Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34372e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e34372e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          sm7YI/Lb5ji7BCf5+dfFFY0vDZ52NsiKlp5KWv2U9zo=
Subject key identifier:   29:07:AF:B3:4D:FC:DE:3A:CE:97:36:CD:0D:A9:AB:E5:3E:63:83:52
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       31003ED4686B13D61E5D6CC5DBC033EC12DA051A
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34372e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:06:35 +0000
ROA not before:           Tue 04 Feb 2025 18:01:35 +0000
ROA not after:            Tue 03 Feb 2026 18:06:35 +0000
asID:                     23243
IP address blocks:        200.12.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:3e:d4:68:6b:13:d6:1e:5d:6c:c5:db:c0:33:ec:12:da:05:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:35 2025 GMT
            Not After : Feb  3 18:06:35 2026 GMT
        Subject: CN=2907AFB34DFCDE3ACE9736CD0DA9ABE53E638352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:8b:3f:3b:9a:33:a1:be:d8:fc:22:ab:e1:
                    64:d3:28:39:0c:f3:73:5e:79:5d:7c:d4:53:9a:b3:
                    be:96:a7:41:91:95:a1:20:e8:fe:60:80:5b:88:68:
                    8b:98:93:a7:ed:4a:4d:53:6f:78:19:28:f6:dc:79:
                    dc:3f:d7:c3:0b:4b:ec:60:96:e2:0f:ed:c3:53:f5:
                    c5:db:6f:4e:61:67:9d:78:ce:bb:b8:a7:34:ea:4e:
                    09:a9:da:fa:ce:3f:10:02:9c:91:bd:fe:f3:70:79:
                    dc:a2:29:4d:28:9a:86:43:17:bf:3e:cc:20:9a:9b:
                    24:24:7e:db:6a:cc:55:96:7e:42:8f:f4:61:22:04:
                    fe:17:2a:d2:01:20:f3:ca:4f:29:79:6b:5f:5f:1d:
                    62:d8:41:b8:9b:02:47:9b:d6:b2:81:55:6f:52:0f:
                    10:7b:59:d0:a5:ef:db:9b:5a:15:24:21:5b:d0:94:
                    3a:a7:f0:55:35:65:6e:74:5c:7e:41:6e:14:44:bd:
                    50:80:76:6c:07:d2:39:b6:d0:05:8a:ad:55:9b:aa:
                    69:e3:2e:0d:6b:3c:e0:69:2d:8a:87:ad:c3:0c:03:
                    cf:79:5d:61:99:8e:5c:7c:e1:64:bc:14:91:07:aa:
                    b8:d5:d3:16:fe:10:4c:bb:11:c1:d5:6d:93:b8:55:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:07:AF:B3:4D:FC:DE:3A:CE:97:36:CD:0D:A9:AB:E5:3E:63:83:52
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34372e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:90:d9:f8:1f:e1:1d:3d:45:57:ea:c5:ab:64:0b:68:2c:55:
         19:55:cc:8f:e6:a4:59:0a:d2:f9:b7:0b:7b:74:cc:20:27:36:
         a7:64:74:a8:d3:25:78:cf:1c:a8:67:47:9b:05:d9:1b:ff:ac:
         83:3c:35:cf:8a:e8:5e:cf:55:61:57:fc:b4:5e:96:63:db:8f:
         23:79:a8:76:8a:7b:ef:8e:64:5b:c3:24:83:7a:97:be:51:1b:
         be:c9:98:23:9b:88:d9:19:1d:00:05:69:93:ad:a1:52:f4:57:
         d8:04:4c:80:e9:a1:ca:7a:0a:0b:bd:0e:24:1c:4d:cc:4c:3d:
         5c:e2:a9:db:e5:30:05:87:8b:90:f9:73:e3:68:d4:a6:ff:fc:
         bb:99:94:46:84:37:9a:f7:7b:8a:7c:e6:7d:bb:a7:c9:0d:f0:
         39:43:5e:36:d7:ad:8d:e5:2f:e2:ed:c4:94:2f:14:6b:49:66:
         c2:31:d2:12:37:39:9c:35:b7:49:5c:2e:66:38:c2:5b:58:89:
         79:a6:60:13:94:20:f2:65:64:55:5c:07:69:16:97:18:72:66:
         ba:25:b7:31:ea:dd:6f:2d:d0:32:22:96:67:e4:aa:f0:12:6c:
         2c:b5:da:ad:ff:53:24:f6:30:03:e9:3a:3b:37:ce:db:57:7b:
         d8:30:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:28 2025 by rpki-client