Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136372e302f32342d3234203d3e203236363137.roa
File:                     3230302e33352e3136372e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          vGYGGBmjhuGQHZR8rW3ZxxBidTjo0dSk9O77otb3VqE=
Subject key identifier:   A8:57:49:84:8A:46:BA:23:2D:5C:9A:58:64:85:A5:87:0B:58:D4:FC
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       153CD2C0E06D5E2922FCBAFCE5403F20747DE088
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136372e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:37 +0000
ROA not before:           Tue 04 Feb 2025 18:10:37 +0000
ROA not after:            Tue 03 Feb 2026 18:15:37 +0000
asID:                     26617
IP address blocks:        200.35.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3c:d2:c0:e0:6d:5e:29:22:fc:ba:fc:e5:40:3f:20:74:7d:e0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:37 2025 GMT
            Not After : Feb  3 18:15:37 2026 GMT
        Subject: CN=A85749848A46BA232D5C9A586485A5870B58D4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:43:1a:f5:c3:ce:7c:83:d9:31:17:d6:ab:
                    92:d2:98:86:a1:82:4b:e5:ab:27:e4:f9:fe:b6:19:
                    9b:2a:22:93:51:f4:e2:0d:af:88:7e:89:96:5f:67:
                    a4:b1:d0:90:63:b3:48:95:03:ec:30:af:75:06:3d:
                    e8:50:c3:28:e4:51:3b:f4:88:9f:1b:c9:73:2a:20:
                    90:82:0e:1a:01:50:d0:4b:25:7a:33:5e:07:39:49:
                    6e:75:aa:c4:2d:df:2a:a3:0a:a4:28:6d:ed:9f:07:
                    3a:09:f3:f6:a4:cb:10:7c:dc:06:5c:c2:a6:12:50:
                    74:07:1d:01:02:c2:ea:6e:0c:fc:0d:6f:51:89:a3:
                    c4:95:21:56:9e:f9:d4:83:70:ed:8e:a0:5e:ce:0c:
                    d0:47:71:88:85:96:2b:d7:5b:5f:05:b1:21:50:8a:
                    f3:16:7b:b1:d8:f8:fc:b4:54:27:fe:43:a9:66:50:
                    58:03:13:92:de:4c:51:16:5d:f1:e6:d3:de:81:36:
                    0a:b5:ed:01:2b:92:e3:9d:22:e0:4e:d7:83:c7:ae:
                    df:51:a7:b2:76:fd:6f:97:19:37:1d:b2:38:59:b9:
                    29:0e:fd:60:03:92:89:73:96:21:fa:b1:b5:ed:f1:
                    66:1e:1f:3e:a6:a2:ee:4e:f5:b3:86:9e:de:40:99:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:49:84:8A:46:BA:23:2D:5C:9A:58:64:85:A5:87:0B:58:D4:FC
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136372e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:26:a9:b7:74:ff:59:cc:e2:83:6a:2c:ec:02:cf:e1:c8:
         40:f6:3d:de:bb:94:0a:c7:ca:45:32:35:02:0d:ba:48:29:86:
         80:28:49:fa:f1:d6:f9:80:37:ce:73:05:41:13:78:0b:03:e6:
         c5:6b:aa:66:ed:ed:53:ab:45:63:1f:b0:ff:4b:d4:17:61:9d:
         8b:46:fc:e0:8b:68:41:76:5b:fb:3a:29:87:48:57:cd:4c:8c:
         45:a8:00:48:52:ed:c9:26:63:f6:76:69:08:0a:9a:ba:93:a3:
         c8:10:da:95:df:c6:b6:62:9e:d6:65:ee:99:68:ec:33:95:25:
         5f:dd:33:8b:f6:0a:1f:c2:6e:24:f1:39:ac:16:e2:59:bf:c5:
         d6:9c:90:fe:f2:8b:e4:2f:8f:50:a4:ec:f3:ed:1a:a7:23:ad:
         bc:83:87:62:19:66:80:67:15:b4:f5:99:2e:6f:9a:9a:a0:5a:
         28:0c:c2:21:ba:36:17:14:1f:55:27:a6:82:68:cf:17:0f:dd:
         da:b7:20:c7:4b:80:25:59:b5:f4:85:85:b8:92:17:65:cc:44:
         e6:cc:61:25:a5:f9:c6:3f:06:70:5f:2a:a7:c5:7b:e8:25:3f:
         19:c6:e7:c4:91:a2:d1:47:9b:70:60:82:80:e3:4b:dd:7f:54:
         56:ab:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:08 2025 by rpki-client