Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/3230302e31362e39352e302f32342d3234203d3e20323632313736.roa
File:                     3230302e31362e39352e302f32342d3234203d3e20323632313736.roa (raw, json)
Hash identifier:          VgcMBrI8cxjAh4e8pu2WPxQdrhBqmiiPpwZoHmPWSJY=
Subject key identifier:   AD:5C:DF:C3:07:6C:FC:AF:FC:2F:1B:4A:BF:EC:D3:7C:D1:01:26:BD
Certificate issuer:       /CN=FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577
Certificate serial:       41F14F8D4C9B8557BD51262F88F2E9FF860CBAA5
Authority key identifier: FA:1E:2E:36:DC:AD:6B:ED:1E:F7:07:63:BB:B1:D1:C1:9E:8E:95:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/3230302e31362e39352e302f32342d3234203d3e20323632313736.roa
Signing time:             Tue 04 Feb 2025 18:07:11 +0000
ROA not before:           Tue 04 Feb 2025 18:02:11 +0000
ROA not after:            Tue 03 Feb 2026 18:07:11 +0000
asID:                     262176
IP address blocks:        200.16.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl
                          rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f1:4f:8d:4c:9b:85:57:bd:51:26:2f:88:f2:e9:ff:86:0c:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577
        Validity
            Not Before: Feb  4 18:02:11 2025 GMT
            Not After : Feb  3 18:07:11 2026 GMT
        Subject: CN=AD5CDFC3076CFCAFFC2F1B4ABFECD37CD10126BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:74:70:d3:0e:15:eb:4f:49:59:c2:93:04:
                    49:13:df:3f:02:29:09:28:c1:48:1a:90:b3:c0:42:
                    e6:3e:e8:9e:01:69:e8:2c:a5:ed:db:4c:65:37:6d:
                    1e:63:79:e0:77:11:93:5e:09:db:21:0a:9a:39:d0:
                    2f:f7:60:0e:b8:1f:fb:93:e1:06:41:cf:ca:b5:de:
                    17:b7:f4:28:98:ba:7b:40:ea:06:bb:a8:61:70:25:
                    41:9b:50:f3:06:36:77:0f:eb:ef:b8:ec:a5:ed:1e:
                    f2:fb:97:bd:c4:3e:e4:c0:22:b0:21:91:92:99:e8:
                    86:b7:de:c1:35:f6:b5:33:8d:a6:3c:1e:97:02:51:
                    03:6f:08:3e:d7:c6:3b:7f:ce:3d:2e:8d:c1:83:27:
                    23:68:4e:2a:64:ff:f8:d2:2f:f0:97:17:89:82:c2:
                    1f:a0:0a:2d:59:71:d8:a8:a8:c9:25:35:5a:7d:a3:
                    3a:24:09:2e:06:c3:fc:e5:df:7f:a9:4f:93:23:59:
                    12:0e:c8:e5:13:91:a3:4b:03:ca:41:6e:a0:fb:ca:
                    82:b8:47:9e:74:2b:07:91:01:f5:aa:af:7c:14:2e:
                    ba:2a:84:c4:03:cd:61:01:ed:bf:14:4c:0b:48:2c:
                    64:86:84:46:b5:e0:c2:e7:d3:bb:e8:aa:76:f3:f7:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:DF:C3:07:6C:FC:AF:FC:2F:1B:4A:BF:EC:D3:7C:D1:01:26:BD
            X509v3 Authority Key Identifier:
                keyid:FA:1E:2E:36:DC:AD:6B:ED:1E:F7:07:63:BB:B1:D1:C1:9E:8E:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/3230302e31362e39352e302f32342d3234203d3e20323632313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:db:b9:34:e1:3c:80:5a:0a:d1:ef:7d:f1:41:60:01:b1:8b:
         fb:3b:2c:f7:aa:98:1c:c0:4c:2b:92:74:26:4d:eb:e5:e7:d5:
         c9:b7:73:cd:6e:41:62:9b:d9:09:2d:17:b6:fa:cd:17:94:ce:
         c0:2e:bf:a7:40:24:95:ae:ca:07:c0:ce:08:9c:00:35:bd:a5:
         ac:d4:03:74:2b:1d:89:35:c3:66:10:af:40:27:ed:c3:45:e9:
         45:20:fb:c5:23:79:88:b2:b5:f9:49:6d:95:aa:45:3d:1c:36:
         b5:35:86:be:79:ce:ad:f0:c3:b9:dc:4c:5b:8b:37:b9:cd:88:
         d2:fa:d5:88:97:f6:0d:a5:bd:c7:cd:bc:05:ca:4f:33:b5:a3:
         29:af:f2:27:68:98:1f:59:21:c9:cd:b8:0c:91:b3:92:d5:d8:
         79:d7:5f:a3:3e:bb:46:be:ce:fc:1f:fa:8f:40:92:44:ab:23:
         88:b0:68:88:30:01:b4:c2:77:f4:69:eb:48:86:21:1c:f6:ac:
         23:d1:2e:4b:5e:b9:94:09:8d:26:e7:86:4a:d0:3b:fe:54:fc:
         f1:4b:85:e6:41:be:d4:aa:0e:20:31:ad:46:7e:3b:e2:b1:08:
         9e:89:ed:7d:4c:f7:a3:3c:3f:7a:4f:02:1f:03:7b:5f:6c:53:
         3e:c2:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:14 2025 by rpki-client