Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e36302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          riEhA5HpDWMq2cZ9vO1KROPnpkz6oqZSAyY6t8EtGkE=
Subject key identifier:   04:90:0D:4C:DD:EA:4F:AC:83:BE:F2:F7:21:DD:E4:C8:41:30:45:6B
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       3A625C5F2250F2D8CFDBFA6D0EAE1C70BFD9DED3
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:09 +0000
ROA not before:           Tue 04 Feb 2025 20:00:09 +0000
ROA not after:            Tue 03 Feb 2026 20:05:09 +0000
asID:                     6147
IP address blocks:        200.60.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:62:5c:5f:22:50:f2:d8:cf:db:fa:6d:0e:ae:1c:70:bf:d9:de:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:09 2025 GMT
            Not After : Feb  3 20:05:09 2026 GMT
        Subject: CN=04900D4CDDEA4FAC83BEF2F721DDE4C84130456B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:6c:ad:7e:50:69:94:20:3d:ef:97:25:ee:
                    a9:9d:11:01:84:92:f6:43:19:ad:ed:ac:5c:0e:d9:
                    d7:c2:f4:5a:56:45:5e:15:c6:b4:97:c7:20:e0:bf:
                    4e:17:c4:df:f2:33:42:af:c9:8e:54:3f:77:1e:70:
                    26:68:ae:61:91:ab:ad:47:bf:63:1f:c1:bc:be:a2:
                    17:08:33:43:c6:9c:8d:00:39:be:cf:b2:e4:14:97:
                    aa:16:94:7e:be:81:b5:37:8d:4d:1b:c4:60:ad:d0:
                    db:44:ab:d7:0c:44:4a:73:be:16:5f:4f:e2:20:cc:
                    1d:95:d3:ef:42:51:87:e2:f8:67:01:59:d0:a4:0b:
                    f2:d1:58:d3:3a:12:69:0f:e8:b2:72:0f:71:b0:ce:
                    74:4f:9d:0e:bc:c5:6a:08:76:7c:e6:47:65:f2:ab:
                    40:d7:63:bf:ca:13:56:50:7b:c2:ea:6e:0f:f3:55:
                    dd:de:48:e5:11:f0:c0:c5:fd:5f:00:0e:71:8a:03:
                    7c:54:4f:35:a6:ff:14:42:d2:ab:ea:61:0f:3b:75:
                    b9:41:a8:e4:2d:47:97:df:b3:d8:4e:11:01:21:ab:
                    38:c6:03:17:e2:f4:df:e9:96:ed:b4:4c:59:77:8a:
                    f0:b5:c9:38:ba:56:d6:d1:cc:59:14:fb:05:49:b3:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:0D:4C:DD:EA:4F:AC:83:BE:F2:F7:21:DD:E4:C8:41:30:45:6B
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:74:3f:89:9b:67:a1:2b:ef:75:e2:28:16:9f:5a:be:98:54:
         43:ef:19:f1:99:a1:98:88:5a:a9:c3:12:13:3c:56:35:9c:83:
         05:3c:e8:d5:3e:08:0e:93:67:8e:a4:5e:29:a0:6b:f0:6a:a1:
         e9:22:05:cb:f5:91:6b:6e:ea:4d:5f:ae:e0:7d:b4:fb:cd:d8:
         32:32:f3:49:62:80:19:2a:3d:df:4d:d8:03:24:7c:58:60:84:
         42:ad:dd:cd:58:bb:7a:d4:08:bc:33:ef:99:12:14:18:c0:02:
         f6:c4:b3:f9:03:8f:2c:a2:6c:af:e0:b1:ce:6b:f3:5b:e8:e9:
         88:f5:ac:2e:e5:9b:de:81:58:71:aa:13:ab:f9:8d:59:e3:aa:
         56:e9:4c:71:03:1b:ae:b2:0c:bb:c6:1d:a3:7f:84:eb:25:39:
         60:fb:4b:4a:57:94:cb:cd:cb:ab:ba:ef:80:c5:05:8d:8b:2c:
         b4:6a:86:0e:9c:ed:9b:81:b4:be:9e:60:12:1f:5e:68:31:d6:
         b7:df:6d:b8:41:9b:c7:65:c8:6d:42:db:2f:1e:c8:9b:a5:f2:
         3e:ae:29:53:ff:61:9e:3c:44:17:71:9b:2d:72:ab:be:b2:7f:
         de:2d:0b:79:0b:76:46:96:f1:37:10:9f:76:21:5d:58:d6:7a:
         e3:7e:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:52 2025 by rpki-client