Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa
File:                     3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa (raw, json)
Hash identifier:          qjJ4XHRoApTym4sWKgt3nZYgtHG1xP3veHHJ9QjFDd0=
Subject key identifier:   A6:AB:61:CD:07:3A:86:88:D8:D7:90:E6:26:DB:F6:6D:7A:A1:C1:44
Certificate issuer:       /CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
Certificate serial:       4961A5A43A6DE8F12CB27FDC728EDB45CD63D840
Authority key identifier: 9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa
Signing time:             Fri 05 Jul 2024 20:05:00 +0000
ROA not before:           Fri 05 Jul 2024 20:00:00 +0000
ROA not after:            Fri 04 Jul 2025 20:05:00 +0000
asID:                     269981
IP address blocks:        200.215.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:61:a5:a4:3a:6d:e8:f1:2c:b2:7f:dc:72:8e:db:45:cd:63:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
        Validity
            Not Before: Jul  5 20:00:00 2024 GMT
            Not After : Jul  4 20:05:00 2025 GMT
        Subject: CN=A6AB61CD073A8688D8D790E626DBF66D7AA1C144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:95:58:ca:35:3f:e3:0c:49:09:59:22:54:
                    79:4c:0b:40:a1:5c:bb:e5:f2:78:4d:2b:ee:ca:35:
                    f0:3c:40:c3:8b:11:a3:f8:a4:73:bf:e1:41:2a:ee:
                    61:ee:a4:d5:7c:1e:5b:24:69:f9:c7:ec:c6:8d:7e:
                    d7:82:c6:e3:77:44:1c:a5:29:38:cc:ce:bb:ce:3d:
                    1b:a2:b0:db:0b:33:8d:a7:4e:c2:bb:89:30:3c:5c:
                    3e:e5:70:ed:a5:02:46:28:5a:fd:45:2d:a4:6a:85:
                    9d:69:dd:61:3d:84:e9:b6:b7:e4:57:2a:32:65:d4:
                    5d:8b:b3:cd:92:ac:03:92:ef:01:60:1e:cc:97:f4:
                    cc:0d:b1:2a:11:26:69:f5:79:52:af:c2:5a:34:d4:
                    f4:10:d6:dd:5d:4a:53:6b:92:2f:6b:70:1f:05:4a:
                    d9:65:8f:8b:c4:3f:8a:9b:ec:a3:d6:bb:91:b3:a6:
                    7e:4f:72:ec:8b:d4:27:38:db:13:f0:ac:24:f9:7a:
                    e7:22:d6:6b:98:13:63:20:54:25:ea:ef:5a:30:4d:
                    96:66:cb:32:44:ec:46:cc:d9:92:e0:c0:65:d3:eb:
                    96:5f:49:d1:b5:d6:57:81:e7:94:85:be:48:d5:3b:
                    41:03:33:b9:b2:af:c3:89:2b:d4:43:f8:13:94:6d:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AB:61:CD:07:3A:86:88:D8:D7:90:E6:26:DB:F6:6D:7A:A1:C1:44
            X509v3 Authority Key Identifier:
                keyid:9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:7f:a9:de:16:28:fc:39:f2:4b:a4:a1:ad:ef:66:c7:e1:89:
         af:53:bc:a3:26:9a:55:7a:25:b2:1d:93:65:b4:80:0b:7f:e1:
         cc:cd:db:a5:d2:b8:1f:aa:ce:c0:b1:6c:dc:16:56:49:11:0f:
         e5:bd:bc:13:28:ed:7a:ba:e4:cc:7b:43:87:8e:1f:56:17:a9:
         bc:a7:32:42:ba:a4:33:ef:54:a2:1b:4e:db:02:81:8c:db:61:
         7c:d7:ef:d8:79:8b:77:56:e9:4f:12:cd:fa:82:cd:17:bb:96:
         57:43:8f:2a:c6:b6:a2:0f:83:5d:90:cf:42:3d:11:87:21:01:
         fe:0a:45:a2:05:59:f4:5d:67:b3:a0:93:e4:ca:66:53:74:bb:
         b0:6d:2e:b1:14:ef:75:66:0f:48:da:28:06:a9:68:34:3a:f4:
         e7:1a:68:18:f2:e0:2c:40:f6:ca:16:a4:c6:44:58:07:27:b8:
         4b:57:db:c0:69:78:c1:cf:65:38:7a:ca:38:3d:c4:9f:bb:d1:
         6f:7a:93:a6:05:7b:a6:ae:49:fc:31:d5:dd:2a:d2:3d:b5:79:
         52:af:bd:ea:cd:51:ee:cd:72:14:3e:38:dc:83:31:7d:cb:85:
         ec:1f:76:66:ce:46:14:5e:c5:1d:11:1c:6f:c5:08:a1:53:07:
         54:dd:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:14:00 2025 by rpki-client