Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
File:                     3230302e3130372e38342e302f32322d3232203d3e203237363934.roa (raw, json)
Hash identifier:          1gLpbwIYn1KaTPHDLS0hyppzP9OD62aiDt9z2QglMnM=
Subject key identifier:   E1:1E:C6:B4:03:ED:08:52:AC:9F:28:C0:D2:C6:66:C4:02:1D:5C:75
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       08F12BE699E1E1EEA7C306E77599E1EE34161554
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
Signing time:             Tue 04 Feb 2025 18:24:51 +0000
ROA not before:           Tue 04 Feb 2025 18:19:51 +0000
ROA not after:            Tue 03 Feb 2026 18:24:51 +0000
asID:                     27694
IP address blocks:        200.107.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f1:2b:e6:99:e1:e1:ee:a7:c3:06:e7:75:99:e1:ee:34:16:15:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Feb  4 18:19:51 2025 GMT
            Not After : Feb  3 18:24:51 2026 GMT
        Subject: CN=E11EC6B403ED0852AC9F28C0D2C666C4021D5C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:be:d2:34:5d:d0:fd:1e:50:a3:71:ab:ca:
                    68:7d:87:62:80:f2:32:ad:7f:93:55:9a:c2:73:25:
                    72:29:b7:c1:68:63:b9:d2:ff:74:d7:3a:ab:2b:4d:
                    26:b8:3c:ed:26:82:b6:cf:49:6e:3a:6b:17:e9:49:
                    db:bb:aa:64:5b:b6:f7:81:cb:99:13:68:7e:9c:39:
                    38:d4:c2:fb:fa:6c:e2:2a:78:32:a4:ee:b6:e5:5a:
                    e7:c0:22:39:b7:fa:33:a9:62:08:cd:55:54:2f:15:
                    a0:78:d0:6f:ee:31:76:16:53:7d:fa:1e:c2:c9:f1:
                    8e:40:0e:24:85:11:cc:19:d3:52:7b:59:58:1b:d0:
                    f6:be:4e:55:fc:e5:59:24:52:79:79:00:f2:4a:7d:
                    d8:54:d6:28:72:fb:80:84:3c:31:54:4f:28:f7:cf:
                    a5:31:d4:ac:53:74:0c:49:bf:d9:1e:15:61:7b:c1:
                    ae:96:ef:2b:65:55:61:4c:92:99:4f:aa:b6:a5:0c:
                    0b:4c:81:fa:db:26:cd:2c:f3:da:f1:3f:c6:42:18:
                    7c:1f:a9:2d:24:f3:d4:60:bb:9a:12:fd:fb:de:aa:
                    eb:61:26:6e:9d:32:fe:1a:b9:5b:5d:b3:99:24:b5:
                    70:f6:1b:e7:34:d4:f0:14:95:b4:32:63:0f:69:3e:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:C6:B4:03:ED:08:52:AC:9F:28:C0:D2:C6:66:C4:02:1D:5C:75
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ba:21:7d:6b:6b:68:3c:b7:8d:28:be:ae:b9:97:40:c5:ee:
         f5:1c:7b:aa:78:18:1b:87:c4:74:f9:2b:13:75:5a:92:8b:af:
         b4:5b:a6:29:6f:f7:48:31:4b:a8:eb:cb:5e:4f:1d:97:4d:b4:
         6a:c2:54:82:c2:27:b8:fb:2c:ad:4a:be:f2:1d:3f:44:bd:fb:
         b3:63:b8:ed:a8:e0:47:95:32:44:da:2d:e1:ac:83:fe:04:9e:
         81:4d:20:95:5f:dc:38:46:25:0b:72:4e:ea:83:e4:66:72:a5:
         bd:cd:8f:6e:f2:75:b2:a6:36:23:c7:bb:33:d7:75:27:ca:b3:
         86:df:3d:34:a6:bb:05:cc:ce:94:88:86:65:e2:9b:8d:2f:10:
         e8:08:f5:b6:bb:72:50:60:6c:ad:58:fb:2a:3e:5f:c7:72:c5:
         86:cb:8c:5c:05:35:ab:10:ee:25:ce:3c:ff:17:33:5c:2c:3b:
         70:1a:34:25:ff:fa:04:3c:0a:46:27:e9:eb:89:54:08:27:50:
         2d:96:29:23:2d:47:b2:2b:b0:f4:c9:72:93:61:f1:8b:28:75:
         62:4c:7d:42:38:a3:02:54:a6:ef:8d:a4:c7:36:82:a6:b5:f8:
         d4:47:3f:72:21:0c:b4:90:eb:26:97:12:a5:21:d6:db:18:0d:
         46:bd:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:46 2025 by rpki-client