Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          AhY89sjPEnABXOV06VSZPLPH7eOaswsdHzLpLzr4u0s=
Subject key identifier:   23:40:6E:86:E6:52:0E:26:8D:C6:3E:83:C7:9B:B6:70:4D:DE:C8:DC
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       58DA2EB2DE31B0A1AC56EE216353B7735475ED11
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:51 +0000
ROA not before:           Tue 04 Feb 2025 20:02:51 +0000
ROA not after:            Tue 03 Feb 2026 20:07:51 +0000
asID:                     13381
IP address blocks:        200.112.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:da:2e:b2:de:31:b0:a1:ac:56:ee:21:63:53:b7:73:54:75:ed:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:51 2025 GMT
            Not After : Feb  3 20:07:51 2026 GMT
        Subject: CN=23406E86E6520E268DC63E83C79BB6704DDEC8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:11:9e:1d:8a:a8:85:bf:25:07:ff:8d:d3:
                    49:8e:1d:ba:25:20:22:62:e2:e8:de:ec:22:70:18:
                    d4:93:0f:b0:32:f9:60:80:86:c5:89:dd:94:a4:9d:
                    d9:89:7c:15:4a:b4:c4:82:07:8b:bb:2c:40:ec:99:
                    3f:00:fd:d5:62:75:29:e4:95:f5:9f:8a:d7:39:22:
                    06:1d:b1:7f:99:bc:74:c9:86:54:60:ef:b8:27:33:
                    e9:07:fa:de:a3:25:26:9c:ae:26:a1:4f:52:b4:b9:
                    54:b3:18:65:12:b3:99:14:1f:0b:f9:be:ef:ab:5e:
                    de:ba:34:10:c3:fa:07:d1:af:1c:d0:bb:fc:cc:8b:
                    6c:ac:fe:7e:b7:2e:3b:b7:61:b3:5e:22:a0:43:05:
                    fc:22:a3:b0:3c:d8:72:2a:9c:6e:f8:74:d5:04:47:
                    f6:d3:48:c6:f1:d8:cf:f7:7b:ab:47:c2:ec:06:fb:
                    a6:a4:b1:36:79:5e:90:be:0a:35:f4:a2:ad:19:84:
                    4d:31:f0:48:67:22:a4:45:84:9d:bd:13:97:f1:f0:
                    c5:ec:06:58:68:ea:d1:aa:a5:e2:42:fb:8a:79:3f:
                    af:7a:b1:96:ea:bc:84:df:16:a3:0a:3e:d0:e4:d7:
                    38:d9:57:ce:cf:79:62:cc:52:b5:ee:9b:6d:ba:a6:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:6E:86:E6:52:0E:26:8D:C6:3E:83:C7:9B:B6:70:4D:DE:C8:DC
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:d3:95:d2:a9:97:cc:44:ac:44:6f:d5:f1:b3:4f:00:c9:
         59:91:c8:e4:1d:00:fa:aa:95:74:90:fb:a6:d6:26:06:0a:6b:
         c8:cc:ac:f7:ec:26:09:8a:fe:16:a9:c6:5b:c7:9c:01:77:f1:
         26:d4:a8:67:da:9b:12:52:be:32:6b:36:24:c7:c2:10:66:08:
         3a:e2:c9:ef:a5:4c:08:3a:d5:2f:45:6e:a2:66:ff:22:b9:15:
         d5:99:35:e7:3c:a2:33:92:88:43:b6:83:ba:d7:be:fb:9b:92:
         b0:32:59:32:04:25:b6:64:65:ea:2a:bc:02:c1:46:cc:5c:ac:
         c2:ec:ce:8f:dd:c6:53:e0:f7:3b:f7:9c:5a:f6:8c:92:11:96:
         1a:e0:c2:ec:bb:e7:db:b1:d4:58:c5:85:2c:ab:46:cb:36:9b:
         50:23:f7:11:55:9a:01:92:55:e0:33:79:f9:f5:d6:5c:fc:6c:
         e3:45:b4:3e:7c:1e:c6:65:2e:b1:78:0a:87:df:fd:72:99:ec:
         45:4f:b0:1b:70:cd:13:95:2c:45:e8:4a:d4:93:38:26:61:3b:
         77:4e:d0:6d:c2:69:23:24:e6:b1:11:17:fc:e2:23:f2:6b:45:
         0d:4d:b1:41:30:70:07:41:ae:4a:05:6f:5b:41:fc:4c:74:ed:
         86:3f:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:19:19 2025 by rpki-client