Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e33332e38342e302f32342d3234203d3e203138373334.roa
File:                     3230302e33332e38342e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          yYdO6pd3sexyKUBqr49dKrpWwVB6pWJ++2Qg0LQLHF8=
Subject key identifier:   D8:B4:64:14:D1:28:96:F5:EB:DF:9C:1F:30:69:B8:4D:DA:C7:C6:4B
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       625B3E25EEBF92B98592161256BAC4194EC00700
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e33332e38342e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:54 +0000
ROA not before:           Tue 04 Feb 2025 18:01:54 +0000
ROA not after:            Tue 03 Feb 2026 18:06:54 +0000
asID:                     18734
IP address blocks:        200.33.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5b:3e:25:ee:bf:92:b9:85:92:16:12:56:ba:c4:19:4e:c0:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:54 2025 GMT
            Not After : Feb  3 18:06:54 2026 GMT
        Subject: CN=D8B46414D12896F5EBDF9C1F3069B84DDAC7C64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:f0:3b:b2:ac:9f:17:ab:cf:6b:65:61:da:
                    67:17:e2:0a:35:6a:ed:9c:54:37:05:34:2d:36:a7:
                    3e:b6:f0:fd:6a:0f:20:39:ab:23:d7:bc:86:fc:16:
                    de:3e:86:00:bc:bb:c8:66:1a:d2:e4:f0:e0:21:9b:
                    cd:09:76:fb:43:d8:bf:e5:af:9e:3e:6e:ac:74:a4:
                    8d:32:26:99:10:95:bc:24:7c:c5:11:3c:cc:be:8c:
                    de:51:dc:31:ea:f3:02:69:13:0b:89:b2:13:94:4d:
                    ea:dd:a3:61:5e:92:33:34:f8:67:cc:58:8a:ca:96:
                    53:cd:51:b6:4b:a9:07:46:43:a3:70:82:4e:a4:bf:
                    2d:d6:23:7e:9e:7a:dd:9f:2c:32:fc:0d:87:f4:ce:
                    26:f3:77:ab:06:a8:43:90:91:e5:6f:a9:94:ee:c3:
                    48:76:14:8e:b1:a3:42:f3:a5:71:a1:c5:bb:23:03:
                    23:94:b5:1d:4a:01:30:a8:05:b2:dd:05:e6:e5:33:
                    fd:91:a0:3c:78:e1:4e:87:72:a2:57:53:82:7e:c3:
                    d6:1b:3f:60:80:00:5e:4c:90:2f:e8:36:20:47:26:
                    03:b1:fa:26:ad:56:0e:58:1a:8d:43:56:b8:5c:88:
                    45:83:94:b1:35:54:93:6e:7d:37:57:c4:f2:e6:86:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B4:64:14:D1:28:96:F5:EB:DF:9C:1F:30:69:B8:4D:DA:C7:C6:4B
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e33332e38342e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:28:d9:88:ba:ed:e4:06:b0:e4:31:10:14:f7:65:5c:04:
         6e:e5:e8:53:07:a1:bc:cc:f3:dc:a6:02:e9:c6:71:03:98:d9:
         1d:67:7c:cc:6b:27:d7:f1:d8:a9:b5:25:2f:36:bc:bd:d9:8b:
         bb:1c:14:59:a7:91:bc:47:be:54:7a:b0:12:79:67:5f:f4:b9:
         3f:ce:8f:58:94:b1:a4:6f:05:c9:08:9d:fe:a9:da:5b:ab:9e:
         40:05:40:a8:c6:9e:0d:bd:34:46:dd:af:52:83:f3:c6:90:31:
         e1:28:3d:75:cb:64:2e:18:45:f9:df:55:ce:e3:ce:36:ce:16:
         db:78:dc:d6:e0:91:c4:91:91:e1:64:16:57:c1:fc:cc:d8:68:
         90:43:11:c9:ae:25:76:50:b3:e3:1b:ec:46:aa:f0:92:65:da:
         d2:ff:c8:15:3e:ce:2d:12:a6:3d:85:66:15:8c:07:6d:4a:96:
         22:0c:b6:10:cd:8b:b5:47:61:ba:58:f2:af:98:c2:ff:ed:04:
         07:97:b5:4c:6b:5d:a6:2f:a8:cb:00:28:25:a4:17:85:3e:bb:
         f3:57:a8:dc:4c:0a:91:4a:63:dd:60:60:c2:ca:63:30:c1:65:
         93:b8:d0:59:07:9f:fd:d4:10:51:ff:d9:e9:1d:30:06:15:f9:
         62:83:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:41 2025 by rpki-client