Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          6FAk2phWIi/YpLoMWNN99OkEs1hvrfbihnbtH/9aZYw=
Subject key identifier:   2B:2C:67:F0:3C:71:7A:61:21:08:04:E5:A3:84:06:34:A5:9E:29:60
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       5DF7637914085566A796B971A5EC31C2EFAC7472
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:57 +0000
ROA not before:           Tue 04 Feb 2025 20:02:57 +0000
ROA not after:            Tue 03 Feb 2026 20:07:57 +0000
asID:                     13381
IP address blocks:        200.112.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f7:63:79:14:08:55:66:a7:96:b9:71:a5:ec:31:c2:ef:ac:74:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:57 2025 GMT
            Not After : Feb  3 20:07:57 2026 GMT
        Subject: CN=2B2C67F03C717A61210804E5A3840634A59E2960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:f1:c6:ab:20:f0:fb:b0:d6:8b:a4:9b:eb:
                    95:87:8c:2d:6d:80:73:67:6f:8c:fe:83:da:58:bb:
                    de:6d:6d:34:0c:1f:f7:bf:a7:fb:7c:dc:4a:4a:e2:
                    a4:1e:37:95:9b:43:dc:42:e9:98:29:a4:bb:2e:90:
                    37:82:01:15:a0:bd:a8:f5:be:25:1e:28:18:a0:cb:
                    c9:63:0e:6d:1b:ff:34:ae:59:87:d4:2f:90:9b:db:
                    da:24:3c:19:6a:57:b8:a7:6d:a8:32:5f:51:33:2a:
                    80:4b:64:ef:19:4b:73:ea:66:d0:ec:2d:2b:8f:6e:
                    5f:3b:68:f3:c2:f8:54:05:82:f2:24:86:eb:43:b0:
                    a0:27:e6:0f:43:13:53:40:4e:9c:57:bd:dd:2f:51:
                    a2:5a:4a:88:6e:03:10:6c:e6:eb:b0:e4:55:fd:3d:
                    41:68:60:73:25:7d:9b:fb:ca:0f:2d:c2:fa:56:82:
                    be:e8:7e:22:ca:ac:9e:dc:92:83:41:9b:2f:1f:e4:
                    83:a5:cf:aa:8a:f7:cc:51:33:c5:07:ae:f7:be:48:
                    c7:a5:19:85:fd:67:b9:f3:af:17:9b:cf:d1:47:1d:
                    10:d3:ef:a8:66:a2:0b:ba:ae:5e:e1:fc:b9:ff:0f:
                    e1:02:12:ba:c1:d0:02:00:68:8e:ee:de:93:d9:8c:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2C:67:F0:3C:71:7A:61:21:08:04:E5:A3:84:06:34:A5:9E:29:60
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:5a:68:d9:97:5a:27:53:d6:9a:d3:b6:10:1b:95:83:6c:
         42:b2:c4:e7:bf:9f:c3:0b:20:61:9c:10:2d:9f:37:b3:62:9f:
         aa:d8:25:8c:ef:77:9b:e9:db:cf:d2:3b:48:4b:19:4d:12:e8:
         10:c6:a7:fa:7a:de:45:cd:dd:68:f0:eb:d4:73:fa:98:97:dd:
         4f:81:ce:18:de:a7:3f:44:f1:80:10:3c:87:18:61:4f:1d:96:
         86:99:a4:15:44:37:df:61:09:bd:70:57:4c:67:fe:9b:3f:16:
         ea:7c:5c:17:23:55:89:87:f4:f6:11:93:ea:d7:2d:a9:6f:40:
         0a:1b:fa:86:da:88:06:97:51:b1:7b:8d:69:d7:e0:af:75:2e:
         a0:1f:29:7b:73:a7:f7:9d:de:d1:9e:68:e3:3d:8d:de:5a:7c:
         bf:b9:e5:eb:7d:76:e8:db:47:5e:63:cb:89:80:10:59:5a:3f:
         f1:58:4b:2f:fb:93:58:3a:d5:87:26:19:ee:86:aa:0b:39:f9:
         76:6d:89:eb:62:cb:27:03:cc:a7:05:00:fa:5b:f3:ab:4e:84:
         16:58:e4:1a:cc:d7:4e:df:8b:a7:63:ec:46:fb:72:d1:00:6c:
         38:47:2b:3f:5f:c7:93:03:d9:05:d5:18:ec:6d:84:a7:62:b7:
         c7:ec:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:28 2025 by rpki-client