Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/591A795638A1873375A739B29696E50E37AFF5BA792A9B48349C383471A0C4A2/0/3230302e302e31362e302f32342d3332203d3e203131393630.roa
File:                     3230302e302e31362e302f32342d3332203d3e203131393630.roa (raw, json)
Hash identifier:          f+ddLWY66uWRrf6lEBJ7KTZmgNLuuFd2y5pWDyidq6E=
Subject key identifier:   1D:33:B1:BB:F8:69:49:77:41:0A:9D:F6:C5:A7:A0:AD:38:94:1D:9B
Certificate issuer:       /CN=83A7F6FCA163751772B94E5D8E83AC808A30E9B1
Certificate serial:       51B698B3B6D33DA7907097625349D02C542C95BC
Authority key identifier: 83:A7:F6:FC:A1:63:75:17:72:B9:4E:5D:8E:83:AC:80:8A:30:E9:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83A7F6FCA163751772B94E5D8E83AC808A30E9B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/591A795638A1873375A739B29696E50E37AFF5BA792A9B48349C383471A0C4A2/0/3230302e302e31362e302f32342d3332203d3e203131393630.roa
Signing time:             Tue 04 Feb 2025 18:19:04 +0000
ROA not before:           Tue 04 Feb 2025 18:14:04 +0000
ROA not after:            Tue 03 Feb 2026 18:19:04 +0000
asID:                     11960
IP address blocks:        200.0.16.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/591A795638A1873375A739B29696E50E37AFF5BA792A9B48349C383471A0C4A2/0/83A7F6FCA163751772B94E5D8E83AC808A30E9B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/591A795638A1873375A739B29696E50E37AFF5BA792A9B48349C383471A0C4A2/0/83A7F6FCA163751772B94E5D8E83AC808A30E9B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83A7F6FCA163751772B94E5D8E83AC808A30E9B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b6:98:b3:b6:d3:3d:a7:90:70:97:62:53:49:d0:2c:54:2c:95:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A7F6FCA163751772B94E5D8E83AC808A30E9B1
        Validity
            Not Before: Feb  4 18:14:04 2025 GMT
            Not After : Feb  3 18:19:04 2026 GMT
        Subject: CN=1D33B1BBF8694977410A9DF6C5A7A0AD38941D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:4c:9e:21:e9:22:be:a0:be:f9:69:85:4a:
                    86:61:45:41:9a:f4:10:19:4a:a0:74:68:26:1f:5a:
                    8e:c1:5c:0e:89:17:fb:e1:7e:f9:96:e2:5e:71:79:
                    b6:02:44:3e:1e:bc:d4:be:72:0f:e9:43:fd:dc:7f:
                    7c:53:21:32:43:de:79:b8:14:28:34:e8:e8:a3:ec:
                    45:d1:a4:f0:68:df:d6:fc:51:aa:45:2e:bd:3a:18:
                    1c:5e:ac:dd:28:54:8b:c7:23:f0:23:79:bc:f7:c4:
                    34:e5:9d:a6:73:e6:c8:3e:44:1e:9b:98:13:8c:62:
                    50:40:d1:30:e2:6f:34:96:6c:a8:12:46:9b:e3:80:
                    ca:c8:b3:af:6d:76:18:16:d8:98:e2:54:3d:df:83:
                    7e:f6:5f:3e:07:47:2a:5a:a7:17:c8:ca:6f:99:63:
                    7f:a5:77:f1:41:64:a1:31:ec:16:d9:9b:52:67:30:
                    91:1a:8e:49:44:31:c9:5a:ab:bb:71:61:74:35:7a:
                    f6:9e:3c:ea:ef:6d:e2:55:89:11:c8:f2:ad:13:35:
                    a3:b0:2a:ab:1a:1c:2f:7c:57:ff:c4:7e:db:b4:c3:
                    0c:52:f9:f4:9a:15:64:a5:ae:0c:b8:0a:b8:88:19:
                    8b:3d:84:62:86:9f:5b:09:46:e6:24:5c:25:49:4d:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:33:B1:BB:F8:69:49:77:41:0A:9D:F6:C5:A7:A0:AD:38:94:1D:9B
            X509v3 Authority Key Identifier:
                keyid:83:A7:F6:FC:A1:63:75:17:72:B9:4E:5D:8E:83:AC:80:8A:30:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/591A795638A1873375A739B29696E50E37AFF5BA792A9B48349C383471A0C4A2/0/83A7F6FCA163751772B94E5D8E83AC808A30E9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83A7F6FCA163751772B94E5D8E83AC808A30E9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/591A795638A1873375A739B29696E50E37AFF5BA792A9B48349C383471A0C4A2/0/3230302e302e31362e302f32342d3332203d3e203131393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:19:3c:01:4b:37:c2:c6:a3:fe:96:56:f9:30:f0:f6:22:
         b4:24:01:54:a2:ab:7c:ba:c2:67:c2:d4:55:9e:78:54:60:4a:
         c5:37:70:85:a4:cb:cc:0b:db:9a:96:cd:94:76:bb:14:47:b7:
         bd:cd:91:8c:19:e8:b7:7c:2a:80:88:46:d5:38:a5:b0:b3:81:
         2a:d0:04:25:46:c1:30:33:45:41:5d:2d:18:15:9c:8b:f0:2a:
         e2:ce:92:48:31:f5:d2:44:3d:0e:b4:0d:07:21:bf:36:51:ef:
         04:85:5b:9d:9b:90:31:31:09:02:6d:a1:7f:20:9c:99:d4:63:
         e5:76:be:2c:5c:9e:c7:a6:32:6b:95:ed:d2:70:fb:c9:d5:04:
         a8:eb:f8:2e:e5:ee:57:a8:43:04:f7:46:c5:45:4a:fa:10:cc:
         bf:38:60:cd:56:4b:c6:fa:ba:9e:44:20:4d:73:6c:1a:ac:de:
         4a:94:10:71:35:29:ba:8c:b1:57:78:72:cb:21:c8:62:c6:4d:
         cc:c8:47:7a:1f:9d:82:9a:53:ac:5e:6f:44:83:e6:eb:ce:79:
         a1:2e:51:83:18:27:b4:35:57:09:cf:68:c3:5a:b2:f3:ae:ca:
         a0:96:3d:00:ff:51:d9:a0:b1:df:cf:dc:50:47:2d:f3:52:b5:
         59:a0:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:56:56 2025 by rpki-client