Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          7NSFBiskOjbGcirRKnBKSbFQm2aO6TeuAlfcvvz0egA=
Subject key identifier:   0C:A2:C0:B7:DB:E1:9E:53:9C:5C:5E:81:44:E5:D9:4A:C2:70:26:F6
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       07FBE8C914527182991966F799716DBC37186362
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:57 +0000
ROA not before:           Tue 04 Feb 2025 20:02:57 +0000
ROA not after:            Tue 03 Feb 2026 20:07:57 +0000
asID:                     13381
IP address blocks:        200.112.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fb:e8:c9:14:52:71:82:99:19:66:f7:99:71:6d:bc:37:18:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:57 2025 GMT
            Not After : Feb  3 20:07:57 2026 GMT
        Subject: CN=0CA2C0B7DBE19E539C5C5E8144E5D94AC27026F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:57:c5:d7:55:92:56:16:c4:97:0f:01:8a:
                    d6:1b:37:18:e6:5c:6e:01:69:f8:a7:59:26:af:6b:
                    7f:16:58:1e:49:a6:07:6a:89:d3:66:67:59:00:3c:
                    71:5f:69:60:79:13:fb:5d:31:81:70:47:58:df:4d:
                    32:74:6f:eb:43:25:09:ba:eb:b3:ba:7f:ba:7b:57:
                    0d:89:5b:8c:9d:99:02:75:6c:7e:e2:5f:4a:aa:9e:
                    e7:c4:82:7e:64:1a:44:6a:4d:cc:96:aa:3d:d1:06:
                    3d:4f:7a:cf:e5:58:86:b7:0c:c6:90:d0:0a:8c:a0:
                    7e:40:b7:13:e9:13:b3:9b:c0:42:f1:c3:09:1f:c0:
                    d5:bd:10:54:0e:a1:16:ee:d0:b8:e2:bf:a0:ea:5e:
                    55:2e:49:ec:76:4a:0f:1b:cf:1c:f8:97:90:01:80:
                    48:53:b3:6e:b4:21:b9:a6:34:0a:d6:37:00:ae:0c:
                    39:cc:9d:ac:f9:14:ea:37:a2:7d:08:45:f8:6d:01:
                    72:2b:ac:15:68:fd:52:fc:ce:80:fb:47:51:41:e2:
                    5a:e9:85:15:06:a2:95:8b:6f:94:19:3c:0c:7e:3d:
                    94:77:41:24:3c:c1:9a:32:b7:d6:68:b8:79:13:9c:
                    20:0d:63:1a:c8:ce:3d:47:f4:2e:fd:7b:65:f2:e3:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A2:C0:B7:DB:E1:9E:53:9C:5C:5E:81:44:E5:D9:4A:C2:70:26:F6
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235312e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:52:ec:6a:af:4f:c3:60:8b:91:59:6e:8f:3a:fe:43:a5:fa:
         36:92:28:5c:64:c6:ba:50:7c:ef:3a:4b:e8:90:d5:df:90:b1:
         b9:33:cc:a0:99:16:b0:bc:11:68:00:8b:89:f3:a0:50:66:1f:
         a8:8b:c4:22:42:37:ad:7f:2e:bf:86:51:c2:f9:2d:77:9d:ca:
         91:1b:eb:90:9f:dd:85:83:06:5f:d8:60:b3:28:e8:83:5d:ed:
         a1:14:e4:4f:4a:83:98:41:82:15:45:c5:2e:35:73:fc:4c:ea:
         9c:24:71:52:54:9a:82:8f:c7:fb:a6:f9:19:7d:80:d7:99:d0:
         94:31:c6:bf:78:e2:03:56:ac:db:04:ff:7d:ab:d3:2f:cd:c4:
         0d:f1:16:83:89:70:28:9f:5c:79:da:7b:a5:40:12:d1:98:4b:
         e5:7a:00:d0:62:fe:7a:11:87:5a:8a:55:d2:aa:a5:3e:22:28:
         f4:70:c0:3b:8c:2a:dc:99:61:86:8a:17:af:50:45:88:bf:23:
         48:9d:94:fc:bc:ee:77:6b:c1:8b:0c:37:15:6e:dd:ba:e5:a9:
         40:b9:b4:f4:9f:a3:3b:da:9f:68:3f:d5:18:0f:e1:87:f8:af:
         65:32:85:0f:de:93:ad:35:c9:7c:cf:b4:3b:29:1a:6f:07:a5:
         0e:b3:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:38 2025 by rpki-client