Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa
File:                     3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa (raw, json)
Hash identifier:          kN0D7f8n2oTrLCsZsNoU5XgrP3alZxpM1W8zHGvabKk=
Subject key identifier:   C2:98:1A:3B:2A:EC:2F:EC:FE:75:66:80:DF:66:96:04:18:9C:03:9E
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       37C03773170309ED62988B6458146E68D9DFC1A9
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:46 +0000
ROA not before:           Tue 04 Feb 2025 18:02:46 +0000
ROA not after:            Tue 03 Feb 2026 18:07:46 +0000
asID:                     28114
IP address blocks:        200.114.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:37:73:17:03:09:ed:62:98:8b:64:58:14:6e:68:d9:df:c1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:46 2025 GMT
            Not After : Feb  3 18:07:46 2026 GMT
        Subject: CN=C2981A3B2AEC2FECFE756680DF669604189C039E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:48:ea:6e:eb:41:4b:66:a0:d0:b7:a5:3a:
                    6a:ae:7a:2c:ae:c3:a9:bc:0d:47:cb:9e:a0:bf:cf:
                    ff:a2:c3:bd:62:71:07:66:20:13:e8:06:59:fd:44:
                    5e:e1:ce:db:77:a3:d0:36:68:60:31:ce:75:34:9d:
                    9d:e8:83:81:d5:99:73:78:91:78:c0:dd:0e:71:d2:
                    bf:bc:c3:24:7d:31:c6:c9:19:79:df:5d:9b:0f:3b:
                    86:24:33:56:7a:54:ea:fc:96:dc:db:a0:a1:19:c4:
                    df:f8:c5:e3:b2:a0:f2:df:06:c1:d8:f0:29:cf:ec:
                    ce:06:b2:e8:64:6e:7d:0c:8d:3a:78:73:6c:5c:cd:
                    fc:b6:07:d5:58:ec:a4:f1:da:3c:42:1b:fb:7e:c7:
                    f5:9a:cb:34:8b:e2:b6:31:ab:6e:de:15:69:87:74:
                    d9:12:e8:5b:43:c5:b3:dd:56:77:3c:ce:be:3e:a2:
                    99:78:34:3f:79:b8:85:ee:f9:af:c2:15:58:26:1a:
                    75:ea:2c:dc:a1:fa:00:f3:df:8d:54:ab:f8:28:5d:
                    f3:fc:78:ee:b3:b2:1b:39:ec:b1:e4:81:0b:71:e2:
                    7e:78:4d:d2:b8:a4:30:8b:d5:6d:cb:a3:00:ae:cf:
                    92:83:c3:cf:de:41:bb:da:87:3a:ef:d6:24:73:cb:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:1A:3B:2A:EC:2F:EC:FE:75:66:80:DF:66:96:04:18:9C:03:9E
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:8e:2f:78:c8:d7:f5:db:6e:57:a3:5e:b2:b6:ee:f3:53:
         da:2a:59:ed:17:28:5c:19:14:75:22:0e:b1:5c:e2:39:8c:8f:
         d7:c6:1b:9c:5a:47:30:26:7d:bb:bc:d9:2b:a2:5d:b7:83:bd:
         6a:b0:c7:b7:eb:f4:2d:40:d3:db:52:17:e7:14:74:3a:b2:e3:
         e7:3d:41:8a:be:78:59:9b:7d:fa:91:d1:e3:29:b7:85:c8:11:
         e0:f2:02:4a:2a:8f:c6:1e:16:1c:a0:58:93:f3:91:8a:cf:cf:
         53:7b:1d:00:0c:b3:b7:61:f9:62:94:7d:2d:21:a5:75:14:c0:
         92:64:1f:9f:71:ec:94:0d:4f:2d:f8:b4:34:1e:ce:c2:18:6a:
         dd:18:95:39:b7:74:b4:cf:c8:23:b4:ad:66:b3:36:7c:d2:2f:
         92:e2:a4:da:64:26:35:93:2e:a9:5e:9b:64:39:c0:05:b1:1b:
         c7:99:1e:11:10:e6:a0:08:f5:76:ad:df:1f:0e:ab:f5:07:05:
         56:7b:6d:fa:c3:77:36:fe:98:0f:0c:d1:61:1d:b8:d4:da:07:
         f3:05:40:a0:b8:38:4b:8b:46:25:1c:26:d0:57:9f:f9:ce:7a:
         e7:8a:ab:ab:5f:e8:6c:32:dc:a2:41:98:7d:e2:76:ca:ff:b1:
         f8:72:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:49 2025 by rpki-client