Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3231203d3e203237363934.roa
File:                     3230302e37312e3234382e302f32312d3231203d3e203237363934.roa (raw, json)
Hash identifier:          F/9cH13xyMzOBC/w/2yM08EofQnGkrqfSyvq5+vuALY=
Subject key identifier:   B1:5A:DC:3D:56:CF:1C:A3:15:26:F2:00:E3:E8:13:D8:80:6F:FF:68
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       34D86EF97FE73D0C3C438F9CB6D5AD3E9ED84CCD
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3231203d3e203237363934.roa
Signing time:             Tue 04 Feb 2025 18:24:50 +0000
ROA not before:           Tue 04 Feb 2025 18:19:50 +0000
ROA not after:            Tue 03 Feb 2026 18:24:50 +0000
asID:                     27694
IP address blocks:        200.71.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:6e:f9:7f:e7:3d:0c:3c:43:8f:9c:b6:d5:ad:3e:9e:d8:4c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Feb  4 18:19:50 2025 GMT
            Not After : Feb  3 18:24:50 2026 GMT
        Subject: CN=B15ADC3D56CF1CA31526F200E3E813D8806FFF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:cb:9c:67:6e:46:4b:17:99:4c:53:b5:8e:
                    e5:ec:71:e3:91:00:b5:b4:80:7b:17:e5:5c:86:22:
                    74:a4:4b:1d:52:48:a2:f6:82:b7:2a:74:74:10:f0:
                    bd:a2:8b:6f:e8:ce:6e:35:67:99:d8:e8:2b:64:e8:
                    1f:96:c8:58:db:e4:1e:3c:e7:2f:eb:ce:50:53:2e:
                    cc:bd:05:e0:03:ec:a1:a5:8e:ba:80:31:44:58:7a:
                    29:61:60:72:57:1d:92:32:6c:48:49:be:30:cc:1a:
                    26:d3:83:cb:47:5b:6c:c6:98:0a:3f:82:04:f0:63:
                    7b:ee:55:29:23:07:79:1e:e0:2e:2d:5e:22:b5:c9:
                    98:49:5e:e5:09:47:1a:07:58:14:5a:49:08:91:76:
                    19:39:42:6a:cb:a9:17:42:5f:ae:f4:d9:56:91:4b:
                    d7:07:82:dc:c3:ea:58:5c:21:ef:16:dc:e2:84:a4:
                    8c:8b:62:ee:a5:15:49:85:aa:0c:d2:c1:5e:50:6a:
                    71:ca:7f:5c:54:64:da:5f:a2:71:e0:a8:1a:a5:12:
                    94:1b:59:6b:84:13:b4:f6:61:4a:b6:6d:8c:d0:34:
                    1f:da:46:79:41:92:db:57:0d:66:4f:55:37:c0:36:
                    35:cc:7b:0c:93:c7:c8:f9:c5:91:2d:b4:05:2a:d5:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:DC:3D:56:CF:1C:A3:15:26:F2:00:E3:E8:13:D8:80:6F:FF:68
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3231203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:5f:09:8b:1e:86:7f:88:ab:b3:aa:f6:21:d6:f7:52:44:
         51:d4:43:55:1b:56:1f:13:36:84:a6:a4:f8:07:04:38:da:93:
         f2:51:4b:56:8f:5c:6a:ef:b7:80:60:22:8e:08:f6:85:79:6d:
         4f:39:02:76:43:f6:ec:eb:d4:51:ef:07:8f:62:a4:13:91:38:
         fa:fc:8e:65:25:03:56:2c:d4:e1:5c:a9:f4:4b:8f:6a:7a:34:
         80:f1:c7:78:b4:5e:96:2d:24:9c:92:85:e4:f9:52:a8:dd:64:
         e3:c7:d5:aa:6e:7f:c6:9e:48:05:0f:e1:6c:89:5d:36:d0:e9:
         9f:2d:55:ec:12:0b:4b:4b:59:7c:94:16:38:63:ba:e3:67:bb:
         56:ef:5b:45:e3:29:d6:a2:ac:33:da:1e:d4:a5:41:dd:73:ab:
         cf:5a:7e:c8:22:92:08:ce:d2:e1:d8:90:ba:2b:99:8b:99:8a:
         d0:3f:a5:5e:1a:61:ed:a7:1f:ad:4c:3e:04:8a:0d:ee:4d:8a:
         21:a2:2d:53:92:22:6d:92:58:66:95:cf:4f:d8:4a:f6:80:e5:
         3f:72:97:c8:42:52:36:79:13:c8:9e:fd:a7:7a:71:7a:f8:61:
         8e:38:48:b8:e9:a7:11:9f:36:e0:13:db:70:6e:a2:dc:f9:fd:
         06:7d:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:15 2025 by rpki-client