Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/3230302e34392e3131322e302f32312d3234203d3e203237393530.roa
File:                     3230302e34392e3131322e302f32312d3234203d3e203237393530.roa (raw, json)
Hash identifier:          GcJoaN4Zp774hUczlk5u4epXVjzQ44ebCOqikva7KZQ=
Subject key identifier:   8C:76:3C:B7:63:09:32:D5:29:D0:D5:DB:BF:4F:92:1E:15:5C:04:AA
Certificate issuer:       /CN=569A65DAE1BF90949ECA52CA93D76778B05E6189
Certificate serial:       31A89B93CDE0F5BAAAA558D4A66292B6FFD112BF
Authority key identifier: 56:9A:65:DA:E1:BF:90:94:9E:CA:52:CA:93:D7:67:78:B0:5E:61:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/3230302e34392e3131322e302f32312d3234203d3e203237393530.roa
Signing time:             Tue 04 Feb 2025 18:32:08 +0000
ROA not before:           Tue 04 Feb 2025 18:27:08 +0000
ROA not after:            Tue 03 Feb 2026 18:32:08 +0000
asID:                     27950
IP address blocks:        200.49.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a8:9b:93:cd:e0:f5:ba:aa:a5:58:d4:a6:62:92:b6:ff:d1:12:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569A65DAE1BF90949ECA52CA93D76778B05E6189
        Validity
            Not Before: Feb  4 18:27:08 2025 GMT
            Not After : Feb  3 18:32:08 2026 GMT
        Subject: CN=8C763CB7630932D529D0D5DBBF4F921E155C04AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:aa:6c:83:e4:2c:eb:81:54:70:77:5c:69:
                    60:cf:dd:0b:51:24:66:0f:e1:83:bf:f9:2d:dc:b1:
                    74:80:6e:80:27:d1:6a:d8:c1:14:29:d5:a2:23:ec:
                    d9:8b:5c:0d:56:59:6b:46:1b:84:e8:7f:aa:b6:d7:
                    b7:41:c5:0a:08:05:20:2b:2e:1c:53:54:96:28:a5:
                    7c:e3:fc:b0:a4:7d:76:ca:e2:38:94:8f:70:89:8f:
                    2f:59:64:20:16:cc:f9:52:ff:57:0c:25:c3:23:68:
                    35:83:ea:8b:f0:6f:a2:c6:27:19:e6:42:82:fe:4e:
                    83:78:46:cd:3a:8f:d9:2f:63:0c:b2:f6:33:8d:eb:
                    43:a1:e3:7e:b3:42:ab:f0:47:51:49:58:eb:28:9d:
                    22:01:be:ca:2f:c7:6c:98:f7:b4:15:eb:51:4c:b1:
                    ba:f5:ef:ed:86:04:7e:d6:99:ee:9f:28:ec:be:14:
                    28:18:34:cd:34:27:a6:22:dd:4a:2f:89:b8:bc:95:
                    ed:a2:c0:37:29:fe:c2:11:24:f8:6c:f2:11:7b:5d:
                    5d:2a:26:1d:2f:56:87:fe:fa:5f:22:30:02:b9:01:
                    31:b7:d0:b1:80:37:4e:d3:c8:f9:2b:65:f6:5f:e3:
                    4f:52:f8:b1:96:23:5c:02:7c:a5:47:11:b4:7e:3f:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:76:3C:B7:63:09:32:D5:29:D0:D5:DB:BF:4F:92:1E:15:5C:04:AA
            X509v3 Authority Key Identifier:
                keyid:56:9A:65:DA:E1:BF:90:94:9E:CA:52:CA:93:D7:67:78:B0:5E:61:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/3230302e34392e3131322e302f32312d3234203d3e203237393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:1e:15:40:20:ad:85:6e:35:3f:ad:f8:20:e5:67:14:55:
         69:b5:bc:0c:22:82:83:3a:55:db:fb:da:e1:2b:d1:3a:05:2b:
         6f:30:29:c5:dd:02:ba:7a:37:e1:82:24:25:1c:8e:c8:b8:8a:
         56:09:73:e8:f3:99:8c:e2:df:e1:da:63:db:a0:1f:87:84:6a:
         af:a2:27:d1:c4:90:d0:54:91:28:e6:5d:0e:58:01:61:f9:e0:
         8e:85:5c:e8:0b:72:ed:7a:f2:d8:a2:41:54:b9:3c:65:91:e1:
         6e:6c:d5:51:2b:a4:4f:1e:32:9e:26:ba:a5:fc:28:9a:43:c8:
         2e:5b:00:31:2b:82:29:e8:1b:cd:91:b9:93:6a:37:16:87:99:
         72:e1:08:97:a2:53:5e:e2:a3:99:28:79:01:15:aa:f8:a0:3e:
         bd:dc:5d:6a:2a:1f:3f:e1:ae:0d:cb:fe:08:0c:43:77:95:8f:
         eb:bd:4b:16:3a:d6:b9:26:40:f1:21:75:9d:7d:e4:15:60:c5:
         4e:17:f5:0b:5a:4d:2a:c2:1d:ea:07:6c:1c:30:13:e8:51:f6:
         8d:b3:c4:94:ba:9c:b9:d1:26:1e:40:f7:c9:bb:79:90:5f:74:
         30:b6:53:28:82:6d:90:24:b1:13:b2:61:ee:f7:f7:7f:a9:f9:
         bb:2a:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:59 2025 by rpki-client