Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e3132362e302e302f31392d3234203d3e203238303237.roa
File:                     3230302e3132362e302e302f31392d3234203d3e203238303237.roa (raw, json)
Hash identifier:          4QdJkRkVwO72hs9iuDEzWPyf6bCRVsfeiNBUBzrCm1U=
Subject key identifier:   A8:45:9C:4F:E0:A8:78:9E:B4:7D:96:E8:8E:29:F2:C2:59:40:62:2C
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       7AC7901A059AD5FF3E6FB604F498D7DC800B28EE
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e3132362e302e302f31392d3234203d3e203238303237.roa
Signing time:             Tue 04 Feb 2025 18:27:14 +0000
ROA not before:           Tue 04 Feb 2025 18:22:14 +0000
ROA not after:            Tue 03 Feb 2026 18:27:14 +0000
asID:                     28027
IP address blocks:        200.126.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c7:90:1a:05:9a:d5:ff:3e:6f:b6:04:f4:98:d7:dc:80:0b:28:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Feb  4 18:22:14 2025 GMT
            Not After : Feb  3 18:27:14 2026 GMT
        Subject: CN=A8459C4FE0A8789EB47D96E88E29F2C25940622C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:d4:cf:22:f1:ce:0f:d0:2f:74:cf:b3:59:
                    cb:a0:c4:c2:6e:ea:6a:5d:5e:ee:92:c8:24:2b:fd:
                    76:48:2f:d1:24:4f:b3:79:f6:43:b6:04:f7:4c:b7:
                    5a:dd:c7:0b:3f:fb:56:12:03:6c:38:a9:c8:1d:80:
                    c9:a7:63:80:66:e9:41:87:2d:73:e0:13:7d:b3:e7:
                    f3:ba:d0:91:2f:13:33:4e:11:a2:78:36:ee:f9:2b:
                    46:73:ee:b6:dd:6d:bd:4d:a5:5f:22:e2:aa:01:7e:
                    57:7d:bf:30:11:1d:4f:50:f3:c6:1c:78:13:17:8e:
                    0c:56:d6:83:8f:9d:49:b2:bf:c5:56:99:d9:97:c7:
                    0f:ac:84:17:5f:81:3b:c9:0f:a0:b7:3b:c5:91:ff:
                    d1:5f:ca:e8:e3:9e:ba:c3:d7:6e:10:3c:5d:e8:c5:
                    ad:b1:78:6b:7c:6a:5b:a2:37:51:e1:a0:24:2e:de:
                    f8:7b:b9:71:ed:5b:bd:36:3c:14:ed:8e:82:e3:40:
                    15:f4:9f:0a:2a:d7:20:5c:bd:a3:4f:fa:7f:0d:24:
                    ae:b2:12:e0:01:26:14:ad:fa:11:0e:e9:80:38:5d:
                    a0:7b:f7:1b:af:40:66:3f:07:68:58:6a:38:12:33:
                    7f:06:08:01:20:ac:44:15:6e:75:01:9f:f5:99:51:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:45:9C:4F:E0:A8:78:9E:B4:7D:96:E8:8E:29:F2:C2:59:40:62:2C
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e3132362e302e302f31392d3234203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:31:6d:76:4f:fc:46:2c:e4:4b:15:4b:48:c7:3f:7a:c6:
         a1:83:e7:f9:7f:68:5b:04:c9:37:6d:99:74:07:47:73:22:15:
         8d:bc:61:ff:80:1f:b1:9f:c0:75:89:c7:c7:4c:f7:ca:2d:40:
         78:11:33:5f:b7:09:12:71:2d:69:9d:f2:04:0c:9e:be:b0:9d:
         0a:12:99:ac:ed:77:85:49:3a:58:30:fe:29:fd:02:73:8f:57:
         d8:ea:d0:62:5b:dc:90:f2:38:1f:c0:74:17:01:15:b9:45:b8:
         3b:82:b2:65:ac:8e:f3:ff:bc:7e:d9:dd:1d:19:05:64:0c:cd:
         9c:f4:d9:4d:67:37:55:a4:c4:a0:b2:38:0f:49:6a:fd:86:28:
         ed:ae:0d:57:70:0e:02:64:cd:11:db:a2:f9:fa:ca:3e:2d:2e:
         64:71:b7:e3:28:61:ac:de:9a:1f:00:61:6c:6a:bf:54:4e:e6:
         7b:ba:77:be:68:5a:f1:86:58:05:a8:27:95:74:dc:1e:c1:c2:
         0f:63:3f:9b:f4:2f:80:a5:4f:64:19:dd:c0:aa:19:40:09:f7:
         78:b6:a4:d0:b7:e2:c9:10:e9:ab:05:d1:3f:13:f8:09:36:f2:
         ba:41:41:53:ac:b0:0c:f1:ff:66:fb:e6:e6:0d:70:d5:35:8a:
         18:5a:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:57 2025 by rpki-client