Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa
File:                     3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          YQ0YoPnZchDNXHZU1plgXP4lBKhuJnnbDOWPV18JvYM=
Subject key identifier:   14:56:C3:7D:99:27:F1:B9:DD:D9:F6:17:2D:5C:ED:E5:19:7B:4F:18
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       79C804409EAE6EAAFBA8D9EE47C0A29555137810
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:18 +0000
ROA not before:           Tue 04 Feb 2025 19:57:18 +0000
ROA not after:            Tue 03 Feb 2026 20:02:18 +0000
asID:                     27773
IP address blocks:        200.106.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c8:04:40:9e:ae:6e:aa:fb:a8:d9:ee:47:c0:a2:95:55:13:78:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:18 2025 GMT
            Not After : Feb  3 20:02:18 2026 GMT
        Subject: CN=1456C37D9927F1B9DDD9F6172D5CEDE5197B4F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:da:24:bd:fc:35:08:38:a5:92:34:8a:15:
                    80:cb:e9:2c:16:0d:2d:80:1b:f5:d1:df:e0:61:64:
                    ca:30:9a:94:26:71:64:99:14:f0:9e:3e:24:c8:7a:
                    d6:8b:7a:59:71:84:9d:96:d5:bd:18:e8:5a:be:7f:
                    b3:43:a6:85:a7:89:d9:21:bd:c6:63:d7:5e:b8:f6:
                    23:b5:83:45:af:62:75:de:99:ed:9c:55:3d:5b:24:
                    f6:ff:0d:a4:f1:09:59:76:03:4f:0d:da:55:6c:ec:
                    dc:c9:69:a9:74:9e:0c:d9:fb:d7:4c:2a:9b:a2:f1:
                    de:a9:c4:f5:e5:c6:07:77:10:17:99:b9:df:1e:79:
                    93:a2:8f:3b:a2:1e:a0:a4:42:86:76:be:8f:73:91:
                    8a:7b:83:b7:1e:a4:ee:e7:91:2d:cb:3b:a3:d6:f8:
                    b3:b9:6e:7c:44:ae:4f:a9:82:93:00:f7:9e:b9:09:
                    50:f3:80:ac:96:93:b8:a7:9e:dc:38:8c:b7:69:ad:
                    e1:af:04:65:a9:d1:23:dc:39:c6:fd:62:ba:6c:c5:
                    3e:ee:3a:f1:44:2b:40:6a:6f:b3:2c:fe:8f:78:e7:
                    9a:fa:3d:bd:01:17:3f:2d:c9:aa:e7:be:32:8d:88:
                    41:af:dc:d5:1b:78:04:e2:49:d7:13:9b:62:f7:de:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:56:C3:7D:99:27:F1:B9:DD:D9:F6:17:2D:5C:ED:E5:19:7B:4F:18
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:ee:cc:74:56:25:11:56:ca:a7:14:8e:ed:a5:3c:78:d4:
         d0:f5:b8:27:b4:76:d6:34:11:b4:fe:31:7f:c6:c8:01:41:24:
         35:92:11:ad:ad:04:29:e6:54:74:8a:c4:7f:be:e9:87:80:f4:
         97:54:5a:39:8a:bd:10:51:d9:ca:ce:55:2e:9f:08:d2:ee:5a:
         da:f4:c4:ca:c1:6b:ed:34:db:44:25:1d:44:29:ed:2a:5f:9d:
         b7:57:6d:de:f9:1b:11:b6:a0:04:aa:55:c9:e9:94:4f:86:43:
         3f:39:9a:47:0d:d4:8b:d9:d0:4e:e4:04:e3:da:0f:8c:1b:a6:
         55:8d:13:4a:c2:7f:86:d2:55:4a:7e:81:14:b6:2e:10:05:02:
         58:26:92:73:e6:04:ee:e7:69:26:be:ef:41:21:5a:f1:8e:fd:
         a3:fd:ca:83:26:1b:6d:84:49:f0:30:83:14:29:03:2a:26:a9:
         7a:09:86:24:8f:c8:2a:d1:99:27:7d:c3:21:46:6e:57:77:1d:
         08:c6:4b:26:ac:55:69:2a:4f:b3:7d:ce:c7:2f:b0:ab:54:9f:
         5c:a1:69:bb:f6:82:bf:b9:2d:ba:ab:a3:70:0f:3c:4a:a5:39:
         14:b2:35:6a:f7:b9:24:f5:3a:6f:70:c9:51:d1:d9:49:5f:84:
         9d:db:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:18:23 2025 by rpki-client