Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3135302e302f32342d3332203d3e203532343638.roa
File:                     3230302e35322e3135302e302f32342d3332203d3e203532343638.roa (raw, json)
Hash identifier:          VgZB6xLzpe52CnpHRKkLhiylzh5MIBA0Xq2TPT+uPEA=
Subject key identifier:   C8:21:66:49:82:9B:2B:89:22:49:A9:39:E0:BF:CD:12:BD:3D:B0:B9
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       367F4E71DB088CD84AE3EA363AD2EB41BA9CD44B
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3135302e302f32342d3332203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:09:09 +0000
ROA not before:           Tue 04 Feb 2025 18:04:09 +0000
ROA not after:            Tue 03 Feb 2026 18:09:09 +0000
asID:                     52468
IP address blocks:        200.52.150.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7f:4e:71:db:08:8c:d8:4a:e3:ea:36:3a:d2:eb:41:ba:9c:d4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:09 2025 GMT
            Not After : Feb  3 18:09:09 2026 GMT
        Subject: CN=C8216649829B2B892249A939E0BFCD12BD3DB0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:9b:75:37:f1:ae:4f:17:07:17:44:94:f9:
                    ac:73:05:2f:8f:9c:fc:9f:69:00:26:fa:46:41:e5:
                    b4:06:52:b8:c8:29:5b:5c:9d:f4:01:f9:8f:ea:c9:
                    0a:2b:1e:1d:63:c1:1d:b5:0c:d5:e5:94:43:73:64:
                    88:48:4b:fd:64:d2:08:fd:cd:83:d4:7f:b6:68:e4:
                    60:96:33:6b:83:da:55:4e:6a:f3:b0:c9:14:7c:f8:
                    03:d7:cc:30:e4:7c:be:f2:3d:f3:9f:c6:a6:59:78:
                    18:1c:31:c7:ec:b8:a7:3e:bf:22:00:02:7d:e2:32:
                    8b:a3:76:fd:e7:13:7a:70:f7:29:c1:7c:22:d2:01:
                    5d:c4:13:56:b5:5b:c5:8f:17:a2:54:99:b9:33:2a:
                    12:e1:d6:aa:1b:07:97:43:24:4c:13:d5:92:dc:e8:
                    a5:9e:af:9d:e6:9e:6a:1b:d7:48:51:06:80:93:df:
                    05:8d:d0:f4:c0:23:64:ff:ea:f6:d7:18:a5:0b:86:
                    d1:6c:da:8b:5d:39:36:87:c0:b1:78:7f:bc:81:de:
                    c0:1c:ad:92:96:56:70:58:a1:21:52:f5:85:93:4f:
                    3d:18:08:61:23:b2:fc:71:18:e0:39:5e:eb:3f:13:
                    a6:f6:83:1c:e8:1a:9d:2e:09:14:49:9f:b5:9d:5f:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:21:66:49:82:9B:2B:89:22:49:A9:39:E0:BF:CD:12:BD:3D:B0:B9
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3135302e302f32342d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:28:07:fe:93:1d:76:32:af:20:40:a5:5d:d2:ea:44:75:
         bb:7e:eb:f3:5e:c4:4d:54:e6:2f:33:29:bc:a4:95:74:64:10:
         05:20:9e:9c:76:d9:51:5e:6e:ca:0a:55:e5:f4:d0:55:5b:b2:
         26:73:4c:00:ba:ea:4c:41:b7:e7:42:33:a1:34:43:8d:00:48:
         64:be:cc:dd:9e:40:ee:f7:63:36:57:22:23:f9:97:b4:4a:a9:
         3b:7b:f2:f2:09:0b:92:01:10:97:fc:3c:63:6a:0d:2e:9d:aa:
         1b:08:ed:41:e1:ce:9a:40:59:e4:86:20:f4:06:db:45:de:d1:
         62:e2:98:66:6c:a2:8d:2b:f7:13:ec:80:15:fd:62:a3:53:d5:
         cf:f5:19:eb:e0:dc:d5:73:ac:58:96:90:6e:27:6a:b8:32:c3:
         3e:58:03:be:de:66:e3:6e:be:5b:f7:43:c3:94:23:0f:85:b5:
         8d:a3:f0:98:a2:24:99:5f:90:72:c7:80:ae:2d:48:18:45:7e:
         21:23:8d:26:80:c7:60:3b:b6:a3:5b:e8:fe:1a:42:43:e0:f3:
         40:3c:98:5d:1e:69:be:e1:1e:9f:ac:02:69:a0:20:70:c7:fa:
         22:bc:67:82:d1:00:c7:aa:33:40:fc:12:05:87:da:24:e2:db:
         c3:b3:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:44 2025 by rpki-client