Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          I+zCskzKyrg7tC+qTm5uQWe6w3djw4QRFSaQIhWYK5U=
Subject key identifier:   CF:04:7E:5C:5F:46:52:E9:A1:C1:B2:F0:1A:F9:BA:DA:40:96:A5:B4
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       0E1827AB27EB440A43F5B41FD6A53F0CFDBD6BB3
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:54 +0000
ROA not before:           Tue 04 Feb 2025 20:02:54 +0000
ROA not after:            Tue 03 Feb 2026 20:07:54 +0000
asID:                     13381
IP address blocks:        200.112.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:27:ab:27:eb:44:0a:43:f5:b4:1f:d6:a5:3f:0c:fd:bd:6b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:54 2025 GMT
            Not After : Feb  3 20:07:54 2026 GMT
        Subject: CN=CF047E5C5F4652E9A1C1B2F01AF9BADA4096A5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:e8:d2:76:8f:9a:1a:99:21:2b:76:5d:94:
                    40:75:6e:8d:7c:bc:cc:5b:4c:13:14:a1:71:06:a6:
                    87:a9:13:37:5a:22:40:a0:72:c5:11:44:63:9d:24:
                    27:19:39:56:b9:3f:94:dd:93:c3:7c:44:04:54:a7:
                    25:80:a5:99:20:fa:fd:c0:11:77:d0:d9:17:42:4f:
                    78:a8:53:ba:69:e9:71:bd:57:c7:9a:bc:76:76:cb:
                    f7:a8:60:d5:bf:a2:41:86:de:43:8c:80:cf:55:c6:
                    dd:7b:27:50:49:e2:8d:30:a2:db:68:9c:a0:22:c9:
                    1f:d4:32:9a:9b:64:b0:38:c7:54:86:e7:78:a5:da:
                    62:14:fd:99:64:49:c1:46:7d:05:f2:a2:d5:a1:13:
                    a3:ef:13:b4:fe:8f:31:ca:19:dc:d0:3a:51:c4:a7:
                    e8:7e:09:72:67:c3:a8:e8:48:b1:49:9b:83:13:5f:
                    45:b7:53:ad:a8:88:10:d6:c0:c5:fe:0f:e4:2d:de:
                    42:53:60:ac:c9:76:46:f6:c2:31:e6:33:17:d5:61:
                    e9:6c:99:d5:8e:20:ed:ce:6c:6c:db:41:a9:c4:0a:
                    46:0c:3d:9c:f8:e3:0a:1f:ce:a0:5f:13:28:e3:e7:
                    9f:55:2d:df:ff:91:25:ee:19:34:24:a3:8c:96:2d:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:04:7E:5C:5F:46:52:E9:A1:C1:B2:F0:1A:F9:BA:DA:40:96:A5:B4
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:94:ae:fe:71:c1:bb:75:bc:3c:b2:53:d9:a3:77:0e:d9:
         bf:4c:3f:50:50:30:dd:ea:ec:6e:04:12:f9:16:34:30:5a:74:
         6d:e9:fc:87:7a:b4:ab:41:65:b6:56:f2:1f:62:a7:09:26:15:
         00:2e:e6:40:15:61:37:bf:7e:bd:f0:99:1f:71:17:6e:2c:7a:
         62:22:b2:eb:64:fc:0f:23:c1:7a:91:75:0e:e3:3d:39:ca:bb:
         53:37:0b:ac:9a:8d:f4:16:e3:b6:d6:6c:64:a3:53:ff:da:4c:
         58:b4:5e:94:49:b5:d2:93:c5:e3:cf:2d:89:90:08:47:a9:a1:
         a4:7f:9d:df:27:93:7f:cd:60:7e:60:3b:9b:5c:d6:bd:57:fd:
         5e:5f:b7:1b:ad:f7:12:be:c1:22:a1:1f:11:90:71:62:a3:fa:
         72:f9:a6:cf:36:4b:c6:58:69:fe:e9:d7:c6:1c:60:c4:55:f6:
         af:74:76:0e:ce:6c:5e:83:54:05:9a:f3:28:a3:af:5d:45:4d:
         af:b5:07:55:8d:1f:26:a2:f5:89:d1:1d:74:6b:7d:79:2d:61:
         74:d2:e4:3b:46:75:76:71:a6:d1:91:0f:e6:3a:0c:f3:f3:04:
         0a:14:8e:aa:09:b8:99:06:10:2c:f6:b2:53:b9:3b:b3:65:54:
         10:53:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:12:14 2025 by rpki-client