Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34332e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34332e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          CTHbOt9ambNttU6fOYJiFSvAnUMXzk3Rad8CDYX0FeE=
Subject key identifier:   23:EC:ED:DB:53:3B:7C:3A:CE:33:0B:D4:E4:E7:66:23:11:CD:98:3A
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       68B8E19CC2B564C7B05E0A24F3EEFDE926CAACCA
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34332e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:35 +0000
ROA not before:           Tue 04 Feb 2025 18:01:35 +0000
ROA not after:            Tue 03 Feb 2026 18:06:35 +0000
asID:                     26617
IP address blocks:        200.12.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b8:e1:9c:c2:b5:64:c7:b0:5e:0a:24:f3:ee:fd:e9:26:ca:ac:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:35 2025 GMT
            Not After : Feb  3 18:06:35 2026 GMT
        Subject: CN=23ECEDDB533B7C3ACE330BD4E4E7662311CD983A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:61:b5:52:4e:e1:83:1a:7d:f4:6e:ef:41:6d:
                    cf:d0:2b:d7:93:e4:fd:f0:b9:71:aa:a7:33:17:aa:
                    9d:36:d2:b4:f9:91:18:42:2c:b1:3c:85:c9:99:26:
                    13:44:4d:8e:4e:69:ed:b2:8f:fb:1a:dc:ec:4b:c2:
                    0f:9f:63:66:e9:f0:9e:17:94:74:98:76:da:c2:1f:
                    6c:d8:b6:10:54:7e:a0:ce:9d:7d:d3:c7:ec:90:24:
                    30:9d:80:e7:2e:d7:a0:99:b4:1a:55:e7:28:3e:5e:
                    fe:13:dc:f4:33:c7:b8:37:ce:34:96:f6:f0:4c:ad:
                    13:f4:d9:58:09:57:ff:11:03:48:8c:14:38:74:36:
                    01:02:73:a9:20:d1:0b:c5:e4:0d:f6:ae:b0:cb:b4:
                    69:3f:91:fc:62:24:2a:a1:81:15:1f:ba:c1:df:c5:
                    2d:bb:1f:33:f6:c2:6d:e8:2a:06:a9:ac:1a:49:07:
                    41:a7:4b:6c:20:04:53:ed:f2:12:20:ff:f1:95:9b:
                    ab:63:5e:3d:fc:bd:47:dd:5f:97:c1:00:8d:db:cb:
                    d4:e5:1e:61:23:c9:77:d1:c1:f8:33:a3:c2:62:16:
                    56:b7:34:ef:c2:96:b1:a4:82:c5:07:2a:d4:e6:61:
                    bb:ad:0f:f8:91:43:88:43:6b:c7:07:31:46:64:eb:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:ED:DB:53:3B:7C:3A:CE:33:0B:D4:E4:E7:66:23:11:CD:98:3A
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34332e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:84:3e:75:5d:86:ca:a5:17:d9:b9:59:97:3e:67:79:21:
         d5:8e:9e:e5:3d:12:78:cf:e9:cd:9a:80:d3:5f:48:52:da:14:
         59:f7:d5:37:cf:87:0b:b4:30:2e:57:fa:49:b1:ef:0e:2f:74:
         b5:c1:35:4d:d1:b9:7e:53:c8:3b:a1:0e:08:70:76:52:4e:46:
         34:83:c1:d1:87:45:c3:15:ad:b6:fb:1d:65:59:1d:a0:9e:cc:
         58:c2:e3:d8:23:58:5c:5b:1f:87:64:6e:2b:da:86:5a:d9:cc:
         98:21:73:0e:34:aa:ae:b2:e0:32:c0:9a:9a:ab:bb:cc:a2:70:
         f4:0a:6c:76:a2:85:01:35:3e:74:90:e0:2a:a0:fa:0f:39:bb:
         8d:24:89:9c:06:58:09:54:2f:01:bd:58:01:d6:ec:2f:67:46:
         ad:cd:11:83:75:f7:87:e1:f6:09:a1:86:bb:33:b6:5d:8f:22:
         8f:00:d8:21:c0:0e:33:64:43:92:4c:22:09:eb:bc:e0:fb:38:
         24:05:d3:14:58:27:ac:a5:20:1f:23:e4:e8:6c:24:4f:2a:83:
         bb:71:20:66:22:51:66:86:f0:40:f8:8e:0b:1b:84:28:ca:c2:
         08:e7:44:1c:c9:8b:7d:08:b3:b6:b2:8d:64:81:0f:ff:57:db:
         db:5f:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:06 2025 by rpki-client