Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa
File:                     3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa (raw, json)
Hash identifier:          fG618uftpGRzSlF3A0lpzAHmMYMxYKo7DDpFrAgP03k=
Subject key identifier:   E8:99:48:FC:B5:D9:2C:41:56:1E:AD:8C:60:51:60:9C:32:D4:45:30
Certificate issuer:       /CN=FC1CAABE4461DD15117232677197989DF5BC0939
Certificate serial:       3F1CA93AA97F75A2F0DE2C5C9E149C217E64ECEC
Authority key identifier: FC:1C:AA:BE:44:61:DD:15:11:72:32:67:71:97:98:9D:F5:BC:09:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC1CAABE4461DD15117232677197989DF5BC0939.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa
Signing time:             Tue 04 Feb 2025 18:56:17 +0000
ROA not before:           Tue 04 Feb 2025 18:51:17 +0000
ROA not after:            Tue 03 Feb 2026 18:56:17 +0000
asID:                     269998
IP address blocks:        200.59.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/FC1CAABE4461DD15117232677197989DF5BC0939.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/FC1CAABE4461DD15117232677197989DF5BC0939.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC1CAABE4461DD15117232677197989DF5BC0939.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:a9:3a:a9:7f:75:a2:f0:de:2c:5c:9e:14:9c:21:7e:64:ec:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1CAABE4461DD15117232677197989DF5BC0939
        Validity
            Not Before: Feb  4 18:51:17 2025 GMT
            Not After : Feb  3 18:56:17 2026 GMT
        Subject: CN=E89948FCB5D92C41561EAD8C6051609C32D44530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:89:4b:27:16:cb:65:49:f4:fe:47:a0:26:
                    00:11:38:04:1d:ff:56:2c:6e:54:ee:fa:24:fb:d4:
                    51:9b:28:ab:7a:26:30:c8:89:58:c8:2f:74:48:c7:
                    8d:16:11:34:d6:7b:27:e8:65:32:b1:16:8c:f4:ef:
                    a2:28:66:65:cb:ac:b9:db:76:ef:6a:06:86:8f:a8:
                    3b:9b:c5:98:e8:b3:5c:e8:e2:40:05:87:58:c6:6b:
                    28:41:1a:17:7a:a3:85:03:6a:ed:73:5b:f2:74:96:
                    bb:0c:ba:af:c0:85:a2:5a:85:99:b9:d2:92:2d:b2:
                    fd:a6:bb:81:ac:0a:b1:b3:58:c1:43:0a:f3:3a:4c:
                    8a:da:d4:3a:60:a5:5c:3a:d5:d6:39:e1:2f:72:41:
                    e0:91:43:63:1b:e9:ad:54:ce:c0:b9:79:a2:2f:1b:
                    92:75:22:2a:af:2e:80:7e:9a:88:f7:a9:6e:ec:b8:
                    23:07:ba:33:db:a6:68:a5:6a:f2:c5:b0:c7:d4:56:
                    3c:dd:48:41:ae:5c:1d:40:35:a6:d2:ca:2d:8f:0d:
                    02:50:85:35:4f:6b:86:ef:85:b2:7e:75:c9:d3:53:
                    24:df:5f:16:9c:c9:ae:7a:05:52:a5:e4:09:ec:1b:
                    38:60:ed:e7:4d:f9:1c:55:1b:81:72:2c:7b:a0:94:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:99:48:FC:B5:D9:2C:41:56:1E:AD:8C:60:51:60:9C:32:D4:45:30
            X509v3 Authority Key Identifier:
                keyid:FC:1C:AA:BE:44:61:DD:15:11:72:32:67:71:97:98:9D:F5:BC:09:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/FC1CAABE4461DD15117232677197989DF5BC0939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC1CAABE4461DD15117232677197989DF5BC0939.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:24:d7:2f:09:e7:8a:b0:a1:09:cf:dd:52:85:a3:e0:b5:
         6c:ce:6c:13:ca:ba:c2:de:aa:2c:55:06:82:f3:0e:cc:87:cf:
         3f:b5:e3:bc:95:d5:4d:a6:88:b5:b4:57:c1:b0:9e:dd:14:7b:
         11:21:0e:b8:88:f3:67:6c:fd:3c:50:9a:8e:5b:6c:3d:ed:2a:
         b0:94:55:bc:74:47:a7:bf:7d:5a:27:ab:56:b3:fd:38:ab:6c:
         84:90:72:e9:ec:71:70:13:0b:89:f4:c7:5a:12:8d:c9:8e:1e:
         ae:bf:91:55:af:5f:2d:05:70:bb:33:84:f2:b1:bd:71:cc:f4:
         08:fb:ae:ff:3c:8e:a0:0f:0d:9b:6c:f2:3e:9d:ff:79:15:c2:
         a0:dd:2f:38:43:fa:ca:a9:04:a6:16:93:9e:e4:fa:99:38:7e:
         f6:2b:6f:1d:44:2f:14:97:c7:8a:8a:b0:f7:dc:6c:f2:11:17:
         47:8e:af:a2:a5:36:4e:58:76:42:2b:ad:07:10:62:16:eb:6a:
         c4:ad:38:d2:24:d8:27:b0:69:e0:65:fe:77:2b:c5:9d:4a:81:
         b4:31:4d:57:79:bf:ef:f4:25:74:56:e4:08:c3:20:9f:ab:31:
         05:e9:a4:d0:6c:e3:e1:b0:ea:71:6b:7a:96:d2:9b:9e:b2:1c:
         3c:bb:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:45 2025 by rpki-client