Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e332e31322e302f32322d3234203d3e203238303031.roa
File:                     3230302e332e31322e302f32322d3234203d3e203238303031.roa (raw, json)
Hash identifier:          adDJ8GvkeP8iaQvaFvayMbTov1YTfHqYwnFY+CfhSx4=
Subject key identifier:   58:07:C7:89:4C:25:BB:0D:3B:9E:F8:E7:A4:25:C1:BF:BD:86:99:5F
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       736B562E542C47E7CA0C911A85EA8717A489AC24
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e332e31322e302f32322d3234203d3e203238303031.roa
Signing time:             Tue 04 Feb 2025 18:19:35 +0000
ROA not before:           Tue 04 Feb 2025 18:14:35 +0000
ROA not after:            Tue 03 Feb 2026 18:19:35 +0000
asID:                     28001
IP address blocks:        200.3.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6b:56:2e:54:2c:47:e7:ca:0c:91:1a:85:ea:87:17:a4:89:ac:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:35 2025 GMT
            Not After : Feb  3 18:19:35 2026 GMT
        Subject: CN=5807C7894C25BB0D3B9EF8E7A425C1BFBD86995F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:9c:fc:a5:a1:46:8b:cd:22:04:5e:7a:03:
                    2e:56:7a:33:2c:82:96:51:ae:1b:74:7b:07:d0:88:
                    a9:04:a3:83:72:f9:b7:9a:9e:f3:b5:b0:dc:dd:64:
                    3e:0f:1b:4e:50:b4:55:27:4d:4c:1a:43:b5:65:a0:
                    ab:7e:3a:cf:0f:97:56:c4:c9:b0:b9:ef:7d:a6:38:
                    d4:64:0a:82:69:94:1c:11:83:f9:88:5f:3e:aa:10:
                    4d:22:a7:32:9d:03:dd:c4:67:fa:29:67:8a:a4:52:
                    96:85:ef:62:b6:ab:22:3e:d2:7d:d6:80:de:1e:5e:
                    d2:a6:b6:a1:d7:d6:51:13:f3:1b:d8:f0:3f:fd:d3:
                    7c:c9:76:13:27:43:a9:d3:14:30:43:ef:dc:25:19:
                    a3:73:12:95:14:27:5a:67:6b:16:45:d0:3c:9e:30:
                    e0:45:80:91:c2:11:ac:c9:fd:53:8e:83:0b:fe:0a:
                    a0:5f:64:c8:73:ce:1e:a9:17:44:19:eb:88:67:00:
                    15:0e:25:41:c6:4e:ce:47:48:a7:2f:f1:47:6f:be:
                    e0:c6:39:ad:8b:25:48:57:a2:2d:68:d7:62:70:0b:
                    36:fe:21:5a:4a:c3:46:cc:46:ae:6f:ba:a3:2c:32:
                    0a:fc:3a:fd:9e:b6:27:ae:d9:00:0c:ec:33:11:01:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:C7:89:4C:25:BB:0D:3B:9E:F8:E7:A4:25:C1:BF:BD:86:99:5F
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e332e31322e302f32322d3234203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:a2:a5:b6:6d:22:cd:ec:aa:4e:3b:04:56:6c:de:ef:45:
         8d:c9:0a:c0:56:ec:74:c4:d7:c5:eb:1f:cb:4f:31:53:47:5d:
         6c:7d:19:22:8c:da:28:28:68:45:ba:dd:86:d8:1e:56:05:34:
         1c:3e:c2:57:21:e7:82:49:bc:d9:7a:04:74:59:03:12:eb:d7:
         ce:6b:b3:0e:e1:f9:40:4a:9c:9c:57:cd:bd:6a:ef:9a:c0:5f:
         20:9f:ec:b5:57:21:9d:ef:3e:eb:ae:bb:5b:73:e2:42:d1:83:
         79:41:2c:40:27:3d:af:7c:31:f9:7c:8b:06:c6:9b:43:e5:e4:
         e8:a2:8b:ba:49:9e:06:20:d3:7f:6a:a6:d4:7f:df:1d:1d:69:
         fb:24:bf:9e:62:cd:43:71:87:dd:ff:93:75:24:70:72:78:f0:
         cb:5d:ae:d2:d9:2d:39:6c:c1:f4:6a:23:64:07:fd:1d:15:5b:
         3f:11:ae:d3:1b:84:31:e4:8a:c3:a8:8a:af:4b:0e:52:73:f6:
         20:65:9f:53:e2:ad:a0:c0:de:2c:d2:42:c8:a1:e6:79:64:90:
         e1:2c:b7:4a:cf:7c:d7:7b:8f:75:75:3e:d0:af:87:a8:96:e9:
         80:fb:d7:fd:20:d1:af:46:9d:7b:4e:4d:d9:7b:76:33:1e:1f:
         92:8f:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:09 2025 by rpki-client