Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203238303237.roa
File:                     3230302e31302e3134372e302f32342d3234203d3e203238303237.roa (raw, json)
Hash identifier:          vWB5YCBOzMuOIJT53UoIVCBx/fLdBPzxtDb0A9BlfmU=
Subject key identifier:   C0:2F:99:54:D7:17:00:4A:30:DB:65:AE:69:4E:CF:14:B9:53:DB:1C
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       5A0C1429047AD0D6658EF93A46673F66CC77D977
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203238303237.roa
Signing time:             Tue 04 Feb 2025 18:27:13 +0000
ROA not before:           Tue 04 Feb 2025 18:22:13 +0000
ROA not after:            Tue 03 Feb 2026 18:27:13 +0000
asID:                     28027
IP address blocks:        200.10.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:14:29:04:7a:d0:d6:65:8e:f9:3a:46:67:3f:66:cc:77:d9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Feb  4 18:22:13 2025 GMT
            Not After : Feb  3 18:27:13 2026 GMT
        Subject: CN=C02F9954D717004A30DB65AE694ECF14B953DB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:bd:89:a3:c2:f6:c3:8f:08:56:54:6e:81:
                    76:0b:ef:e3:93:4f:f1:69:b8:50:4a:22:60:01:f0:
                    f8:e0:5f:06:8d:21:99:48:6c:13:8b:fd:64:fd:66:
                    88:b7:c8:e3:14:62:a3:f8:61:7c:23:4e:9e:0b:c1:
                    29:cf:ae:4b:50:25:68:28:61:0c:c5:79:c6:90:58:
                    65:f3:f5:f4:75:4d:fa:de:1f:fd:74:c3:1f:39:42:
                    15:12:13:8f:41:f1:cb:00:9b:40:1b:a2:b3:5a:84:
                    ee:40:0e:22:5d:33:43:d4:bc:1c:d3:8a:51:84:46:
                    b0:a6:a8:0a:a6:50:a4:33:ef:77:c3:43:12:47:98:
                    57:82:f9:b4:29:cf:53:2b:4c:5d:19:05:75:d8:99:
                    2b:d1:f1:8c:02:02:fd:70:31:66:a0:af:f2:e9:0d:
                    ca:bf:f0:04:c5:33:7b:cd:90:61:77:de:e7:9f:31:
                    1c:67:e4:c7:b1:b1:39:41:04:e1:dc:55:d3:90:a4:
                    fd:45:a7:2b:89:24:5a:5e:e5:54:4a:52:c8:27:7c:
                    eb:e0:da:09:75:0b:4c:49:79:9b:14:6a:21:87:e7:
                    11:ee:c1:02:1c:4f:bf:b3:38:bd:4b:12:5d:c2:4c:
                    a7:34:f2:4a:f4:94:79:59:3a:91:79:cf:40:17:55:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2F:99:54:D7:17:00:4A:30:DB:65:AE:69:4E:CF:14:B9:53:DB:1C
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:53:28:4d:4c:80:ad:34:c3:56:3f:cd:3b:7e:14:1e:9d:
         3d:1e:79:1f:2d:70:b2:c5:78:1e:b5:27:54:38:e2:38:a4:f5:
         09:d3:61:41:a6:db:68:a6:09:37:d4:a1:62:ed:04:14:98:cc:
         fc:be:41:ee:4e:eb:bf:f7:d0:bb:85:9a:2f:4c:2f:42:21:b1:
         96:d1:f7:67:13:09:7d:09:fa:a4:e1:ea:99:fb:7a:ac:53:63:
         57:33:bd:9c:58:67:a4:11:d7:63:3f:cd:34:e9:75:40:f1:50:
         0b:6d:be:19:3b:ae:eb:92:5e:f2:c7:40:8e:33:15:f2:6a:89:
         4a:df:1e:3b:2d:fc:26:51:8f:a1:2d:7f:a5:4a:b7:d1:98:43:
         f1:b4:23:25:2e:34:bc:80:a6:ac:d7:fc:ee:23:d8:9d:80:df:
         97:b1:cd:bb:e9:18:fe:7d:45:df:06:66:94:90:02:a8:49:5d:
         85:01:cb:a8:ae:67:46:c2:e3:80:18:31:4e:25:20:a0:68:d5:
         55:97:12:58:e8:d0:8a:1f:21:6c:cf:2e:00:18:3d:aa:1a:77:
         43:05:1a:59:fc:3b:e8:4d:d1:e3:a2:9b:71:f0:a3:bf:c7:ee:
         e8:94:8e:1d:7a:db:8f:ba:87:38:11:0f:b4:d0:d7:d1:c4:6d:
         78:e4:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:42 2025 by rpki-client