 +0000
ROA not before:           Tue 04 Feb 2025 18:38:48 +0000
ROA not after:            Tue 03 Feb 2026 18:43:48 +0000
asID:                     27885
IP address blocks:        200.10.140.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 07:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4a:ff:23:0e:a9:e1:93:2d:a8:51:b0:ba:51:d8:be:ab:e5:a2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32
        Validity
            Not Before: Feb  4 18:38:48 2025 GMT
            Not After : Feb  3 18:43:48 2026 GMT
        Subject: CN=A068E8AEE4564FEA8FA54F45A71C5B9BE665696D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:d7:47:e1:4a:6d:82:b7:2e:aa:84:fa:ac:
                    20:3c:e3:25:97:1d:65:5e:cd:7c:9f:bf:bf:e0:61:
                    dd:73:5f:cd:6d:2e:b4:38:de:ff:ca:46:28:cb:55:
                    dc:65:49:61:34:d3:cc:6c:9b:eb:16:ec:d9:dd:d2:
                    6d:21:9d:55:25:e6:72:cd:46:0a:39:67:c5:af:6d:
                    ed:03:45:ba:db:ab:e4:e5:32:9d:b1:eb:35:d2:4f:
                    30:a3:e4:39:6f:b0:8d:e7:bd:c7:c3:8a:2a:7a:85:
                    59:9c:ab:5a:81:09:db:ba:c4:0d:e2:23:25:c5:da:
                    3f:24:f3:db:c1:45:d9:4d:38:d2:b7:07:b6:6c:6a:
                    08:d5:94:bc:4c:15:21:6d:2c:a5:d3:5b:39:2a:4c:
                    6f:15:e0:22:56:a6:8a:08:49:32:3f:d9:9f:e1:99:
                    f1:27:78:f0:cf:20:40:25:53:71:62:2c:ad:7d:ea:
                    72:d3:e3:89:dc:8b:dd:ef:9e:ef:0f:a7:42:a9:3d:
                    27:d0:5b:5e:09:d6:eb:46:4f:c4:69:34:4f:4f:f2:
                    5b:3d:00:aa:b0:8e:7c:4e:62:3a:33:07:24:c8:55:
                    d7:ce:52:e9:8d:b0:eb:9e:51:a9:ba:ac:43:f9:d1:
                    42:40:c5:52:d0:72:6c:53:fd:c8:9e:df:be:32:c6:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:E8:AE:E4:56:4F:EA:8F:A5:4F:45:A7:1C:5B:9B:E6:65:69:6D
            X509v3 Authority Key Identifier:
                keyid:F7:3C:D7:8F:DE:AB:A7:DF:B3:E1:34:73:A6:BF:E1:2B:E9:0D:0B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F73CD78FDEABA7DFB3E13473A6BFE12BE90D0B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FF75E830A841F9F41E50CD103FDAA3A286E47B4A0ABE2702252EF84E8109709/0/3230302e31302e3134302e302f32342d3235203d3e203237383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:04:cd:62:7c:68:6f:6e:5e:70:fe:e2:d3:a4:ac:02:fa:
         08:dc:ef:a5:3f:a0:f1:ab:2b:ca:1c:18:67:75:85:a2:44:01:
         fa:d7:a1:03:26:f7:75:60:28:ab:6b:13:4e:b8:c5:60:5c:fd:
         e8:15:bc:d6:22:9c:a8:6a:5a:8f:2b:61:7e:3b:39:fb:57:88:
         6f:c9:22:4f:47:37:b4:15:ee:2c:34:d9:13:d5:82:f4:e6:b1:
         5d:56:6e:80:72:f1:e2:5a:9d:67:90:d8:4c:a7:b0:e7:f6:c8:
         67:6b:30:8c:b1:cb:05:63:51:2a:cb:03:e3:d1:6a:78:28:bd:
         69:05:6d:23:0e:8f:de:43:79:47:70:36:51:22:a9:a4:c0:d6:
         f8:fe:81:e4:3f:7b:c8:be:48:d1:6a:f4:53:e6:a2:8f:15:d3:
         8f:eb:72:18:a2:ae:2b:34:26:ef:8b:47:93:a1:32:60:b2:cb:
         64:89:86:04:52:e3:1b:85:37:77:e6:f0:68:f1:48:be:fc:55:
         dc:0d:4d:ad:5e:d4:8f:69:72:41:82:ab:6e:2f:fe:6a:22:9c:
         0c:7f:a6:34:2d:30:12:04:cd:7b:5d:04:52:b7:07:4b:f9:7f:
         1e:07:0d:3b:25:a2:a8:42:e3:76:f4:d1:55:f7:b9:e5:ad:5c:
         49:1f:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:00 2025 by rpki-client