Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          mcrjNHDIALik9NKZxzy7ynrdMuxlVWdXy+w9T1OTdZs=
Subject key identifier:   38:67:41:B1:35:AC:DC:CC:D0:FE:28:E6:57:C4:47:9E:69:E2:6A:5D
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       333BFB0D803D25BA7BDB4FEE38140BD63C51C72F
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:51 +0000
ROA not before:           Tue 04 Feb 2025 18:01:51 +0000
ROA not after:            Tue 03 Feb 2026 18:06:51 +0000
asID:                     18734
IP address blocks:        189.204.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3b:fb:0d:80:3d:25:ba:7b:db:4f:ee:38:14:0b:d6:3c:51:c7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:51 2025 GMT
            Not After : Feb  3 18:06:51 2026 GMT
        Subject: CN=386741B135ACDCCCD0FE28E657C4479E69E26A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:f1:07:49:58:c5:82:c8:79:0f:8f:15:1b:
                    ee:98:02:39:f9:77:9e:2a:3f:cf:5d:2e:42:6a:f5:
                    b8:b9:da:ac:6d:b6:80:ea:05:f5:9d:2d:97:76:88:
                    d5:1b:a8:72:93:67:d4:9c:c1:92:d1:1d:6b:3a:7a:
                    09:7d:1e:2e:17:ab:57:51:79:52:5a:e9:26:51:ea:
                    56:ea:b9:1f:4e:c7:a8:b6:39:45:d8:01:08:db:04:
                    2c:95:c3:81:40:13:0c:2a:7d:04:57:60:f8:48:ac:
                    36:40:91:16:c1:41:74:1c:62:89:4c:49:9a:34:4f:
                    05:96:8e:c3:1a:c5:8e:97:2b:5e:f8:6c:85:28:44:
                    4b:99:57:d5:21:27:73:f2:92:67:3d:3f:36:75:df:
                    1d:33:35:c7:50:3b:59:7a:ca:a9:23:d0:95:7d:e1:
                    d0:cd:a2:07:f0:cd:85:d5:9c:e9:03:d9:bb:de:e4:
                    10:5d:eb:74:7c:de:fb:13:bd:eb:2d:8f:37:32:af:
                    da:e4:0a:7f:37:de:fd:2c:9e:b0:f7:a4:55:e1:cd:
                    cc:2a:86:19:92:e4:0d:74:2a:4f:74:00:44:5c:18:
                    4e:96:33:22:59:23:92:a4:c9:f2:c1:40:1b:11:72:
                    51:d5:30:3b:b9:73:98:2e:9d:cf:e8:65:82:23:2b:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:41:B1:35:AC:DC:CC:D0:FE:28:E6:57:C4:47:9E:69:E2:6A:5D
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:18:05:58:be:76:ef:ab:86:6d:66:3b:94:21:8b:c2:8a:ca:
         bf:e3:da:55:b5:fb:56:27:05:01:0a:e1:27:14:49:e2:a8:a4:
         01:88:ec:fc:5e:d1:be:e4:03:7e:52:d5:f5:61:9e:fe:cf:d0:
         8b:e8:2e:32:d8:79:ef:44:94:0a:46:4b:7d:7e:50:cd:6d:80:
         fc:19:b5:64:5d:88:46:74:4d:5d:e8:07:45:7c:cc:ca:5b:68:
         6d:03:3a:35:6b:8b:c3:a1:86:69:43:fa:37:7e:ea:1c:eb:d8:
         fb:fe:8d:95:4c:b6:ad:a2:9c:7a:d0:d9:30:34:22:0a:ed:18:
         95:95:cd:af:5b:40:6c:f8:26:ad:94:fc:48:31:85:1a:04:6f:
         88:28:fb:87:7a:67:1a:13:99:a4:a2:a4:87:89:85:82:57:9d:
         5e:14:b8:6b:b6:6e:11:d4:9b:b1:ad:aa:14:9b:7a:63:31:f6:
         56:f9:e2:8b:53:5e:62:9a:06:5d:9d:a8:62:45:fd:f6:0e:d0:
         9d:ab:ec:a6:ab:40:d5:54:fe:da:d0:85:36:49:79:6f:1b:b8:
         4f:bf:b1:a1:03:0d:1d:19:57:c3:0c:79:0f:7c:6c:02:39:2d:
         e2:f8:a9:9a:7e:71:06:86:55:84:b2:e2:8b:23:c7:29:83:2a:
         a4:6f:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:03 2025 by rpki-client