Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3230302e3131302e3230382e302f32312d3234203d3e203237383730.roa
File:                     3230302e3131302e3230382e302f32312d3234203d3e203237383730.roa (raw, json)
Hash identifier:          vtPP/mvdShuXeUPu1xhu/EyCQDMqoA7eQaCuondlrhk=
Subject key identifier:   05:D0:A4:4C:EC:BE:BC:5B:9E:6B:B3:A9:1A:05:01:D8:5F:EA:73:5A
Certificate issuer:       /CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
Certificate serial:       7C7C899F9B1CDA2FE6249256DA4ABBCCD52BE1FC
Authority key identifier: 7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3230302e3131302e3230382e302f32312d3234203d3e203237383730.roa
Signing time:             Fri 28 Feb 2025 16:35:00 +0000
ROA not before:           Fri 28 Feb 2025 16:30:00 +0000
ROA not after:            Fri 27 Feb 2026 16:35:00 +0000
asID:                     27870
IP address blocks:        200.110.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7c:89:9f:9b:1c:da:2f:e6:24:92:56:da:4a:bb:cc:d5:2b:e1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A06C1864524D4D6B3F3D941A758895DEA60A24F
        Validity
            Not Before: Feb 28 16:30:00 2025 GMT
            Not After : Feb 27 16:35:00 2026 GMT
        Subject: CN=05D0A44CECBEBC5B9E6BB3A91A0501D85FEA735A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:d9:a0:7e:95:9b:c0:d1:63:71:ea:4a:a8:
                    8e:2e:3b:14:3d:c2:16:0b:59:30:95:47:0a:12:87:
                    d8:f9:79:c8:d4:d1:11:7e:b0:64:88:38:b9:72:3b:
                    b3:35:01:4e:1c:60:68:88:65:2d:9c:a6:68:24:d3:
                    31:c1:93:37:03:4c:be:79:48:e5:91:a2:d3:a9:f3:
                    36:14:c7:42:14:d7:1b:d5:66:c2:5e:28:14:20:40:
                    27:6d:f9:8f:1b:e9:5b:24:b5:5f:45:20:92:e7:0a:
                    e6:87:09:b4:d4:1a:3d:50:92:9c:30:e8:8c:d3:5f:
                    04:a6:6d:31:d7:92:4b:a1:ef:9e:12:ee:1d:f0:b3:
                    58:e0:5c:e2:9c:ec:66:88:ba:b2:79:4e:dc:bb:5c:
                    16:8c:8c:4e:45:28:17:27:5f:b4:23:c0:f7:ed:bd:
                    3f:a7:5f:dc:a1:b5:82:e2:4a:78:ce:b5:1f:a3:f3:
                    bb:a4:29:d1:9d:0d:31:11:4d:3e:e9:78:65:a9:66:
                    8c:ca:5c:26:62:e8:56:be:b2:cf:d1:7c:e8:53:0d:
                    70:3a:14:b3:8f:f4:bb:fb:25:9a:87:ee:82:d7:8c:
                    ff:66:c4:65:34:03:6a:08:56:b2:56:0c:71:06:2c:
                    6c:34:33:e8:4c:97:da:ff:c3:1c:2c:36:39:97:78:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:A4:4C:EC:BE:BC:5B:9E:6B:B3:A9:1A:05:01:D8:5F:EA:73:5A
            X509v3 Authority Key Identifier:
                keyid:7A:06:C1:86:45:24:D4:D6:B3:F3:D9:41:A7:58:89:5D:EA:60:A2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A06C1864524D4D6B3F3D941A758895DEA60A24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4343B2828241D18D49CED12666F5034D90C1A11663270CCFE62C8E67AE1937D7/0/3230302e3131302e3230382e302f32312d3234203d3e203237383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:de:c5:cd:b4:bf:d5:f4:5a:c1:dc:71:19:99:d4:98:a8:75:
         5d:16:b2:92:44:ab:eb:7e:99:27:45:7f:9b:7d:c4:dc:5a:d4:
         2d:0b:9a:a6:94:f2:a0:a0:d9:64:54:df:92:5d:75:dc:18:68:
         7b:d6:cd:f2:0b:f4:ff:36:ef:f6:ad:7a:1e:91:ce:e1:32:6c:
         72:c5:bc:7e:98:58:d3:16:fc:39:cb:73:3e:78:ed:b6:f8:c0:
         7d:45:ca:51:3f:ea:df:8f:86:7a:3d:d0:0b:13:df:cc:95:6f:
         25:b9:7a:97:d5:ff:4b:fc:1d:f0:36:52:56:45:0d:5d:7f:af:
         ef:7c:a2:de:c9:92:05:25:26:4c:df:68:2c:f4:39:89:1b:99:
         3c:1c:58:97:6b:40:85:6a:58:72:f1:79:2a:f9:1b:a4:b2:d7:
         57:e9:60:ae:0c:83:f5:c6:85:32:26:93:0c:eb:c0:b4:bc:1d:
         44:c1:9c:b8:98:b2:91:bc:0e:0a:6a:41:34:78:54:9b:6c:d9:
         cd:17:2c:77:bb:06:20:7a:21:36:f5:77:d2:bb:4e:47:5e:b3:
         23:4f:4a:1d:d3:51:93:77:71:8e:54:92:46:d5:cc:cc:ed:dc:
         73:67:59:0d:4c:cd:b9:36:71:b7:b9:08:b1:a7:c7:b6:71:8e:
         63:37:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:39 2025 by rpki-client