Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203237393437.roa
File:                     3230302e392e3137362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          eMYb597S7XTlFsu/ZQMTEL6pLz74XhPFRKWa47TJSqA=
Subject key identifier:   D1:49:2A:37:C4:AA:9B:93:EE:49:61:92:AE:EC:F3:CA:5A:AF:36:32
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       1B5AD59232FB4F051333BF54138439F743ACE403
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Mar 2025 20:11:20 +0000
ROA not before:           Tue 04 Mar 2025 20:06:20 +0000
ROA not after:            Tue 03 Mar 2026 20:11:20 +0000
asID:                     27947
IP address blocks:        200.9.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5a:d5:92:32:fb:4f:05:13:33:bf:54:13:84:39:f7:43:ac:e4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  4 20:06:20 2025 GMT
            Not After : Mar  3 20:11:20 2026 GMT
        Subject: CN=D1492A37C4AA9B93EE496192AEECF3CA5AAF3632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:ef:9a:d1:a4:7a:82:77:3f:01:67:c5:ac:
                    e5:42:7a:47:78:55:79:c9:ec:7b:db:51:2a:d9:4a:
                    fe:1a:9b:20:25:80:91:ac:ea:f8:ae:99:aa:af:14:
                    24:44:c0:31:b1:2f:56:53:e9:80:c0:89:d8:d6:fc:
                    23:cc:97:7a:fe:2a:14:8d:31:5f:9a:ed:67:b4:ec:
                    95:a0:37:96:10:84:00:4c:e4:c9:55:d2:5b:ae:54:
                    f1:73:2e:a3:99:60:0a:bb:2d:0a:38:b1:27:9c:bd:
                    db:1c:5c:12:7e:60:f0:a0:a2:4c:6a:c7:5f:18:ae:
                    ea:53:7e:8d:b6:38:d0:14:f4:35:60:da:2e:25:63:
                    b8:64:9c:7b:97:50:4c:19:c5:56:eb:8a:a9:8c:6e:
                    4d:30:ca:85:5f:d4:54:7f:4f:4a:65:ce:22:ec:b2:
                    54:fe:bf:48:13:d7:8e:78:c4:57:bc:7a:ef:28:49:
                    f9:fe:bb:7f:7e:8f:ae:da:fa:ba:1a:2e:88:2c:c7:
                    fd:69:e4:76:c9:f7:e8:f4:f3:2f:db:42:13:54:b5:
                    f4:c8:54:20:08:e1:c1:47:8d:cc:1c:29:54:ee:ff:
                    ca:cb:7c:13:35:7e:77:92:ef:33:df:c9:18:1c:db:
                    31:6c:93:46:4c:87:71:3c:b1:4b:ac:d9:9b:e7:96:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:2A:37:C4:AA:9B:93:EE:49:61:92:AE:EC:F3:CA:5A:AF:36:32
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:d3:ee:49:35:de:b7:41:db:4f:c6:d8:0c:c4:a0:60:0f:
         fa:d5:2d:90:b6:7c:aa:23:ce:06:56:35:85:86:2e:62:3b:ac:
         c8:90:44:c0:68:b6:ee:e3:38:1c:7c:ba:31:9f:4c:6b:c8:fb:
         d2:b9:e2:d8:6f:5e:92:88:69:17:e7:92:d1:45:06:3b:a5:23:
         0c:a8:76:d1:a9:50:6e:50:e5:ce:e4:66:4c:bf:70:7c:cc:7f:
         39:18:15:ef:87:c5:a4:8f:86:36:ca:bc:d1:6b:b4:a4:15:63:
         61:66:b2:20:84:79:3b:78:74:3b:f6:64:45:21:69:de:6d:ab:
         e3:19:3d:7b:ff:ab:26:0c:e4:4d:3b:dd:ec:d2:42:19:51:75:
         4c:8d:67:d5:90:4e:9e:90:88:94:76:d2:c0:1b:45:8e:78:71:
         39:4e:a6:d2:7b:10:b4:95:15:6f:4d:de:77:b0:05:da:ee:da:
         25:ca:ab:e0:a1:af:28:66:f9:c6:eb:98:b3:22:23:e2:48:ee:
         c5:55:06:34:f3:b3:f8:73:97:41:e0:36:95:26:71:b7:11:4a:
         53:a3:9b:8e:7c:b4:39:ba:35:5e:e4:de:f0:67:77:b1:11:1e:
         41:9a:47:a0:a9:22:c1:21:62:e4:d6:a3:08:78:e6:73:4c:59:
         5c:01:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:53 2025 by rpki-client