Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62AE0F93A021509BEA50103B8B257FAB0EBC8C50325CA9B8A2864A8078FACA62/0/3230302e362e35342e302f32342d3234203d3e203237393034.roa
File:                     3230302e362e35342e302f32342d3234203d3e203237393034.roa (raw, json)
Hash identifier:          9MG3qTpK8HxjiJP4ml/F3WJBurVTVRb42mhCkbJXtrM=
Subject key identifier:   51:8C:00:F9:7C:7E:A6:04:E0:76:09:D9:CA:94:F0:AA:77:D2:33:C1
Certificate issuer:       /CN=65377191E0308977C1A2A4E676AB20E159C99C7B
Certificate serial:       0C8FB132CE897F8479062C9298B76D57B3E35507
Authority key identifier: 65:37:71:91:E0:30:89:77:C1:A2:A4:E6:76:AB:20:E1:59:C9:9C:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65377191E0308977C1A2A4E676AB20E159C99C7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62AE0F93A021509BEA50103B8B257FAB0EBC8C50325CA9B8A2864A8078FACA62/0/3230302e362e35342e302f32342d3234203d3e203237393034.roa
Signing time:             Tue 04 Feb 2025 18:22:57 +0000
ROA not before:           Tue 04 Feb 2025 18:17:57 +0000
ROA not after:            Tue 03 Feb 2026 18:22:57 +0000
asID:                     27904
IP address blocks:        200.6.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62AE0F93A021509BEA50103B8B257FAB0EBC8C50325CA9B8A2864A8078FACA62/0/65377191E0308977C1A2A4E676AB20E159C99C7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62AE0F93A021509BEA50103B8B257FAB0EBC8C50325CA9B8A2864A8078FACA62/0/65377191E0308977C1A2A4E676AB20E159C99C7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65377191E0308977C1A2A4E676AB20E159C99C7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8f:b1:32:ce:89:7f:84:79:06:2c:92:98:b7:6d:57:b3:e3:55:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65377191E0308977C1A2A4E676AB20E159C99C7B
        Validity
            Not Before: Feb  4 18:17:57 2025 GMT
            Not After : Feb  3 18:22:57 2026 GMT
        Subject: CN=518C00F97C7EA604E07609D9CA94F0AA77D233C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:22:96:4d:21:48:b0:aa:2e:34:15:37:8a:
                    64:10:8f:44:ac:55:dc:9d:43:bf:0b:ff:56:25:ed:
                    8f:91:48:37:fb:03:b7:3a:40:b2:ef:b4:60:8f:2c:
                    68:13:9d:6c:9e:b0:da:05:1c:a9:20:dc:b5:2d:fc:
                    a6:1e:b6:47:d8:a7:95:fa:95:45:4d:6f:bb:a2:42:
                    35:ac:c8:d3:e6:3a:80:d5:39:ac:56:f2:6e:cb:2e:
                    03:8b:61:c4:56:d5:92:8c:c6:bd:7a:72:fe:e1:ff:
                    aa:a8:1c:89:21:29:4a:ee:5f:1e:ae:73:fa:8f:f6:
                    d3:62:b9:2d:f9:d7:ca:c7:08:2c:14:e4:9f:8b:fb:
                    03:56:b8:ac:26:0d:d7:f5:e8:91:d3:bd:87:d8:c0:
                    5b:66:51:9e:b3:8c:35:bb:2f:cf:a2:d7:cf:3a:65:
                    75:5c:d7:85:7d:37:34:74:8c:b1:51:3b:0e:92:3d:
                    5d:ce:78:23:32:a2:39:8a:58:70:a5:1e:92:4b:8a:
                    38:4e:c9:4b:8a:0d:1b:61:b6:7a:af:84:0d:56:9c:
                    85:b1:02:8d:c0:36:c9:a3:9e:09:e3:1c:97:90:62:
                    35:76:4e:97:41:42:08:36:b3:1a:e3:32:b6:5c:f3:
                    04:ee:9b:1f:84:16:2b:65:ff:f8:e5:5b:e6:31:3f:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8C:00:F9:7C:7E:A6:04:E0:76:09:D9:CA:94:F0:AA:77:D2:33:C1
            X509v3 Authority Key Identifier:
                keyid:65:37:71:91:E0:30:89:77:C1:A2:A4:E6:76:AB:20:E1:59:C9:9C:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62AE0F93A021509BEA50103B8B257FAB0EBC8C50325CA9B8A2864A8078FACA62/0/65377191E0308977C1A2A4E676AB20E159C99C7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65377191E0308977C1A2A4E676AB20E159C99C7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62AE0F93A021509BEA50103B8B257FAB0EBC8C50325CA9B8A2864A8078FACA62/0/3230302e362e35342e302f32342d3234203d3e203237393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:36:d2:b3:91:94:6a:94:9f:e7:e4:4e:e9:a0:a8:00:15:
         6b:58:c7:94:c8:de:42:4b:19:d5:46:da:78:fe:ae:c7:e5:2d:
         16:66:13:52:0e:58:06:d4:28:83:69:f4:8f:e9:57:c3:e0:b3:
         5c:30:49:c6:fd:1c:50:a6:fe:57:07:89:fe:52:36:0f:8c:38:
         4b:a7:da:fa:64:48:3a:55:af:4b:ea:45:f5:d4:76:ff:a4:58:
         f5:6e:e8:4c:2e:20:08:58:f4:f3:21:a6:33:5a:ff:57:3a:46:
         18:da:d4:af:5e:48:21:5a:cc:de:33:92:1e:92:e6:67:47:97:
         c5:ec:22:6d:6b:7c:40:ab:db:f7:17:01:15:2c:0f:cf:d1:69:
         7a:9f:df:47:2f:58:e3:af:98:dd:40:8d:4b:f5:8b:d0:24:27:
         ce:70:92:0b:b9:37:de:9f:9c:0b:0e:d5:fb:a0:1e:3c:c3:4d:
         35:a5:9c:15:22:4b:43:dc:1d:48:4d:a6:a3:99:a7:e8:fd:2b:
         fa:75:40:a3:09:37:70:3d:f5:d7:51:ee:de:c2:89:95:d7:79:
         79:3a:a9:e2:1d:f2:a2:05:94:7c:96:24:fc:b3:e6:4a:da:a2:
         76:15:ba:bc:10:12:70:32:b1:58:54:4d:7e:cf:05:63:df:f1:
         5d:16:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:02 2025 by rpki-client