Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230302e33392e3230302e302f32312d3234203d3e203131313732.roa
File:                     3230302e33392e3230302e302f32312d3234203d3e203131313732.roa (raw, json)
Hash identifier:          ApPHWghdemJfq4Jpa+QvaZj3QpWbSvRy+MwalU+gCN4=
Subject key identifier:   E5:43:89:7B:7F:EA:AC:D8:01:B5:26:89:9A:AF:7A:CA:8D:0E:4A:21
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       2F1B222AB8ACB382CF3BF8BA436C08DD69BF5F05
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230302e33392e3230302e302f32312d3234203d3e203131313732.roa
Signing time:             Tue 03 Jun 2025 21:25:00 +0000
ROA not before:           Tue 03 Jun 2025 21:20:00 +0000
ROA not after:            Tue 02 Jun 2026 21:25:00 +0000
asID:                     11172
IP address blocks:        200.39.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 13:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1b:22:2a:b8:ac:b3:82:cf:3b:f8:ba:43:6c:08:dd:69:bf:5f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: Jun  3 21:20:00 2025 GMT
            Not After : Jun  2 21:25:00 2026 GMT
        Subject: CN=E543897B7FEAACD801B526899AAF7ACA8D0E4A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:11:e3:1d:8b:b4:5c:25:8a:8f:21:54:63:
                    42:9d:dc:a9:99:42:e0:74:84:78:57:6f:7d:c0:23:
                    68:14:56:7e:76:f6:ab:72:50:f1:98:1a:44:6c:e9:
                    f8:b7:15:a6:90:cb:27:54:f5:b1:80:33:0a:4a:72:
                    ff:16:69:49:9b:17:2d:ea:e2:ed:58:93:c7:fd:04:
                    50:57:47:2a:48:69:04:78:95:30:f9:e8:6d:6f:b3:
                    bc:92:5f:1f:ea:b3:8f:10:09:16:34:85:96:d2:5b:
                    5b:c2:33:5f:55:d8:9d:8f:54:6d:3c:5e:5f:0c:18:
                    27:70:d8:a1:b5:39:84:cd:fe:0e:b3:d3:51:e3:3b:
                    69:35:2f:b3:d4:82:c9:6f:f3:7c:a7:9f:14:34:aa:
                    dc:4b:24:81:2e:bb:93:68:84:b7:70:32:4d:fc:d1:
                    59:2b:35:e0:af:45:50:15:21:79:bf:1b:99:c8:92:
                    54:01:41:9b:11:84:42:5a:61:81:5b:8a:b1:62:10:
                    89:63:6f:ac:1d:94:3d:8d:12:8a:38:7d:f2:d7:73:
                    09:84:2b:ab:c6:91:3f:63:bd:74:e6:a7:58:26:f0:
                    2f:82:5f:16:35:82:f9:eb:cd:dc:e9:48:b6:1a:b6:
                    c2:97:7b:3d:9f:69:c8:a7:06:10:79:85:f1:a3:a4:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:89:7B:7F:EA:AC:D8:01:B5:26:89:9A:AF:7A:CA:8D:0E:4A:21
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230302e33392e3230302e302f32312d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:52:b3:0d:dc:cc:57:37:9a:c4:f1:e4:3c:19:fb:de:3f:c2:
         01:cf:d1:47:ed:db:3d:81:a1:f5:5f:1e:d0:48:48:f8:36:db:
         a8:1d:a9:6b:ac:ca:c5:4d:77:05:db:13:e2:c6:0a:a0:e0:13:
         f2:98:a0:74:6a:0c:3d:e3:e1:af:d1:82:f2:c8:26:cc:bd:7e:
         73:8b:64:46:ec:33:42:a6:5f:2f:3d:6d:fc:67:45:7c:09:1c:
         53:e0:05:8e:93:1d:1b:2a:40:01:d2:78:02:0b:f8:e6:0f:20:
         71:62:71:aa:e8:92:4a:88:2f:a9:b5:57:2e:31:4a:00:b8:8d:
         9a:da:a0:77:78:04:83:c1:17:b8:45:fa:bd:c4:b4:fd:ac:f2:
         ce:29:2c:a8:75:67:95:ab:92:72:b2:2d:f3:6e:20:cc:a9:a5:
         a1:fc:d2:da:7c:0f:51:41:7c:d2:9f:35:8d:42:48:2f:83:0e:
         15:86:9a:fb:d2:5d:7a:e3:e0:12:6e:11:48:08:bc:1e:7e:ee:
         59:be:79:8e:86:5e:4d:6c:43:89:a6:68:a4:8a:ac:2f:9a:16:
         7f:25:ea:ff:38:08:a9:23:88:f3:be:fe:12:57:b3:0b:ca:2b:
         3d:72:4b:24:25:1b:94:84:7a:93:3b:30:cc:7c:c1:eb:28:14:
         b7:7e:cc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:55:52 2025 by rpki-client