Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232342e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3232342e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          uoVIsvVjSUa0WxYYJW5f9WqwDrvh+PeTrwbFy3THnmU=
Subject key identifier:   A5:7F:B1:83:5C:83:81:DA:95:A0:28:4E:2C:D2:24:4C:B6:65:B1:83
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       1AAD7E547C6D728C77F8E4C5A48E5DE3E9AB8154
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232342e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:08:00 +0000
ROA not before:           Tue 04 Feb 2025 20:03:00 +0000
ROA not after:            Tue 03 Feb 2026 20:08:00 +0000
asID:                     13381
IP address blocks:        200.112.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:7e:54:7c:6d:72:8c:77:f8:e4:c5:a4:8e:5d:e3:e9:ab:81:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:03:00 2025 GMT
            Not After : Feb  3 20:08:00 2026 GMT
        Subject: CN=A57FB1835C8381DA95A0284E2CD2244CB665B183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:10:6e:3e:88:08:21:f8:cc:7b:a0:86:c6:
                    e9:46:62:ce:af:da:d3:b5:be:d8:8a:02:95:2a:9b:
                    7c:34:c4:bd:48:ab:a1:80:25:32:00:cc:90:66:e6:
                    86:c7:d3:ab:13:b4:01:84:21:c2:f2:44:0e:cf:c0:
                    c9:c0:f8:2f:c2:82:9d:69:0e:25:21:09:bd:5e:cb:
                    4c:a3:5f:72:ac:54:4a:fa:24:2a:fa:a9:91:ed:26:
                    7b:b3:53:f3:07:8f:16:07:03:32:1d:b8:a5:7a:58:
                    08:d1:44:78:b5:de:07:38:70:d3:5c:49:2e:f9:2d:
                    5d:fd:6e:7f:0f:8f:e5:2a:01:b1:9b:1c:6c:93:90:
                    fa:9c:58:5a:b0:a2:5f:31:82:ed:8d:33:3e:b0:ef:
                    24:e4:a1:45:f5:e8:17:7b:31:fb:bf:21:8f:b7:aa:
                    bb:40:d8:f7:de:2e:d2:46:12:6b:3e:ef:a7:35:d0:
                    1b:dc:77:34:77:61:48:21:fa:77:fe:68:89:01:a7:
                    53:f4:f7:3f:17:71:9d:b1:7e:8b:af:2f:a0:f1:b8:
                    0b:d5:79:58:f6:11:ac:28:44:3e:58:44:c7:9c:ea:
                    5a:fe:e7:1a:a2:95:15:c7:22:d7:56:db:f8:1e:df:
                    b3:9c:a8:8b:7a:0f:60:c6:b5:16:41:8d:9d:53:64:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:B1:83:5C:83:81:DA:95:A0:28:4E:2C:D2:24:4C:B6:65:B1:83
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232342e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:10:6c:f8:0d:4f:c5:d5:15:c0:58:de:f3:fd:31:53:75:72:
         e6:a7:15:d5:94:19:bc:1a:3e:07:88:0a:c3:4b:8a:d5:da:78:
         87:d9:36:83:7d:7c:4f:67:c0:da:c9:a8:9c:c6:99:ab:c2:7e:
         cf:88:d8:09:83:97:f9:8d:b9:f7:32:b4:63:e4:c8:11:72:f4:
         bc:f8:9c:a5:c1:0a:89:3a:33:ce:a7:d4:e4:09:a7:2f:63:8a:
         0b:61:55:d8:5e:64:6b:af:c1:dd:c3:f9:93:08:f3:b7:5d:ce:
         52:12:e1:a7:54:47:af:bc:33:7b:11:b0:ad:5a:f5:64:32:53:
         df:be:45:fd:0f:68:ae:92:ec:e8:43:0e:d4:e4:98:6e:32:87:
         27:9d:d1:e2:d6:6d:38:5e:67:c4:6c:53:79:80:37:86:d3:54:
         86:65:b7:26:ba:17:09:a2:cf:92:45:f4:06:ec:6e:82:51:51:
         34:bf:42:33:44:b8:19:86:92:ea:f1:f5:ed:fb:46:e8:08:c7:
         6a:3e:2b:25:04:f5:fc:e7:76:1b:fa:77:b5:9e:4d:7c:de:a1:
         6f:09:86:38:dd:e0:bb:10:e7:73:3e:2c:2e:5e:33:5d:fd:c5:
         bf:f3:8a:0f:67:8b:6a:0c:f4:f4:b9:35:47:b0:0a:5b:0c:a9:
         d8:5c:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:07 2025 by rpki-client