Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3234382e302f32312d3234203d3e203237393937.roa
File:                     3230302e32392e3234382e302f32312d3234203d3e203237393937.roa (raw, json)
Hash identifier:          Ofv1qH0/tz+7cEW2Nt+AkHd27qH+fXccOkZZXvOrARQ=
Subject key identifier:   4E:8A:CC:61:C0:6D:0E:B5:D0:FE:05:70:B9:2F:CA:97:D6:F7:4A:4A
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       4FC4C9D17999C692DFC2650BE66D88484E2FD367
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3234382e302f32312d3234203d3e203237393937.roa
Signing time:             Tue 04 Feb 2025 18:09:30 +0000
ROA not before:           Tue 04 Feb 2025 18:04:30 +0000
ROA not after:            Tue 03 Feb 2026 18:09:30 +0000
asID:                     27997
IP address blocks:        200.29.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c4:c9:d1:79:99:c6:92:df:c2:65:0b:e6:6d:88:48:4e:2f:d3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Feb  4 18:04:30 2025 GMT
            Not After : Feb  3 18:09:30 2026 GMT
        Subject: CN=4E8ACC61C06D0EB5D0FE0570B92FCA97D6F74A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:bd:55:df:7b:21:5e:83:64:8c:8d:ef:5e:
                    a6:04:f8:5b:0d:15:71:33:93:bf:2d:98:d3:ff:ef:
                    74:74:07:f0:dc:bb:18:be:f9:34:ea:35:d3:01:09:
                    b6:fb:ab:9f:8f:a8:bb:e0:55:81:24:e7:72:fb:fc:
                    ca:28:d5:55:2c:8f:46:fb:73:36:db:1f:b1:c0:d4:
                    bc:a4:39:07:92:3b:46:fe:a9:20:11:21:fa:94:7a:
                    5f:05:a9:09:e3:f3:65:a9:ec:f5:db:50:f5:41:68:
                    c2:db:89:38:97:44:ce:99:4e:3f:0b:5a:dd:b8:c8:
                    b1:92:e5:ad:9d:b7:f0:00:10:75:39:34:62:c8:73:
                    fb:cb:1d:b1:48:4d:bd:ae:d2:c1:4a:de:e1:e8:5a:
                    84:d4:a4:51:d9:10:4f:e1:8d:de:0d:cd:35:95:fa:
                    74:73:f6:17:14:9b:c0:cd:3e:f5:ac:e0:ea:90:83:
                    6f:cd:d8:de:f6:b5:1e:1d:07:8f:9a:96:d3:a7:9a:
                    72:3c:90:67:15:93:17:7e:6e:8a:ba:60:02:68:19:
                    43:49:e7:83:2e:ae:ca:7c:4c:04:21:12:8b:71:1e:
                    8e:a8:c0:bc:d2:fe:70:05:6b:87:f1:f6:ac:d2:18:
                    eb:ef:c6:82:5b:d9:a9:b5:d0:d1:1c:1b:e6:56:ea:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:CC:61:C0:6D:0E:B5:D0:FE:05:70:B9:2F:CA:97:D6:F7:4A:4A
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3234382e302f32312d3234203d3e203237393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:91:5b:bd:01:f5:0c:e3:cb:3b:1b:fc:0a:79:d2:6e:73:
         eb:2d:60:3b:87:db:8b:41:9f:6f:75:37:d3:ec:eb:08:a6:c6:
         17:c0:a5:62:0c:7a:ad:09:3b:b7:b7:c4:96:4c:d1:78:ca:12:
         88:45:f4:a4:33:13:67:3b:4e:00:63:8d:a3:7e:24:5f:6e:cf:
         e2:39:2b:da:f7:13:68:b4:05:df:6e:ec:45:e1:3f:93:ec:4c:
         77:ae:57:09:fb:78:09:bb:96:d2:c1:de:a5:d4:70:a3:68:31:
         05:37:9d:a0:07:93:a9:02:1c:61:76:98:dd:3c:bf:82:8d:9d:
         1f:ba:a0:cd:50:ff:ac:3a:43:44:2e:00:d0:3b:89:f5:46:4c:
         52:ce:f4:11:76:98:46:06:12:04:a3:9e:2e:ce:bb:9c:45:0e:
         05:40:d6:6b:1a:5a:97:16:8e:a8:06:0f:9b:f5:9f:43:56:73:
         b1:e0:5c:01:a3:81:ac:b1:fb:3d:36:7e:90:46:c6:1d:28:30:
         5f:c5:ab:69:8c:08:ce:c0:28:6f:6d:c3:fd:80:e9:cd:1c:5e:
         31:5b:b4:4c:21:fb:35:cc:78:23:33:b0:df:ea:d3:a0:e0:1d:
         af:7c:c4:62:76:b9:a7:09:a8:43:39:8e:75:ca:5b:21:2e:78:
         0e:50:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:01 2025 by rpki-client