Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa
File:                     3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa (raw, json)
Hash identifier:          Nn7ILGLSByn+igS57Ag+RRA2zS06e3e9DiIkhF9Npdo=
Subject key identifier:   D8:C3:9A:A0:F6:D8:D1:4C:D4:A8:D1:C5:4E:52:6D:EE:6D:0E:AB:7E
Certificate issuer:       /CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Certificate serial:       02F766063495B68B516B5C07128FEEF75F97243C
Authority key identifier: 4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa
Signing time:             Tue 04 Feb 2025 18:18:20 +0000
ROA not before:           Tue 04 Feb 2025 18:13:20 +0000
ROA not after:            Tue 03 Feb 2026 18:18:20 +0000
asID:                     272969
IP address blocks:        200.115.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 05:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:66:06:34:95:b6:8b:51:6b:5c:07:12:8f:ee:f7:5f:97:24:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
        Validity
            Not Before: Feb  4 18:13:20 2025 GMT
            Not After : Feb  3 18:18:20 2026 GMT
        Subject: CN=D8C39AA0F6D8D14CD4A8D1C54E526DEE6D0EAB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:9e:30:a8:54:66:6c:08:af:01:73:c0:78:
                    c7:4f:08:f2:ae:2f:e4:56:b8:86:b5:99:87:d7:c0:
                    8b:93:de:20:73:bb:00:e7:0c:4d:07:21:9d:72:ff:
                    9c:bf:60:41:df:42:8a:f2:6f:20:10:19:62:0d:be:
                    68:e8:11:d1:27:6d:4e:f2:94:bd:9a:2d:0b:f4:9c:
                    b3:a4:44:8f:77:1a:c9:f1:c5:d5:ee:3c:b4:af:6d:
                    fb:14:96:c8:74:37:ab:85:f5:1b:b0:ba:f2:65:64:
                    f5:f0:d5:60:32:29:2a:9d:36:8c:8f:2e:09:70:6a:
                    6c:15:54:b3:9f:9e:1d:8c:97:ed:5b:06:b5:c0:2b:
                    a8:31:df:ae:9d:87:40:1a:94:88:f7:50:75:56:be:
                    4a:1c:70:02:67:34:92:7e:11:f3:dd:b9:1b:27:1e:
                    d7:f8:dc:2a:dc:79:f4:ff:4d:29:2f:bc:e8:50:74:
                    af:5e:0b:53:67:fd:a8:02:13:bb:d3:ec:9b:21:b4:
                    57:7f:f9:cd:8d:03:07:80:c9:62:82:00:68:27:11:
                    30:c7:4e:70:de:00:64:2b:4b:fb:7c:57:fe:0a:66:
                    16:34:5a:64:74:78:7c:17:37:70:0e:27:44:4f:dd:
                    b1:8a:cb:4a:1a:8d:c1:20:61:14:94:55:3a:77:6b:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:9A:A0:F6:D8:D1:4C:D4:A8:D1:C5:4E:52:6D:EE:6D:0E:AB:7E
            X509v3 Authority Key Identifier:
                keyid:4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:44:74:ec:ab:0d:5c:a8:6f:b0:1e:eb:a5:10:3c:4b:db:
         30:c3:13:25:67:da:fb:ff:81:47:2d:99:5d:c7:e0:49:20:aa:
         49:55:d3:8a:7f:c1:30:67:b6:58:58:13:89:fb:53:46:75:51:
         04:7b:94:a2:a4:eb:69:23:73:b6:f6:4c:d4:99:40:3c:a3:ac:
         09:44:9f:38:0a:d3:44:78:bb:89:93:e7:b5:04:b1:27:01:60:
         a2:7f:e4:4e:4b:f2:6e:4c:18:60:9f:7a:96:8b:74:88:5f:28:
         91:e5:89:6c:cf:77:bf:b8:5d:8f:78:f3:9f:55:15:5d:a7:89:
         0f:c7:27:48:0e:10:19:5d:ce:82:77:10:40:f5:f5:91:81:1a:
         7a:5c:20:69:51:29:5c:22:00:71:a2:66:6a:a2:83:10:4f:07:
         97:45:75:a2:08:98:a2:66:38:54:96:fd:51:5a:13:e4:34:e1:
         d6:0f:40:6d:fc:fd:8b:6c:c2:84:c5:59:d8:55:59:63:03:70:
         9f:b7:7f:57:fc:d9:e7:6c:52:16:09:7a:b0:32:bf:26:38:76:
         f1:a9:42:8a:c5:3e:98:08:73:de:84:44:4d:94:5f:63:bc:fe:
         99:6b:b3:3b:b3:b0:fe:56:c6:45:40:c7:05:02:63:2b:7d:89:
         46:03:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:57:24 2025 by rpki-client