Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e382e302f32342d3234203d3e203138373334.roa
File:                     3230302e35372e382e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          JZHAUfIQyEElzKsDm0w5Jiz8WJ8ejs3ciXsVuvU5oQU=
Subject key identifier:   AA:4D:60:4E:17:5B:F8:54:9C:1F:2B:F1:18:36:17:AA:24:B1:E7:52
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       37C11B76FB8A2719F2B4D55DCEF4B4DB7F0EBEE2
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e382e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:49 +0000
ROA not before:           Tue 04 Feb 2025 18:01:49 +0000
ROA not after:            Tue 03 Feb 2026 18:06:49 +0000
asID:                     18734
IP address blocks:        200.57.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c1:1b:76:fb:8a:27:19:f2:b4:d5:5d:ce:f4:b4:db:7f:0e:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:49 2025 GMT
            Not After : Feb  3 18:06:49 2026 GMT
        Subject: CN=AA4D604E175BF8549C1F2BF1183617AA24B1E752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:16:55:29:de:25:cb:b7:26:1c:7c:6a:80:
                    89:d7:27:8f:ab:b1:8f:b9:fb:ff:f5:84:64:66:f8:
                    c1:c1:d1:77:6c:61:bf:ca:74:83:c1:04:28:18:df:
                    7f:67:32:5d:e0:25:37:dd:b3:d1:9b:f5:0f:54:fd:
                    2f:cf:35:55:3b:eb:1d:e2:5d:9b:7c:05:3b:1b:20:
                    f3:7d:23:21:e1:6d:5f:37:31:e3:38:63:f3:4e:4b:
                    f8:d0:45:7b:60:69:85:f0:6d:29:42:cb:91:11:df:
                    45:3c:f4:6d:04:47:ec:25:85:38:a1:f2:ca:6c:5c:
                    f2:fa:72:8d:55:f9:25:b3:d9:9c:30:30:ec:27:0a:
                    f3:d4:e6:ff:ea:e9:80:74:ca:55:89:78:6f:76:3e:
                    7b:a5:bb:4f:b8:56:13:1f:75:50:bb:3f:a7:16:fe:
                    15:b0:ef:b2:21:8b:62:00:bd:11:d3:6b:8e:84:ee:
                    21:46:e3:2f:8d:f2:d7:47:fa:fd:63:65:72:2c:3f:
                    9c:d1:6d:51:e2:6f:74:62:c8:44:52:a8:7c:c6:fb:
                    97:c7:26:85:cf:7c:96:a4:90:4d:4e:a2:ea:1a:30:
                    53:2c:44:51:5d:24:71:b0:5c:7c:bc:4c:a2:70:07:
                    17:90:2f:c7:7c:eb:6f:2d:2e:7f:d6:cc:c1:28:c3:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:60:4E:17:5B:F8:54:9C:1F:2B:F1:18:36:17:AA:24:B1:E7:52
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e382e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:15:69:e5:d1:13:e2:1f:9f:12:21:0a:fc:a4:68:28:71:
         a2:66:19:bb:d1:5e:5e:6c:b4:04:09:e1:76:78:b2:21:98:0d:
         1d:8d:af:73:82:64:e8:d6:52:d9:6c:89:11:f7:5a:c2:75:34:
         aa:3b:53:6b:3e:ae:ed:1c:ef:44:a9:c7:36:35:0e:da:a4:c1:
         8e:d3:a3:d2:58:4c:dc:78:d7:c5:ec:60:a5:1c:48:1f:37:1a:
         99:4b:1e:2c:a9:5c:4f:d0:a2:d7:5d:b8:33:58:01:5c:04:bb:
         ac:c4:9a:d2:b5:61:3d:2b:2c:f3:61:40:ae:b4:2d:f0:7c:20:
         81:60:62:18:de:5e:b9:4f:b4:95:7b:ca:0e:c9:3e:8b:97:20:
         35:8c:7d:4e:ce:c2:10:33:38:80:df:e6:f4:f4:20:d2:ca:67:
         7b:49:33:d9:71:57:53:16:ab:32:2b:0c:73:22:cb:3f:ad:71:
         54:93:b3:72:8c:ea:b2:e1:56:25:a9:e0:d2:af:8c:fc:fc:39:
         ba:45:d8:2e:86:e5:3d:ef:38:9d:f0:6f:a2:82:9a:d8:76:27:
         4e:ce:fe:ea:5a:9d:5d:5a:85:20:51:68:37:bb:e0:c5:c7:a4:
         42:7f:7c:63:ef:5f:73:03:4f:1b:06:ce:5b:02:29:36:5e:7c:
         50:a5:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:47:09 2025 by rpki-client