Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/3230302e36332e34382e302f32312d3232203d3e203237393639.roa
File:                     3230302e36332e34382e302f32312d3232203d3e203237393639.roa (raw, json)
Hash identifier:          3n5bTkXj9VLUTDqih4PjZazILLeoWtBdxsj/YQRc2Wk=
Subject key identifier:   AC:00:A7:C2:29:5A:D9:AF:36:BF:F8:C7:E3:5E:DF:55:49:28:FE:2B
Certificate issuer:       /CN=346CA526892F0D074D2B9816B2769025CFE97FF5
Certificate serial:       6A754FC38BCA2EA3259489E73876585990028037
Authority key identifier: 34:6C:A5:26:89:2F:0D:07:4D:2B:98:16:B2:76:90:25:CF:E9:7F:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/3230302e36332e34382e302f32312d3232203d3e203237393639.roa
Signing time:             Tue 04 Feb 2025 18:29:22 +0000
ROA not before:           Tue 04 Feb 2025 18:24:22 +0000
ROA not after:            Tue 03 Feb 2026 18:29:22 +0000
asID:                     27969
IP address blocks:        200.63.48.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:75:4f:c3:8b:ca:2e:a3:25:94:89:e7:38:76:58:59:90:02:80:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346CA526892F0D074D2B9816B2769025CFE97FF5
        Validity
            Not Before: Feb  4 18:24:22 2025 GMT
            Not After : Feb  3 18:29:22 2026 GMT
        Subject: CN=AC00A7C2295AD9AF36BFF8C7E35EDF554928FE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:c5:b3:31:de:87:40:f6:e5:5e:0f:36:b3:
                    59:6f:11:09:04:b6:73:d2:8c:3c:bd:19:56:bf:2f:
                    e5:06:c8:53:ec:9a:b3:ff:89:68:0f:f3:b0:ae:6b:
                    96:30:54:b9:75:32:a1:f9:27:b8:28:78:b7:9c:e1:
                    69:2d:40:04:d2:1c:3d:43:c0:c6:b3:ce:e4:84:b8:
                    7f:04:71:83:a6:a5:77:8d:79:85:d2:22:13:1c:d1:
                    f0:59:a9:cd:c8:4b:09:46:48:27:7d:65:4a:bf:e6:
                    e0:37:6b:81:0b:16:ad:90:da:51:5b:ba:f7:2b:cb:
                    ae:c8:f1:aa:f4:bf:4a:b0:9e:b5:66:54:e2:6b:af:
                    f3:eb:f3:4f:c5:6b:81:b4:80:60:6c:38:d7:81:38:
                    bb:42:94:be:5a:91:a3:77:40:74:3b:0c:4d:fd:4f:
                    53:11:3c:c0:c6:2a:ef:74:3e:b4:9e:20:37:13:de:
                    7a:78:d2:b5:c3:bd:82:09:83:65:cd:b3:7d:c2:bf:
                    03:76:23:ba:af:36:ab:9d:55:09:f6:8c:91:a4:b4:
                    c6:a9:0c:bb:9e:80:a1:08:ee:c4:4c:e4:02:ee:1b:
                    6d:75:59:14:16:3f:21:b7:2e:cf:63:e2:7d:2b:28:
                    f5:58:93:d0:95:4b:04:05:ab:07:7e:6f:6c:41:95:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:00:A7:C2:29:5A:D9:AF:36:BF:F8:C7:E3:5E:DF:55:49:28:FE:2B
            X509v3 Authority Key Identifier:
                keyid:34:6C:A5:26:89:2F:0D:07:4D:2B:98:16:B2:76:90:25:CF:E9:7F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/3230302e36332e34382e302f32312d3232203d3e203237393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:2d:f7:c2:99:fa:37:8c:e0:ec:72:73:a1:b4:61:4b:11:
         c6:ba:cf:9d:ed:15:d6:7a:ba:1e:37:f5:51:23:c3:b9:a0:3b:
         90:a0:6f:72:75:13:4e:30:a9:b7:a2:a3:89:da:b1:88:ca:e9:
         c1:a6:b3:f3:69:1d:9b:c0:0a:96:58:9d:aa:9a:c3:7c:a0:93:
         c7:06:ab:f6:8d:e8:fb:5a:a6:f2:77:66:f9:64:ea:3f:3b:e3:
         b4:71:9b:a3:da:81:b8:cf:23:33:f4:d5:c3:56:40:a1:0e:28:
         32:01:7a:52:e7:9b:df:16:2d:8f:07:25:b8:bf:1a:04:3b:77:
         4e:1f:2a:68:2e:69:5d:d5:8f:17:6a:b4:7b:3e:84:40:03:67:
         19:dc:18:35:51:e7:3b:2c:52:41:01:59:5e:a6:f6:9d:c6:8d:
         f5:3a:ac:05:fa:b4:76:48:65:89:03:e7:21:58:6b:e4:90:82:
         a1:45:f9:11:d7:4a:59:74:72:23:15:7e:ea:88:c6:b5:46:8c:
         2b:e4:8d:38:ba:0f:4c:6e:33:6c:b1:f4:82:ef:2d:a3:72:fb:
         30:b8:79:3e:ae:32:c5:db:81:b5:9c:af:b1:cf:37:bf:9a:3a:
         7d:f8:9f:39:f3:4a:22:3f:e7:97:dd:8c:3c:c9:49:db:65:8e:
         7f:15:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:27:06 2025 by rpki-client