Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
File:                     3230302e36312e3234382e302f32322d3234203d3e203532343234.roa (raw, json)
Hash identifier:          MfUUHxibM9ki2v8XPdWQTJLDL+PO3fQ0ZWbDmCKrrLc=
Subject key identifier:   BB:10:77:D4:C3:C1:DC:EC:5F:B9:D0:5D:B5:CB:41:9B:D3:00:10:D9
Certificate issuer:       /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial:       39B8DAAA26558461C0855C984DC256C6DD11F57C
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
Signing time:             Tue 04 Feb 2025 18:03:13 +0000
ROA not before:           Tue 04 Feb 2025 17:58:13 +0000
ROA not after:            Tue 03 Feb 2026 18:03:13 +0000
asID:                     52424
IP address blocks:        200.61.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:da:aa:26:55:84:61:c0:85:5c:98:4d:c2:56:c6:dd:11:f5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
        Validity
            Not Before: Feb  4 17:58:13 2025 GMT
            Not After : Feb  3 18:03:13 2026 GMT
        Subject: CN=BB1077D4C3C1DCEC5FB9D05DB5CB419BD30010D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:6e:61:5d:3c:09:be:b6:eb:a7:62:d6:1a:
                    1d:17:88:9e:12:2d:39:af:7a:8d:44:31:c7:af:7c:
                    e0:c4:2b:50:f6:43:c8:dc:90:2a:3e:47:5a:55:a3:
                    fe:a5:b5:1e:77:ea:94:ed:b1:e0:ca:e2:98:12:f6:
                    af:69:3b:d3:be:20:68:b4:8a:07:5b:b9:7f:32:7c:
                    b5:10:3f:3d:f6:25:1f:0f:f7:c6:32:6c:b4:03:fa:
                    2a:1b:8a:cc:7a:51:fb:f6:36:a4:2b:a9:07:97:d9:
                    54:80:58:8e:eb:22:a2:8f:7c:bb:65:bf:a8:a9:ea:
                    6d:20:ac:24:b3:de:f6:6c:28:c5:a8:f2:df:0c:53:
                    35:c9:1a:17:60:77:24:01:ca:9c:46:bb:8b:7b:28:
                    48:1c:ee:60:f9:5b:6c:6d:a8:e5:25:fd:ad:74:6e:
                    57:85:9c:32:b5:8e:bb:23:92:02:2e:3b:ec:02:53:
                    00:60:4e:bc:d3:c7:2a:3f:3d:ea:f4:3e:6f:eb:67:
                    36:38:a0:4a:ca:04:48:5a:3c:17:82:d8:95:b9:b6:
                    51:a2:df:ab:19:e1:73:05:7a:50:be:f4:36:00:63:
                    d6:9f:c8:c5:6b:62:7e:00:91:21:9c:39:da:f5:af:
                    5d:da:09:bd:16:6f:41:55:f3:da:c6:2c:7f:5f:16:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:77:D4:C3:C1:DC:EC:5F:B9:D0:5D:B5:CB:41:9B:D3:00:10:D9
            X509v3 Authority Key Identifier:
                keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:26:d7:24:ae:85:da:17:53:b2:88:13:e3:b7:11:64:ad:0e:
         97:d5:60:a6:27:0f:c7:35:a9:b1:d3:37:0c:92:6a:ff:fe:63:
         4e:1f:65:98:fc:53:8c:e9:80:ad:26:7a:7e:a8:5c:1e:5c:d3:
         68:35:cb:24:c4:48:1e:9e:8f:59:ea:67:cf:5c:e4:77:70:66:
         94:a5:d0:1f:a5:36:47:03:27:9b:60:b6:fd:21:b6:3c:5d:ef:
         06:a3:a4:9f:17:fe:27:f6:0f:7b:b4:c0:92:e1:5a:dd:64:29:
         6c:8a:6e:85:60:ba:a0:6d:f4:88:73:92:e0:d8:05:7c:cf:e0:
         69:a4:b5:69:6a:d4:d5:52:9d:4c:6d:07:f3:aa:98:13:b9:6f:
         89:0f:27:af:47:d3:cf:21:f6:35:fd:9f:e7:46:13:55:5b:bd:
         c5:48:bc:c9:0b:fb:d1:d8:25:63:be:d3:79:b3:90:a2:f4:e7:
         4c:cd:82:69:59:98:85:cd:53:04:56:56:81:40:4b:02:ae:95:
         6e:f3:9a:90:83:81:34:c1:42:8b:d7:cc:3a:0b:4e:b3:eb:05:
         eb:14:65:9e:78:26:26:ac:8c:2a:d5:2f:41:c1:16:ed:1b:1e:
         5e:8c:49:52:8f:59:ab:eb:ab:94:c2:0d:2f:02:51:d5:15:9e:
         46:02:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:05 2025 by rpki-client