Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203131303538.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203131303538.roa (raw, json)
Hash identifier:          2ifp3sm0xmPZDyKg/+ImEqNUFqicAdLZ4uSKX+QvG3Y=
Subject key identifier:   7A:57:C6:B8:3F:25:CD:DC:83:2D:EB:4D:31:2D:D6:F7:46:C5:3E:09
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       4842BCC19B8252F92E2F833D9CD313159769E5EB
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203131303538.roa
Signing time:             Tue 04 Feb 2025 18:37:10 +0000
ROA not before:           Tue 04 Feb 2025 18:32:10 +0000
ROA not after:            Tue 03 Feb 2026 18:37:10 +0000
asID:                     11058
IP address blocks:        200.33.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:42:bc:c1:9b:82:52:f9:2e:2f:83:3d:9c:d3:13:15:97:69:e5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:10 2025 GMT
            Not After : Feb  3 18:37:10 2026 GMT
        Subject: CN=7A57C6B83F25CDDC832DEB4D312DD6F746C53E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:2b:0c:1e:14:7e:02:74:67:54:ea:ed:3f:
                    33:f8:92:20:33:be:13:fd:28:a1:ff:52:81:9f:e9:
                    eb:3e:96:91:f8:5b:ae:f2:0e:62:49:d5:db:95:61:
                    50:a8:52:9f:99:52:27:de:46:f7:47:71:28:72:3c:
                    2f:21:08:7c:cf:75:41:c9:d9:91:41:6d:b6:24:58:
                    6a:31:2e:53:44:a8:61:30:8b:92:08:d8:ee:80:ff:
                    ba:8d:d1:3e:9d:5d:0c:30:40:ea:27:bb:40:a4:99:
                    97:6e:b7:a4:63:45:80:95:73:cc:b9:58:55:79:85:
                    c4:db:09:df:00:aa:d2:59:a9:b7:8f:3f:68:66:e2:
                    d3:90:aa:13:4c:d5:0c:31:a1:5b:44:a9:ad:9d:6b:
                    15:1b:b2:30:f3:c3:9c:6d:02:15:8e:f3:0f:e2:0c:
                    27:86:3f:23:e5:4b:b0:e5:f1:c0:af:14:5a:d3:a3:
                    40:a6:4c:ca:9e:fc:a8:92:8d:27:13:85:21:af:9b:
                    4b:7c:cc:e0:9c:aa:24:6f:7f:d7:a8:54:41:60:ec:
                    42:a3:49:0f:69:e5:71:72:41:ff:a5:10:ec:b6:d4:
                    ec:e0:5d:78:00:fa:d8:25:36:b4:8b:af:83:51:7c:
                    ab:99:3f:0a:2a:4c:7d:4f:ae:27:af:da:10:a7:14:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:57:C6:B8:3F:25:CD:DC:83:2D:EB:4D:31:2D:D6:F7:46:C5:3E:09
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203131303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:78:e5:7e:14:37:5b:9a:f8:3e:b7:1d:eb:4a:7b:28:f0:58:
         bb:8f:fc:c7:95:18:db:6a:46:6e:bc:31:aa:92:08:bb:78:0f:
         e9:08:74:08:1a:53:34:3b:83:d9:85:97:99:7f:63:e8:c0:29:
         e9:7c:5c:31:79:e4:15:82:e9:d1:39:e7:d8:36:a8:2e:0e:75:
         9b:95:de:fb:a2:a1:af:ec:2a:a1:ef:d0:53:1b:05:93:01:52:
         41:ad:dd:4c:a2:5f:5f:e5:67:8a:f8:aa:af:c2:b5:8a:f9:8f:
         e4:5a:fd:58:37:9a:7a:53:ce:2b:cb:c2:15:03:69:77:47:8d:
         62:be:22:69:88:6c:87:d4:52:cc:b8:4f:5c:4f:83:66:bb:6f:
         33:3c:6a:30:4c:c4:b2:df:67:5b:10:ea:96:74:c2:55:cc:a8:
         5c:53:fc:98:ce:26:34:27:1f:97:e5:de:23:f4:f7:1b:e6:fc:
         95:39:f7:da:2e:bd:f1:bf:60:f3:52:53:bc:6f:ca:08:b1:84:
         c0:e6:91:9e:dd:d4:53:98:8e:f1:10:86:c6:35:19:58:5f:11:
         cb:c1:04:77:73:44:c3:d2:9a:57:e6:7e:09:9f:eb:67:c5:c0:
         7a:8a:89:57:a9:28:13:8c:3a:7f:f7:04:5b:fa:c5:ca:7e:b1:
         ca:92:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:53 2025 by rpki-client