Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e34382e302f32342d3234203d3e203237373235.roa
File:                     3230302e31342e34382e302f32342d3234203d3e203237373235.roa (raw, json)
Hash identifier:          RYkILQrt9uL1VkNzPCNnNua5hYBJ+kt36ZA9LgqLJss=
Subject key identifier:   7F:F0:66:EA:37:4D:A7:E7:DC:F3:88:60:A4:2E:B2:9B:F8:BA:75:B5
Certificate issuer:       /CN=0853D584282A848F37AB7DF143D8977A037C0B75
Certificate serial:       16340B230C4313B15EC0EAB621C572C1F7387836
Authority key identifier: 08:53:D5:84:28:2A:84:8F:37:AB:7D:F1:43:D8:97:7A:03:7C:0B:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e34382e302f32342d3234203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:03:40 +0000
ROA not before:           Tue 04 Feb 2025 17:58:40 +0000
ROA not after:            Tue 03 Feb 2026 18:03:40 +0000
asID:                     27725
IP address blocks:        200.14.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:34:0b:23:0c:43:13:b1:5e:c0:ea:b6:21:c5:72:c1:f7:38:78:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0853D584282A848F37AB7DF143D8977A037C0B75
        Validity
            Not Before: Feb  4 17:58:40 2025 GMT
            Not After : Feb  3 18:03:40 2026 GMT
        Subject: CN=7FF066EA374DA7E7DCF38860A42EB29BF8BA75B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:25:64:b1:07:1d:54:2c:11:44:ef:66:73:
                    29:15:d8:2a:08:61:7b:61:a2:67:10:9d:fb:bb:c8:
                    3b:4c:79:45:75:4a:58:94:93:6a:e7:94:1b:b0:77:
                    26:e4:f4:9f:76:1c:8a:9a:49:e2:4d:8a:e2:97:48:
                    5e:5a:55:2a:28:90:b6:b1:35:7a:d8:7d:35:c7:f1:
                    78:e9:95:32:ac:36:cb:12:f9:3e:ba:c4:f9:bf:67:
                    d9:3d:4a:7c:b4:4b:b6:77:37:5d:e6:a3:80:1a:45:
                    95:0d:e1:dd:84:11:8e:50:71:c7:1e:94:54:c9:c9:
                    cf:7f:aa:d1:9e:66:56:6b:c0:e4:f2:cb:70:05:61:
                    99:db:02:9c:58:e1:a1:e5:2a:a0:46:a3:f4:41:fa:
                    c8:be:e8:dc:f4:8e:6a:7e:78:35:77:b3:f3:bb:fb:
                    be:ce:51:d8:46:66:60:8d:4b:8c:fd:ec:09:a3:74:
                    58:57:d9:d2:22:d4:81:1b:1d:f3:83:1f:04:48:8d:
                    b6:0f:89:47:d1:3a:2b:c7:ab:fe:8a:23:2e:f1:70:
                    ce:c2:33:c6:e4:af:e0:80:2a:0a:58:8f:3c:b8:dc:
                    74:99:8a:17:82:f5:85:8b:51:9a:67:ae:87:4b:9a:
                    22:4d:a8:a1:56:2b:4b:67:92:11:4e:a4:7b:c0:d1:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:66:EA:37:4D:A7:E7:DC:F3:88:60:A4:2E:B2:9B:F8:BA:75:B5
            X509v3 Authority Key Identifier:
                keyid:08:53:D5:84:28:2A:84:8F:37:AB:7D:F1:43:D8:97:7A:03:7C:0B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e34382e302f32342d3234203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:45:cc:86:15:f1:f1:4f:b7:88:3e:95:86:fb:f7:2c:ba:
         f8:a4:a4:d9:22:30:6d:68:f2:23:7c:5c:0b:1a:59:45:88:71:
         52:b1:0e:9f:b6:1f:40:c0:0b:c7:b0:74:19:5c:65:e0:bd:08:
         e1:dd:e1:fb:c4:1b:ee:eb:f8:e4:a2:ca:08:da:41:56:2a:b7:
         61:7b:fe:d4:c0:57:c5:a9:57:8c:a8:4f:71:d5:1f:5e:7b:7c:
         dc:3d:9f:b0:a7:c8:3c:49:e8:5c:ea:e1:7b:09:02:96:ca:27:
         0b:40:10:ca:1b:9e:83:95:4b:23:da:11:f2:f0:e3:6e:a2:1f:
         02:e2:23:95:09:72:26:6f:0d:b2:b5:3a:c4:e5:75:d2:e5:32:
         9b:a4:5e:1b:14:50:46:2c:8a:b1:fd:1b:ad:7b:43:3e:a1:53:
         ed:b5:d8:66:79:fb:ff:45:73:b8:97:92:83:7e:c1:00:38:4d:
         50:13:a3:4a:5e:5f:0f:2e:c5:b0:fb:33:03:17:3c:73:59:05:
         cb:fd:b4:b4:b8:11:05:33:6f:33:77:38:f5:13:53:b9:b3:fe:
         e4:b8:7b:99:55:b1:13:43:47:3e:a8:41:72:41:2a:df:37:be:
         be:56:71:9f:da:e8:70:fd:6b:d5:5d:81:96:00:c3:55:92:36:
         74:38:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:28 2025 by rpki-client