Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230302e31362e36382e302f32322d3234203d3e203532333230.roa
File:                     3230302e31362e36382e302f32322d3234203d3e203532333230.roa (raw, json)
Hash identifier:          uw6c3Ggr1jXx6vpGdyoMWz+RYsPnJaaNAJqagLyFFfQ=
Subject key identifier:   11:3A:BD:D7:EC:27:B6:14:FB:83:FB:68:25:BB:BB:FB:5B:84:29:61
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       5762ECD71FA2A30D35EBABA2E031CD6FEDCF0927
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230302e31362e36382e302f32322d3234203d3e203532333230.roa
Signing time:             Tue 04 Feb 2025 18:39:11 +0000
ROA not before:           Tue 04 Feb 2025 18:34:11 +0000
ROA not after:            Tue 03 Feb 2026 18:39:11 +0000
asID:                     52320
IP address blocks:        200.16.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:62:ec:d7:1f:a2:a3:0d:35:eb:ab:a2:e0:31:cd:6f:ed:cf:09:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Feb  4 18:34:11 2025 GMT
            Not After : Feb  3 18:39:11 2026 GMT
        Subject: CN=113ABDD7EC27B614FB83FB6825BBBBFB5B842961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bc:c3:01:0e:72:54:cf:c8:98:7f:de:1f:ad:
                    e1:97:0b:a2:d8:dc:ab:32:b3:5f:85:83:9c:2c:a2:
                    56:f1:1e:fe:12:df:21:9a:01:c4:e9:08:76:47:d0:
                    cc:2c:b0:0c:3a:5f:90:e5:9e:72:ed:6f:cd:bc:73:
                    4c:2f:24:c9:f7:0d:0e:2e:18:47:70:bf:bc:13:d2:
                    a8:ec:ae:1f:dc:58:a2:32:00:e1:ba:c3:21:fc:1c:
                    0b:10:9c:5a:62:33:7d:c5:d8:0c:e9:2d:7f:7f:b9:
                    a4:5c:d3:39:6a:9a:ac:35:47:5e:c4:a0:7c:69:e1:
                    04:bc:3c:0d:6f:1b:0f:11:08:2b:f3:8f:f4:60:d4:
                    22:b9:e5:20:d9:ba:1f:5c:bc:e1:a5:7e:8c:6f:19:
                    bc:2a:4e:43:22:44:b7:f7:09:6b:3e:35:c1:50:1a:
                    50:3a:ea:08:ef:e7:32:b2:eb:2a:bd:34:96:53:5f:
                    a5:68:2d:2a:d9:ed:10:24:21:e9:50:7a:e9:0c:00:
                    3e:e5:b7:b8:80:64:c0:e3:bc:a5:dc:96:58:01:7e:
                    2d:b7:8a:d1:bb:37:34:37:11:f3:fc:73:dc:2f:2f:
                    25:53:c1:a2:cb:55:82:94:99:bf:24:16:8e:0e:38:
                    a1:05:4d:6f:12:ee:2a:71:9e:e4:14:b9:f3:a5:26:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3A:BD:D7:EC:27:B6:14:FB:83:FB:68:25:BB:BB:FB:5B:84:29:61
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230302e31362e36382e302f32322d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:a7:96:6a:bb:25:46:20:11:ba:a2:71:06:10:f5:d9:03:
         c0:16:d2:e5:0a:66:b0:92:22:7e:d0:38:8d:ed:80:67:e6:d8:
         e7:56:b4:bf:ec:81:20:5d:59:cc:c4:00:b4:b1:6e:4a:87:b8:
         28:0e:e3:6d:79:49:b0:6b:63:56:e2:d6:9f:7c:d2:85:78:0a:
         15:a2:96:a6:f7:5f:57:a9:82:fe:d5:b1:b2:e3:ce:62:5e:9d:
         19:e1:c1:d0:ac:32:df:8b:e8:c7:61:4c:14:48:75:11:0d:b4:
         68:be:b9:79:be:22:b4:6b:08:ae:42:5c:80:e6:56:ee:45:e6:
         b2:95:86:59:f9:b0:72:41:f9:2c:70:50:4d:32:ae:cb:ce:31:
         19:09:a6:b5:2b:31:a0:8e:b6:ce:3e:5b:85:7b:75:a9:9f:eb:
         bb:d9:aa:c3:eb:6b:49:ca:ca:90:7c:3d:6c:11:39:e4:46:5a:
         03:51:f3:46:da:ef:69:71:64:62:0c:09:64:b9:c6:01:3f:8c:
         09:e0:c2:ad:a4:b7:78:d5:0f:e6:4c:f5:3f:66:b0:5b:7c:41:
         62:f8:a0:4b:b6:a5:27:56:3c:a6:56:f4:d8:f2:1e:7e:e8:44:
         74:5a:f1:cf:f0:21:e2:35:f4:de:b8:9d:d9:19:27:53:0c:30:
         4c:ce:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:26 2025 by rpki-client