Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
File:                     3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          TRjw/px9sMFC5fvP/JyQVO49iPVNEHq+DVC+ZU+Zu3M=
Subject key identifier:   22:5A:31:96:46:0D:E6:DE:84:AA:FA:AF:1E:EA:2D:CF:58:5B:8F:1D
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       6A75539ABF25A5055A68B8B9888AF10CAFC1C218
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
Signing time:             Tue 04 Feb 2025 18:18:21 +0000
ROA not before:           Tue 04 Feb 2025 18:13:21 +0000
ROA not after:            Tue 03 Feb 2026 18:18:21 +0000
asID:                     6461
IP address blocks:        200.123.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:75:53:9a:bf:25:a5:05:5a:68:b8:b9:88:8a:f1:0c:af:c1:c2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Feb  4 18:13:21 2025 GMT
            Not After : Feb  3 18:18:21 2026 GMT
        Subject: CN=225A3196460DE6DE84AAFAAF1EEA2DCF585B8F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:94:25:5a:37:0a:ab:86:2d:7b:23:3b:c6:
                    57:61:2a:2d:0a:a3:85:54:e4:f0:8a:d1:a9:0d:7d:
                    5f:6d:4e:4a:91:24:b3:10:a5:35:23:75:2b:61:db:
                    b7:8e:69:17:f0:0d:6f:f2:ba:b0:76:ff:f7:34:c6:
                    8d:42:21:8b:00:d5:95:5e:1e:ac:96:2b:d3:9c:7e:
                    50:70:01:93:03:a6:ec:3f:8a:49:d5:50:97:94:3e:
                    02:16:38:8b:e3:d4:66:31:f3:51:67:a7:f5:68:57:
                    77:d1:bd:b3:0c:3e:ad:7d:3d:ce:99:a6:f6:2a:ae:
                    e4:d0:6d:30:c5:37:be:f9:50:25:f3:3c:5e:8a:14:
                    34:9d:9c:fd:51:2e:93:08:a8:3b:3d:eb:31:78:3b:
                    52:13:31:34:da:32:a7:43:42:a2:a7:d0:27:b1:16:
                    3f:57:a0:9d:19:50:f8:21:df:20:d8:aa:19:fb:b7:
                    53:01:75:f4:89:4a:08:78:74:fc:bc:d2:6e:6f:76:
                    01:e7:49:69:84:ef:54:12:f5:13:2a:f0:1f:b0:6e:
                    c7:b4:86:02:dc:01:7d:f4:d7:e7:17:5c:60:e5:83:
                    33:f2:0f:5b:5c:9e:ab:2c:85:55:94:7b:10:6a:6a:
                    2b:e6:70:13:13:c7:06:ae:ad:ea:cb:90:3c:58:13:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:31:96:46:0D:E6:DE:84:AA:FA:AF:1E:EA:2D:CF:58:5B:8F:1D
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:10:fa:de:1e:92:25:4d:ef:32:16:b6:6a:26:99:dc:e7:35:
         83:55:12:1e:1d:ef:d4:53:c1:35:6c:ed:d5:58:f4:bd:13:80:
         af:f3:de:94:0c:d7:78:20:40:87:0f:dd:ec:a9:09:5c:de:8a:
         bc:4a:d1:7e:e1:ff:38:4f:fb:60:6c:db:8c:7c:02:8d:1b:2f:
         16:99:70:3e:d7:ac:31:48:13:f4:66:c9:48:02:11:89:91:13:
         96:04:96:48:b0:46:54:bb:4c:ee:08:0e:76:76:3f:49:59:fa:
         56:d2:be:73:2b:f4:b3:6a:49:31:22:bc:71:aa:df:0e:0f:4e:
         2e:53:3a:76:79:00:d0:47:5c:00:08:7a:d6:b5:7b:17:b6:d9:
         0f:27:37:36:02:c4:95:b2:db:8a:53:76:f9:60:8f:e6:9f:4a:
         ac:0e:96:91:14:5b:9b:b4:03:00:11:46:a5:9c:d9:6c:30:8e:
         2c:94:6f:09:f9:45:65:97:3c:4c:06:b6:30:ac:71:12:74:88:
         28:ab:0c:b3:89:fc:52:bb:1b:ad:aa:21:d1:b7:28:5a:48:e0:
         21:58:28:de:3a:01:16:e5:ec:b3:29:c0:2b:30:f8:e2:44:12:
         b9:68:8d:fa:68:b5:26:6f:b1:e7:f0:89:55:cc:06:1c:bf:ae:
         d8:84:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:30 2025 by rpki-client