Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230342e302f32332d3233203d3e20313937393931.roa
File:                     3230302e3131322e3230342e302f32332d3233203d3e20313937393931.roa (raw, json)
Hash identifier:          PmGC5AaQUoz5K+ImRX/THtU8StXuGwNHeE+F8T8PhZ8=
Subject key identifier:   45:38:35:F1:BA:24:93:D9:AE:86:28:48:CD:C6:04:DA:B7:B3:D3:2B
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       5A5441C65341B9235AC5C954E5696485C584794B
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230342e302f32332d3233203d3e20313937393931.roa
Signing time:             Tue 04 Feb 2025 18:00:56 +0000
ROA not before:           Tue 04 Feb 2025 17:55:56 +0000
ROA not after:            Tue 03 Feb 2026 18:00:56 +0000
asID:                     197991
IP address blocks:        200.112.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 02:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:54:41:c6:53:41:b9:23:5a:c5:c9:54:e5:69:64:85:c5:84:79:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Feb  4 17:55:56 2025 GMT
            Not After : Feb  3 18:00:56 2026 GMT
        Subject: CN=453835F1BA2493D9AE862848CDC604DAB7B3D32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:6b:3c:0f:9d:a2:b8:4c:d7:6d:8f:dc:f7:
                    85:fe:0a:40:bc:87:9d:ed:42:6d:f1:d2:57:6e:3a:
                    7d:c2:8c:d3:62:db:a5:d4:8c:62:ac:2f:1a:d1:6a:
                    de:a0:6b:f7:be:a8:2f:1d:cb:6c:b5:de:ba:02:e0:
                    14:3d:74:a5:7c:76:de:8b:ac:55:a9:cb:0a:a0:27:
                    7e:d2:56:f6:8e:ad:d8:8a:db:d2:e5:e0:9f:6c:05:
                    05:de:da:93:da:fb:f0:4e:bc:62:b0:41:5e:06:e5:
                    45:05:d9:e1:27:1c:cd:2f:b1:2e:b2:b6:8a:89:83:
                    82:0f:24:ee:8d:1f:0c:00:29:99:ab:5d:14:db:92:
                    25:8d:6b:93:5a:3e:e7:ae:c8:97:5c:55:c9:cb:69:
                    1e:7b:b9:58:11:7a:97:8f:66:b0:34:88:51:f7:5b:
                    8f:95:5f:da:21:f7:36:df:2d:6c:4d:72:c1:dd:4f:
                    18:bd:c0:e2:6c:41:6a:78:6c:73:5f:28:0f:c8:9e:
                    e4:8a:11:d0:a0:00:1b:23:45:3f:50:2f:5c:a4:f8:
                    b4:88:81:a0:e0:fd:c3:76:05:0d:ff:c6:99:df:a1:
                    4b:66:46:36:15:64:55:d4:d1:6e:2e:31:dc:4b:c0:
                    be:92:a1:ca:11:a1:41:6c:d3:a0:53:28:72:2e:ba:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:35:F1:BA:24:93:D9:AE:86:28:48:CD:C6:04:DA:B7:B3:D3:2B
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230342e302f32332d3233203d3e20313937393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:96:2f:46:45:c8:ea:88:67:24:92:37:11:8c:44:dc:c0:19:
         4a:ab:df:77:09:30:02:b0:a3:79:72:e9:41:ec:39:78:65:c6:
         22:f3:d2:96:20:f7:9f:aa:06:6d:3e:51:3d:ed:54:7c:e3:11:
         1b:02:ab:d6:2f:62:94:c8:44:61:74:4b:b1:a6:f6:da:58:07:
         18:99:60:c2:42:55:6c:68:45:6d:e6:14:cd:d6:eb:0c:0c:93:
         27:cb:0b:1b:f6:db:d0:8d:98:7b:f3:2f:e5:82:aa:b5:8f:46:
         54:ae:cc:2c:5b:f4:fa:78:4c:ab:db:af:7d:6d:6d:e7:07:90:
         a0:85:08:ea:be:d6:02:6f:2e:fa:a7:02:0c:b6:aa:61:95:89:
         90:a2:05:d8:34:48:11:26:d2:f2:71:21:bb:8f:3e:e5:c6:be:
         38:84:16:97:04:a8:54:83:1d:f7:9a:4f:5f:a7:35:d8:a2:b9:
         db:e5:36:ec:99:ee:38:94:38:bc:f3:69:0e:6b:9d:95:b3:12:
         12:15:14:80:c4:bd:44:84:11:7a:45:21:c8:fa:06:eb:32:f8:
         39:ff:51:39:a1:dc:a9:04:25:e2:c5:a5:4f:04:9f:67:40:c7:
         d3:83:0e:27:18:ae:1c:e8:4a:62:07:1c:69:92:11:a0:8a:d9:
         0c:0e:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:14:17 2025 by rpki-client