Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa
File:                     3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa (raw, json)
Hash identifier:          f1MKR0CyvP1E7HxqdALuC1SU2C8Gmyu7YVDiQxQznGc=
Subject key identifier:   51:6A:CA:8D:6E:C9:91:24:EE:3E:98:89:CC:3E:2F:42:2A:8D:9A:3F
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       2452C7BC1AF8FBCB3F24A22FA3B7783A5A7CFEE6
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa
Signing time:             Tue 11 Feb 2025 18:09:34 +0000
ROA not before:           Tue 11 Feb 2025 18:04:34 +0000
ROA not after:            Tue 10 Feb 2026 18:09:34 +0000
asID:                     22080
IP address blocks:        200.112.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:52:c7:bc:1a:f8:fb:cb:3f:24:a2:2f:a3:b7:78:3a:5a:7c:fe:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Feb 11 18:04:34 2025 GMT
            Not After : Feb 10 18:09:34 2026 GMT
        Subject: CN=516ACA8D6EC99124EE3E9889CC3E2F422A8D9A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:02:4a:21:2b:24:a8:da:1e:5a:ec:fa:ee:
                    7f:b0:d8:b0:c6:5c:84:e8:a0:2e:65:87:94:28:a2:
                    56:12:20:99:d3:23:d2:f8:a0:e5:05:41:8f:a2:ee:
                    df:34:5f:53:15:a5:2d:95:31:f3:17:d3:b3:4f:f7:
                    3a:42:41:d9:2c:3d:c3:7e:e2:00:22:70:df:90:07:
                    3b:59:db:b7:7c:50:d7:6c:0e:f9:0a:53:c2:25:68:
                    a6:7f:43:b9:fa:ef:ac:5f:ac:ae:17:60:d3:ca:36:
                    cf:0f:b4:f2:0f:ab:ac:2d:41:46:cf:46:f7:d4:75:
                    2b:60:59:ef:6a:95:4a:a7:e9:c4:53:ee:30:da:e3:
                    73:c8:67:49:09:4c:d3:b0:8c:79:66:cf:0b:97:9a:
                    30:33:aa:32:b3:51:5a:f8:8b:e8:60:ff:e0:29:72:
                    42:59:18:ce:3c:ab:ba:c7:ac:fd:76:b1:94:63:df:
                    8c:27:f3:5e:0d:4a:ed:39:58:93:de:cc:64:48:42:
                    03:20:e8:30:d2:42:bf:ed:65:30:82:bc:0d:20:53:
                    1e:0c:73:93:fc:4b:fb:be:02:af:d0:de:4a:de:d3:
                    a0:68:37:97:34:61:d5:df:18:8f:6d:a3:68:00:72:
                    fc:5b:b4:7b:9b:66:d1:7f:93:63:6d:63:e2:24:dc:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:CA:8D:6E:C9:91:24:EE:3E:98:89:CC:3E:2F:42:2A:8D:9A:3F
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:95:fd:65:61:63:3f:79:f9:e3:90:96:34:23:1a:6b:5a:39:
         79:4b:e6:f8:7e:ad:22:25:53:30:6e:04:96:13:1f:cf:aa:1e:
         e2:16:35:f0:9d:70:dd:de:b3:e0:0b:1b:d0:c3:d3:b2:d5:3e:
         06:f9:69:63:13:ed:05:21:ee:a5:a5:2f:33:26:05:a4:38:a5:
         73:88:ea:14:b1:28:03:67:aa:b6:7c:29:bf:49:29:17:2b:22:
         6c:6f:d6:d4:54:3c:4b:57:17:97:cf:40:03:b3:1d:2d:46:61:
         1f:b0:ea:eb:fa:5b:a0:7d:1c:e6:36:61:ce:4b:49:2a:27:a2:
         33:46:07:4a:6c:2d:53:bd:a3:f3:65:1e:98:e8:4f:c8:b1:d3:
         4f:c6:f9:be:76:cd:34:26:dd:a1:0a:79:0d:b1:db:ff:18:0e:
         f5:a9:35:bd:af:4e:8f:a2:5b:e2:94:87:63:b2:a4:6d:f4:87:
         11:93:e7:3c:e7:7e:6a:f5:f7:da:6e:ab:b9:ca:9e:02:e4:39:
         4e:5c:c2:5a:b5:76:3e:fa:76:3c:a7:1a:17:c5:62:6f:59:ac:
         e4:ac:17:8a:41:a4:46:b6:43:1d:ab:84:d1:6e:1e:3a:21:2c:
         61:d4:a9:2d:52:75:74:f1:90:7a:02:c5:79:73:ce:03:03:05:
         17:b2:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:56:02 2025 by rpki-client