Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3138302e302f32322d3234203d3e203132363834.roa
File:                     3230302e34372e3138302e302f32322d3234203d3e203132363834.roa (raw, json)
Hash identifier:          aa2NUFw9aLUOE0YG/TC5fPUzTBJxCsLF8hR6uJi0m30=
Subject key identifier:   32:F1:8E:CB:59:E5:41:2D:66:52:93:E3:67:C8:D1:72:9B:11:0E:EE
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       4B4C6A86805EED14A5782AD3116FF4259859F48A
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3138302e302f32322d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 19:58:28 +0000
ROA not before:           Tue 04 Feb 2025 19:53:28 +0000
ROA not after:            Tue 03 Feb 2026 19:58:28 +0000
asID:                     12684
IP address blocks:        200.47.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:6a:86:80:5e:ed:14:a5:78:2a:d3:11:6f:f4:25:98:59:f4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Feb  4 19:53:28 2025 GMT
            Not After : Feb  3 19:58:28 2026 GMT
        Subject: CN=32F18ECB59E5412D665293E367C8D1729B110EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f7:8d:04:fb:3d:ed:4a:0f:aa:99:f9:5b:97:
                    1a:70:25:62:a7:59:c6:5a:32:ed:64:42:9b:3a:98:
                    61:31:7e:27:db:6b:27:26:a3:d7:67:6f:b9:a7:66:
                    0e:73:9c:1b:53:35:77:cc:94:16:52:2b:e8:8a:3c:
                    af:41:65:4a:c2:4c:12:c3:67:cf:18:55:27:4e:a9:
                    ba:f7:6f:ee:88:4e:88:c8:f5:de:58:ae:c7:a9:00:
                    e4:e3:d2:26:9f:de:15:74:6f:5b:35:5f:4b:06:93:
                    a0:03:34:9f:d4:05:4f:7f:2d:d9:9e:ca:c5:4d:24:
                    28:4c:ae:19:df:e5:ad:de:2b:86:71:87:34:77:67:
                    ee:79:e4:d0:b0:22:1a:6e:10:16:dd:f5:3e:6b:21:
                    ae:1b:87:98:1c:24:b3:74:9f:e6:f2:0a:8b:75:ad:
                    fd:98:5a:ee:d0:b8:77:1e:d7:90:1b:ec:6d:44:cb:
                    ad:a0:89:67:9f:4d:ba:c4:f2:04:0b:c9:9b:18:d7:
                    e3:e4:af:a3:9a:e0:56:1e:e1:37:ff:49:c5:f1:fb:
                    a5:35:2c:77:a7:81:3f:82:41:79:67:93:e4:22:57:
                    8c:e5:4f:6c:3e:3e:2c:8e:b7:76:85:4e:4d:47:83:
                    4a:14:26:25:69:22:c0:72:ac:7f:70:b6:c4:d3:41:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:8E:CB:59:E5:41:2D:66:52:93:E3:67:C8:D1:72:9B:11:0E:EE
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3138302e302f32322d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:be:1b:00:ef:5e:47:c0:63:45:93:5f:72:6e:77:bd:80:
         40:af:48:bb:1e:e7:da:af:41:41:ab:60:0b:b3:95:8e:e7:af:
         bb:71:2f:ee:ac:aa:5b:d4:9b:9d:8a:f9:37:bd:e7:aa:b4:ff:
         d0:2f:52:cb:13:aa:ed:ee:54:9e:15:d2:7f:6a:4b:ec:e8:4d:
         60:f6:70:a4:da:af:04:73:98:63:f7:30:8d:37:88:71:c7:51:
         cb:55:a7:b0:32:47:31:a2:d3:f0:ef:5e:b8:7a:e7:41:11:e3:
         5a:69:c8:29:4a:47:7f:99:de:71:73:af:15:4c:79:0e:ab:e9:
         79:80:a6:56:3d:70:86:ef:c9:ae:22:be:16:6f:8f:ae:3f:19:
         e7:b1:3d:db:ad:31:c9:c0:b9:3b:b9:e1:92:33:b7:b1:52:9a:
         23:c6:10:59:5f:cd:0d:25:67:2d:d7:48:5a:1e:8d:70:ec:b5:
         dd:6c:ef:1e:07:c5:09:40:4b:d7:3c:44:a2:37:ea:1e:c8:ef:
         77:d7:f2:7d:12:ee:8c:6a:32:d8:9d:1f:08:09:85:3b:7a:76:
         af:67:87:89:26:3d:9f:53:b4:eb:5c:3a:3b:da:f9:da:9c:fa:
         77:f5:50:13:93:f8:40:d0:38:2b:fc:0d:d4:d7:82:15:2d:ba:
         7f:2e:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:45 2025 by rpki-client