Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203532333736.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203532333736.roa (raw, json)
Hash identifier:          LA5asG7pg+yIBGVfIcxH3efM8TIslZQexe5MLru61UM=
Subject key identifier:   D0:6E:B5:96:3D:2E:DE:68:AE:53:DF:25:48:72:CF:90:66:EA:FD:40
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       4AE3A1DD36500184D07A93BC0004B562F5D8D20B
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203532333736.roa
Signing time:             Wed 05 Feb 2025 20:55:00 +0000
ROA not before:           Wed 05 Feb 2025 20:50:00 +0000
ROA not after:            Wed 04 Feb 2026 20:55:00 +0000
asID:                     52376
IP address blocks:        200.33.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:a1:dd:36:50:01:84:d0:7a:93:bc:00:04:b5:62:f5:d8:d2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  5 20:50:00 2025 GMT
            Not After : Feb  4 20:55:00 2026 GMT
        Subject: CN=D06EB5963D2EDE68AE53DF254872CF9066EAFD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:46:39:ad:13:4e:d6:74:2a:fb:17:96:00:
                    a2:95:b1:bc:73:1d:18:d6:c0:51:b3:cd:2a:12:f6:
                    5b:37:79:f8:bb:c6:98:a2:bb:f7:e3:75:e3:6e:75:
                    24:60:7c:b0:cc:e4:0f:01:e9:c1:36:26:09:af:b0:
                    83:75:c9:0f:de:d6:c7:be:f4:f9:0d:2d:55:42:47:
                    08:a6:63:8a:47:09:9c:1b:72:bc:0d:11:76:1b:87:
                    d8:d9:20:86:c9:b8:af:da:28:5f:d1:92:e9:28:42:
                    be:7f:16:a1:b2:51:8c:e8:fd:ec:f0:11:55:8e:00:
                    b7:3d:58:ef:ae:27:aa:4e:89:55:32:21:cd:96:c6:
                    fe:37:29:22:cc:9f:8f:01:0a:84:81:4c:4f:2f:e5:
                    d3:ec:0d:bd:8f:9d:db:8d:00:1a:cc:9f:33:d5:9e:
                    d6:e2:07:8a:05:1a:fb:d9:6c:dc:33:52:fb:69:ad:
                    2e:94:d0:0d:0b:45:ec:2a:ef:1f:76:54:4b:94:90:
                    2b:86:bb:b5:9d:12:6c:20:68:88:56:2b:de:5c:59:
                    f1:51:5c:d6:eb:a6:5f:bf:28:10:fe:6f:8e:1a:ce:
                    68:f5:fe:4b:8e:8d:55:c7:d9:d3:dc:3f:5d:55:b3:
                    db:a8:0d:8d:a1:c3:42:e6:a2:49:4f:ee:74:5b:e7:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:B5:96:3D:2E:DE:68:AE:53:DF:25:48:72:CF:90:66:EA:FD:40
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:8c:de:ff:71:a9:f0:d2:db:e1:2c:3f:92:0d:10:89:d8:
         6b:a5:4c:0a:74:e0:d3:be:b3:b8:38:76:1f:12:29:30:d1:03:
         8f:48:a3:48:c4:7e:d5:b6:af:47:b9:d7:28:ff:f2:b3:b8:33:
         01:07:b5:17:79:be:01:65:30:f3:62:bd:c6:c7:36:b6:55:25:
         cb:f8:b5:49:e3:28:2d:85:5e:c4:b2:f6:4c:33:1a:08:c7:13:
         79:38:1b:95:70:be:ac:c5:f7:30:57:b2:f9:80:90:53:8c:2f:
         6b:5d:a1:6f:3c:1f:91:36:7a:62:83:e1:1a:a6:ab:c9:1e:90:
         60:76:37:2c:78:f8:9b:6a:9e:4d:b7:06:1a:da:6e:21:f5:fc:
         13:34:48:db:6d:89:b5:03:e3:4c:e2:28:4e:2c:b6:83:70:20:
         50:e1:3a:e3:0f:54:96:fb:47:a2:3c:aa:f1:66:2a:4e:ae:36:
         4c:65:41:f2:e4:07:5a:1d:ce:4a:fa:9b:d4:39:58:bc:85:4f:
         49:3b:41:99:fe:86:7e:b6:e0:c9:5c:ce:3c:59:36:5d:81:71:
         4e:08:18:9d:91:af:d9:7e:f6:80:5d:62:52:c7:e5:22:ab:f0:
         fa:18:a7:ac:93:1a:2d:45:88:9d:73:91:93:8b:ca:95:f2:30:
         8f:48:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:51:17 2025 by rpki-client