Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38312e302f32342d3234203d3e203237373534.roa
File:                     3230302e34372e38312e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          xwAyEUTAryBPuH7l4ViKBCg6ofPnHCaAHWXBMC4zQhg=
Subject key identifier:   1D:BF:A2:62:D2:45:34:B4:D6:AF:27:C9:98:2C:E2:06:50:4B:1F:8F
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       561EEED689BC6E86A6E1B635DF752B393C7A379F
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38312e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 04 Feb 2025 19:58:28 +0000
ROA not before:           Tue 04 Feb 2025 19:53:28 +0000
ROA not after:            Tue 03 Feb 2026 19:58:28 +0000
asID:                     27754
IP address blocks:        200.47.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1e:ee:d6:89:bc:6e:86:a6:e1:b6:35:df:75:2b:39:3c:7a:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Feb  4 19:53:28 2025 GMT
            Not After : Feb  3 19:58:28 2026 GMT
        Subject: CN=1DBFA262D24534B4D6AF27C9982CE206504B1F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:04:84:28:12:af:31:f1:85:78:10:c0:42:
                    92:fa:cb:74:49:23:4b:c5:12:33:f9:7f:5c:df:ea:
                    4b:9d:93:a8:7c:ee:f3:4a:5c:34:76:6e:7e:e9:86:
                    ec:4e:e7:a2:f1:84:56:3b:ac:b9:ec:02:cd:7d:a2:
                    ef:d5:8c:eb:4a:ef:f2:17:4a:01:6e:4a:60:a4:41:
                    00:db:a2:c5:1f:0b:ba:25:92:1e:bd:d9:75:7f:4d:
                    ca:b7:0c:a2:44:47:fa:bc:e8:45:f5:9b:c2:bc:14:
                    1d:62:ee:86:c1:21:25:1b:5e:7a:91:c2:8e:eb:9e:
                    8e:8a:bf:85:e6:27:32:7c:c4:dc:5a:2c:0d:2c:fa:
                    58:33:95:68:36:b4:b6:03:64:4b:dc:1e:49:ac:b4:
                    5f:32:b6:d0:a8:49:ee:40:3d:0d:5c:8f:40:91:bb:
                    9a:01:5f:c0:0a:73:c0:3c:69:4e:b7:f0:c2:c3:ea:
                    da:4d:9c:27:db:26:03:51:94:3d:53:3a:93:d7:08:
                    d1:35:c0:71:e3:1e:50:28:6c:a0:08:bc:04:b1:62:
                    25:0e:b5:f6:30:e6:9c:07:9f:09:ff:6a:dc:bf:7d:
                    07:aa:4d:04:44:b0:0b:1d:b8:82:40:ba:5c:f7:bb:
                    41:de:68:1e:ab:ce:25:e6:d9:2e:60:fa:c3:b0:72:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:A2:62:D2:45:34:B4:D6:AF:27:C9:98:2C:E2:06:50:4B:1F:8F
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e38312e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:86:28:88:3b:0c:84:e0:b2:88:9d:c0:00:bc:79:fa:15:f4:
         8f:a9:e0:b2:5a:8d:0b:c5:a2:25:15:68:21:9e:0a:b1:c2:99:
         92:97:0c:89:25:4a:3d:1b:d8:d5:9c:7d:df:56:df:65:8c:a8:
         37:f3:dd:6b:98:20:43:10:8b:35:11:3c:b7:32:dc:55:49:99:
         bf:8c:10:84:56:f6:36:d5:5c:f3:b0:56:cb:fb:d8:18:bb:6a:
         28:f4:c9:1d:ae:26:fd:1f:5d:20:6c:24:22:36:8d:74:47:aa:
         f7:a0:f4:cc:e3:05:4e:35:8b:02:4a:71:4a:3b:1b:3b:4c:a6:
         11:84:81:6a:72:c0:8d:81:b2:8c:0b:ad:2e:ae:cb:c2:e5:ff:
         ec:d5:ba:ea:61:fe:b9:3c:a5:7a:94:a0:a5:9d:6e:e1:4c:11:
         f5:de:e1:50:29:7a:21:7e:8d:33:79:f9:2c:21:24:bd:8d:29:
         d2:50:0c:f4:6a:34:a9:2d:e4:59:7c:45:39:37:26:15:78:b9:
         95:c2:50:96:fb:1c:a5:a4:03:9c:8d:73:31:96:18:dc:d7:df:
         31:90:ec:27:02:cc:c4:a9:c5:9b:75:e6:25:61:d5:7a:18:26:
         98:9d:b5:75:7f:7c:82:e0:1e:4b:0d:43:d2:70:93:28:c4:c8:
         58:d3:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:58:42 2025 by rpki-client