Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
File:                     3230302e372e38372e302f32342d3234203d3e203238303030.roa (raw, json)
Hash identifier:          /7DG3wcIghbFdsEvz4sVXTRM0wMCeeEN6QWTZegAG6k=
Subject key identifier:   B6:65:23:C8:5A:8A:5C:CD:CB:4C:39:9B:24:87:3B:03:92:89:20:E8
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       173BEF7BB5E92304E098A3AC8863D752D487DB87
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
Signing time:             Tue 04 Feb 2025 18:19:40 +0000
ROA not before:           Tue 04 Feb 2025 18:14:40 +0000
ROA not after:            Tue 03 Feb 2026 18:19:40 +0000
asID:                     28000
IP address blocks:        200.7.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3b:ef:7b:b5:e9:23:04:e0:98:a3:ac:88:63:d7:52:d4:87:db:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:40 2025 GMT
            Not After : Feb  3 18:19:40 2026 GMT
        Subject: CN=B66523C85A8A5CCDCB4C399B24873B03928920E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:96:b5:96:d6:d6:93:f4:40:aa:c7:7e:49:
                    35:5c:76:e7:95:0a:27:12:46:0b:c6:52:3f:99:f1:
                    2c:a7:6e:51:2f:6a:47:a2:f2:bb:df:17:95:ff:42:
                    b1:ec:99:cd:6c:ca:67:1b:1c:89:7f:9d:7c:e6:1b:
                    49:d5:ee:d0:89:a7:88:36:14:a5:1f:e4:4f:ee:f5:
                    75:08:e4:7c:21:cf:e0:a8:fb:98:1c:71:ab:71:5b:
                    2b:37:ad:32:d8:66:98:32:95:ea:6c:c9:d1:37:11:
                    c5:42:21:17:50:dd:1b:83:13:f1:24:5e:b6:71:e5:
                    d2:c6:5a:0d:f5:47:b2:ee:9e:b0:f6:80:2c:3a:e1:
                    1b:c6:4c:4c:2e:0b:ab:d9:26:da:6d:88:f6:b2:de:
                    d7:48:41:4e:84:7e:84:7e:b4:e4:a5:fc:47:8f:36:
                    55:66:49:56:a0:e1:b7:42:a9:c5:bb:5d:29:88:33:
                    ca:f5:1f:1c:43:04:31:7f:4e:ce:ce:2a:6e:91:85:
                    8e:bd:4d:45:ab:7a:a6:9d:71:e1:6e:2c:3d:11:2a:
                    61:ed:a7:d5:5a:e0:94:a2:a9:5c:a3:02:7d:2f:72:
                    53:d9:17:62:f1:79:8c:5a:7e:94:9e:d6:f2:b9:b5:
                    3b:70:16:20:03:51:be:b2:d1:19:5e:dc:95:f1:34:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:65:23:C8:5A:8A:5C:CD:CB:4C:39:9B:24:87:3B:03:92:89:20:E8
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:62:d1:0e:b0:51:50:8f:29:18:ab:fd:06:1b:6d:6a:f6:
         b8:64:8e:99:aa:7d:75:2c:ef:92:75:9a:19:2a:4c:e3:a7:ef:
         43:24:81:09:bc:48:d4:02:8b:20:61:5b:55:85:f0:5e:a1:ff:
         5f:6c:54:c3:57:81:6b:ef:e6:df:4f:66:df:65:63:6a:76:d6:
         17:86:ec:cf:8e:a7:ba:05:ad:89:d8:59:58:a1:30:c6:d9:0a:
         8f:97:4c:ad:67:2a:ab:2b:bc:04:7a:32:20:82:61:64:03:13:
         a4:e7:3c:aa:c6:ae:52:27:f0:aa:b8:47:de:62:f9:e3:1e:2a:
         01:ad:14:bc:bf:a6:0d:9e:22:94:e9:8d:ee:00:a5:be:b1:d6:
         b8:ff:5d:9a:c8:2f:b0:0b:16:a8:eb:04:8f:38:d2:2e:dc:59:
         a3:73:3d:fa:4b:df:cb:13:7a:fc:cd:20:07:16:9a:69:c4:3b:
         fd:fb:fe:0a:43:cb:18:36:7b:4f:6b:59:d3:0a:2e:df:04:d6:
         3c:a1:46:a0:c3:49:70:1b:d2:c0:6a:45:79:81:fa:1a:b7:20:
         50:da:ad:cb:78:11:b0:77:b9:01:38:b2:49:76:c9:c0:13:db:
         49:b1:36:cd:36:03:e1:be:25:fa:a1:5e:88:59:3c:00:3e:09:
         9e:45:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:09 2025 by rpki-client