Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232342e302f32342d3234203d3e203233333833.roa
File:                     3230302e3130362e3232342e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          ZoQPNU6Vl0+SqCu/533KaKTZtBYrXxTf/3OuUv9h4GY=
Subject key identifier:   39:A7:68:D6:77:B0:DB:11:74:83:87:5F:B4:91:28:35:84:2F:51:67
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       6BBD38AB33D73066C45B3B73F211F6CCFD9F251E
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232342e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 20:02:25 +0000
ROA not before:           Tue 04 Feb 2025 19:57:25 +0000
ROA not after:            Tue 03 Feb 2026 20:02:25 +0000
asID:                     23383
IP address blocks:        200.106.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bd:38:ab:33:d7:30:66:c4:5b:3b:73:f2:11:f6:cc:fd:9f:25:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:25 2025 GMT
            Not After : Feb  3 20:02:25 2026 GMT
        Subject: CN=39A768D677B0DB117483875FB4912835842F5167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:dc:37:ab:32:7e:e5:eb:23:5f:97:6c:86:
                    a8:8b:9c:6d:bd:48:d2:3b:dc:c9:87:be:cc:45:d7:
                    bc:4f:e5:39:58:1c:bd:fa:77:a2:8d:0c:a9:0a:54:
                    bb:7f:c4:95:e5:54:6a:07:c6:c5:f4:89:29:8d:48:
                    ba:27:c3:33:50:0f:2d:59:00:9e:1d:02:60:3d:2a:
                    93:77:c2:d6:17:de:63:19:15:e5:01:b2:1e:af:d7:
                    2f:3b:ac:87:92:92:8f:73:29:16:a7:65:6d:af:82:
                    82:5d:ff:d0:16:f9:3c:3b:c0:ef:c4:5b:50:7d:98:
                    83:cd:a4:5b:59:b5:18:c9:dc:24:7c:92:bc:be:70:
                    e8:18:a9:ae:60:db:55:fd:64:61:31:67:81:8a:23:
                    e0:df:4f:c3:79:c3:c6:27:97:44:2c:56:1a:76:03:
                    7b:4a:4b:cf:ef:d5:33:d0:24:44:db:9a:69:15:2b:
                    0b:a7:60:26:c9:47:1a:26:b3:63:9d:5a:c4:2b:12:
                    c2:73:07:29:94:92:d9:43:4c:8f:0a:d6:e3:18:3c:
                    ba:fd:b7:c2:d2:10:4c:46:fc:e0:3a:ab:67:c5:40:
                    65:6a:b1:61:07:ed:e8:6f:2e:57:de:9f:77:45:24:
                    21:e2:cd:0b:03:4f:a2:01:5e:23:ec:8c:06:61:f1:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A7:68:D6:77:B0:DB:11:74:83:87:5F:B4:91:28:35:84:2F:51:67
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232342e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:56:dd:67:28:2c:82:08:36:ad:dc:ae:e0:8b:7c:d8:b3:47:
         33:91:64:23:eb:03:10:11:3b:4e:fe:f8:1f:87:06:9d:a5:89:
         5f:00:76:f9:30:56:74:71:9d:ab:be:66:15:e2:64:dc:41:5f:
         e4:38:ab:d5:c9:b9:25:c9:10:53:1b:21:69:cb:b4:39:f1:24:
         22:b6:68:f5:58:65:4e:3c:9a:2b:c2:ac:1a:5a:c0:2e:c5:61:
         7e:ab:6b:b7:f4:e6:c9:e2:9a:4b:fe:3d:56:62:3a:28:d2:47:
         ea:dd:34:e0:b9:44:dc:0f:25:dd:4c:08:97:85:64:6f:7a:ef:
         d0:91:00:a6:a1:fa:11:c9:0e:3f:ff:7f:5e:30:7c:e9:fc:8c:
         c1:a9:ce:a6:3b:57:4f:7d:fe:c7:56:72:4c:eb:29:3b:22:48:
         fa:1b:57:aa:33:2c:a4:fe:75:58:61:f3:87:39:9f:a6:5d:5f:
         ef:60:53:08:67:2f:d7:f1:97:6f:44:eb:6b:09:9b:d6:c0:f6:
         fb:2f:c7:14:c3:39:49:1e:91:28:58:ea:e4:73:9d:2a:0e:ea:
         ac:f9:8b:45:89:eb:90:f4:bc:64:39:23:f1:c7:d8:46:cc:0a:
         20:14:29:9a:48:4c:fb:6c:22:ab:0a:13:ed:b9:aa:bc:6d:cd:
         e8:66:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:50 2025 by rpki-client