Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34302e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          +pxthdNNQ5aFfa5FE0Y5L5AkJEYnt3e/9Zw3TYX+T/w=
Subject key identifier:   F2:AD:13:D1:87:1E:17:DF:C5:67:56:76:CA:40:C0:3F:4A:05:70:DF
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       208D39E7AABE84A50447462BC170738ACC325D6E
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:30 +0000
ROA not before:           Tue 04 Feb 2025 18:01:30 +0000
ROA not after:            Tue 03 Feb 2026 18:06:30 +0000
asID:                     26617
IP address blocks:        200.12.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8d:39:e7:aa:be:84:a5:04:47:46:2b:c1:70:73:8a:cc:32:5d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:30 2025 GMT
            Not After : Feb  3 18:06:30 2026 GMT
        Subject: CN=F2AD13D1871E17DFC5675676CA40C03F4A0570DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:a6:04:a1:dd:f4:a7:be:c3:b6:a8:b2:dd:
                    2b:97:a2:74:e0:77:ca:e2:fe:62:81:7f:56:91:08:
                    ba:ec:b7:4a:74:ff:fe:4e:cd:3b:1b:2c:a5:29:41:
                    14:a4:57:fb:cd:25:83:75:94:7f:8c:12:07:42:7d:
                    dd:7e:a6:ba:25:2f:0f:7f:a8:22:32:fe:37:bc:9b:
                    16:e7:0a:85:48:47:ac:55:21:98:80:93:5c:8b:86:
                    15:e9:35:9d:62:39:fe:65:0b:cd:6c:7f:40:ef:06:
                    ae:58:54:2c:1b:50:2f:fb:cd:3c:3b:42:e3:43:6b:
                    fb:54:38:01:08:c9:24:84:79:1b:14:58:f4:33:4d:
                    1b:d2:15:ac:93:b5:07:a2:75:6d:0b:0f:47:d9:60:
                    96:e9:8a:bd:14:c5:84:72:c2:fb:08:79:d9:92:da:
                    44:ef:e4:27:86:70:b6:dd:40:d4:ab:88:70:aa:8a:
                    c3:d1:ec:77:3a:0a:68:34:49:28:d7:f4:ac:be:ea:
                    06:79:d8:51:71:99:f9:0d:99:ba:2d:0b:86:95:1b:
                    9b:fa:d4:9d:e3:96:50:92:15:b3:cb:5f:73:eb:82:
                    ff:e3:7e:a1:ad:6b:36:f1:fe:b0:29:cf:29:de:b5:
                    f5:62:c2:7f:89:ca:25:89:4e:5d:b0:33:bd:c7:95:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AD:13:D1:87:1E:17:DF:C5:67:56:76:CA:40:C0:3F:4A:05:70:DF
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:d8:e4:12:de:5d:a4:f2:58:66:ab:da:1c:b3:4b:74:77:00:
         6a:2c:df:e3:72:ee:f1:70:ec:6e:ee:8f:49:c2:b0:95:a8:48:
         14:d4:04:71:7b:6d:4b:f4:d2:66:df:69:e3:7e:7f:2b:8a:10:
         27:4a:cd:eb:15:1d:45:ef:48:e7:48:d5:75:76:51:36:9a:9e:
         11:e2:5e:5b:01:b2:01:b8:d8:45:a9:51:9d:6d:f0:47:43:79:
         36:9e:4a:e1:64:0a:cd:05:3a:10:a4:ee:32:3d:8e:90:8f:a2:
         4a:55:c5:05:52:31:2a:76:29:53:47:68:33:db:b2:7b:fc:8a:
         49:b7:40:01:2a:91:09:64:b6:c1:3d:ea:db:8d:d2:d4:6e:99:
         bf:a7:fa:bd:7d:5a:62:0a:1b:c0:c9:86:44:7b:aa:61:fd:25:
         91:bf:81:f2:11:b1:df:a7:62:8a:46:60:98:1a:5c:3b:1e:d1:
         6d:37:6b:1d:e5:9b:29:17:78:81:1a:ef:77:05:ab:66:ef:ee:
         75:fd:0a:8d:80:71:37:43:f4:f0:5d:e4:4c:3e:e7:5b:4b:6b:
         be:06:26:0b:f9:58:e2:f7:1d:f8:e2:aa:af:4a:7d:71:73:47:
         02:2f:d8:07:96:31:89:71:eb:b7:88:61:28:a1:b5:5c:27:86:
         4f:da:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:02 2025 by rpki-client