Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
File:                     3230302e33332e38352e302f32342d3234203d3e20323633383331.roa (raw, json)
Hash identifier:          N5hqEUHb/6LYVVtfpmZiZgL2Tn+GrbwUCZFd5hvcmbA=
Subject key identifier:   EC:78:3C:C0:94:50:E0:DF:38:38:8A:86:DE:89:E9:70:E6:20:31:7A
Certificate issuer:       /CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Certificate serial:       5EFC81DBC68B4BE1D0EE583CB5B70E45B8C537A7
Authority key identifier: DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
Signing time:             Tue 04 Feb 2025 18:03:48 +0000
ROA not before:           Tue 04 Feb 2025 17:58:48 +0000
ROA not after:            Tue 03 Feb 2026 18:03:48 +0000
asID:                     263831
IP address blocks:        200.33.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fc:81:db:c6:8b:4b:e1:d0:ee:58:3c:b5:b7:0e:45:b8:c5:37:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
        Validity
            Not Before: Feb  4 17:58:48 2025 GMT
            Not After : Feb  3 18:03:48 2026 GMT
        Subject: CN=EC783CC09450E0DF38388A86DE89E970E620317A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:19:ed:11:ea:1b:ef:b3:cf:a2:31:77:a3:
                    8d:19:39:75:f5:e2:0a:52:04:7a:f5:c8:47:9d:03:
                    3e:f2:1f:c2:f0:a5:fb:d8:69:bd:46:80:24:a3:11:
                    1d:8b:96:9a:d1:09:13:40:89:ad:40:3c:e3:3a:68:
                    4d:cd:d2:83:b7:06:9d:24:66:40:44:6a:78:48:14:
                    06:1e:e6:d7:d7:bb:9e:2e:d1:f2:91:a6:28:63:c1:
                    85:56:7d:2f:55:2a:87:58:24:04:8c:20:d7:bb:bc:
                    94:d0:ac:43:52:83:70:96:5d:d5:f2:4c:a2:13:46:
                    37:b4:4e:6b:82:6f:86:b6:ce:85:9f:6c:93:d1:af:
                    8d:46:fd:41:2b:23:0c:db:f4:be:45:13:aa:2a:d1:
                    75:23:99:c4:35:32:1d:fb:64:36:54:4b:c1:d3:80:
                    0a:ec:a5:c9:ff:ed:29:f8:17:ab:b0:4e:b7:aa:cb:
                    c4:d5:82:4f:fa:9d:84:3e:bf:f1:26:4a:28:d6:e3:
                    73:b8:46:7a:87:cb:9f:9a:78:ad:79:36:f8:c5:03:
                    f8:d8:24:e6:49:24:fe:90:ea:53:4f:6b:33:48:71:
                    c8:e1:8d:8d:92:a8:3e:1a:ef:72:28:73:bc:1d:e2:
                    e9:e3:8a:f9:6a:dd:1a:f3:db:aa:93:a3:13:1f:d1:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:3C:C0:94:50:E0:DF:38:38:8A:86:DE:89:E9:70:E6:20:31:7A
            X509v3 Authority Key Identifier:
                keyid:DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:b2:f9:94:5b:df:44:73:18:b5:d7:20:4a:91:e9:67:36:
         e7:7c:dd:71:78:5d:a9:23:45:95:b0:3d:31:b3:ce:66:d1:f5:
         a0:fa:38:ea:11:40:8f:d5:44:15:ae:fe:0d:c6:ec:b8:d7:95:
         22:26:69:a1:06:8c:3b:14:cf:09:14:59:99:48:f8:f2:b2:85:
         11:5e:ec:32:fe:d8:36:a0:f3:04:d1:23:3a:72:ee:3a:b2:24:
         a2:28:c7:83:85:23:48:b4:cd:8f:ae:13:97:5b:3a:5b:49:97:
         ee:01:67:db:94:b2:ea:4f:fa:3b:fb:7c:0f:97:36:38:1f:ce:
         69:86:52:17:64:e0:1d:1b:15:82:eb:82:a4:a4:ee:8c:78:64:
         24:ae:ff:cf:5e:3a:06:45:c5:6b:b2:1e:7e:29:58:d4:bf:a3:
         5c:7d:a3:12:e9:fa:c1:2b:a4:c6:63:41:23:48:13:a5:b3:da:
         93:56:d6:00:3d:2e:43:3c:28:f0:02:0c:93:01:5d:17:ff:05:
         f5:d2:32:bd:79:d0:98:2e:8e:74:d7:b9:ec:07:83:03:24:86:
         5a:63:c6:f9:1b:20:10:75:3e:b1:af:31:d8:15:9d:a2:c5:23:
         b5:e5:e9:d7:3c:3e:6d:37:b6:f8:5e:62:4d:22:58:c4:d5:19:
         69:a7:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:14:25 2025 by rpki-client