Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa
File:                     3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa (raw, json)
Hash identifier:          UXR0iaKadNbQjXX4r81lkIleL8QrIEfmiALIavdbd78=
Subject key identifier:   AC:9C:6C:BA:C9:76:29:95:55:4D:AD:E8:CF:6E:80:52:16:D4:AF:00
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       7CBF0956F1DB108A8616338E4A2EFE49346DE03C
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa
Signing time:             Tue 04 Feb 2025 18:09:06 +0000
ROA not before:           Tue 04 Feb 2025 18:04:06 +0000
ROA not after:            Tue 03 Feb 2026 18:09:06 +0000
asID:                     27932
IP address blocks:        200.107.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:09:56:f1:db:10:8a:86:16:33:8e:4a:2e:fe:49:34:6d:e0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:06 2025 GMT
            Not After : Feb  3 18:09:06 2026 GMT
        Subject: CN=AC9C6CBAC9762995554DADE8CF6E805216D4AF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:66:07:2c:46:a0:c2:a1:a9:f2:32:37:3b:
                    08:f0:7a:8d:76:bd:b1:33:84:88:80:f3:2b:78:b9:
                    fa:5c:ec:49:6f:59:22:e1:58:a9:8c:2c:02:15:63:
                    85:16:18:81:e1:38:08:41:d2:65:70:c2:4f:f0:d2:
                    b0:0b:85:59:42:b7:b3:20:b8:86:0e:bb:f4:17:b9:
                    d3:3b:a9:48:76:64:1d:16:e7:03:61:49:4c:7b:25:
                    62:b6:4d:ae:c8:15:cf:a7:0a:d9:e9:0d:8e:30:bf:
                    50:7a:1d:bc:9f:10:39:35:58:3e:fe:98:e5:80:40:
                    5c:97:6f:63:92:cf:95:11:f9:d2:76:39:73:8f:d7:
                    b7:6e:63:4b:57:4a:2f:c5:a0:df:c5:a9:e6:c0:0c:
                    ee:0c:ca:2b:59:a3:71:e0:8b:6f:30:82:0c:a6:2e:
                    64:bd:86:d4:02:f9:a9:13:d4:b0:b4:99:bb:e0:4c:
                    a2:eb:38:af:30:4b:29:12:7b:e5:d6:97:c8:92:8a:
                    da:3a:d8:a4:eb:a7:17:e1:db:d4:7e:88:17:99:5c:
                    c3:7a:0c:9f:39:d1:2d:82:d9:a2:c3:c0:c1:b9:e6:
                    27:d4:b9:55:ee:d2:54:b9:9a:e5:c9:81:ee:9f:98:
                    3e:63:96:fe:9d:1a:e1:93:12:4d:ef:35:e5:f7:76:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:6C:BA:C9:76:29:95:55:4D:AD:E8:CF:6E:80:52:16:D4:AF:00
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:15:d4:6e:42:11:ec:ee:61:94:bb:8c:ac:2d:d9:4e:1d:95:
         62:33:88:1b:a1:1f:70:28:a0:07:ed:43:92:6e:f9:4f:5f:72:
         39:dc:b8:d2:f0:8d:20:43:fe:98:14:d4:85:07:f5:c6:7e:0d:
         1f:a0:c3:84:d6:80:ca:08:15:5b:d9:c7:a0:de:10:a4:76:d1:
         b4:a0:f4:0d:e8:da:f0:b8:05:ac:e9:77:df:24:eb:d8:e1:70:
         57:a9:10:f4:77:40:cf:9e:cc:f8:4a:27:d7:fe:fd:48:d7:09:
         c3:ae:a1:ca:9e:70:bb:0b:2f:44:50:01:b7:e1:79:d2:8c:06:
         4f:07:97:af:7d:0a:75:e1:06:0c:74:d4:99:88:f6:bb:86:76:
         79:1c:2d:6c:8a:25:5a:29:2c:37:c2:09:aa:7f:d4:2b:b7:3e:
         7f:93:61:da:81:35:b2:22:fe:1a:f6:83:bd:ae:5e:c7:aa:fe:
         6d:9c:2a:35:7d:99:ed:d8:60:b2:be:c5:ba:cb:c2:e0:cc:01:
         a4:b3:93:e2:cf:5b:b9:5c:e3:31:8e:ed:37:66:c9:e8:48:48:
         62:e6:04:ae:8e:ba:38:9c:36:b8:9a:ab:9f:51:38:e3:26:0c:
         ce:e5:be:55:47:e9:7d:27:ad:ef:dd:87:ea:ed:74:ee:fd:21:
         c1:85:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:49 2025 by rpki-client