Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/3230302e302e36352e302f32342d3332203d3e203237383038.roa
File:                     3230302e302e36352e302f32342d3332203d3e203237383038.roa (raw, json)
Hash identifier:          rtfYeexuYdMbJRt5cmd3JZ2hyzUB7v0rb+eER0CgRlQ=
Subject key identifier:   46:20:FE:2C:D7:E4:BB:1B:82:E6:1D:4C:B0:80:6F:0C:55:AC:05:2E
Certificate issuer:       /CN=01726C9CC40D25E04818139CB428E3A47F5D05EC
Certificate serial:       0E78B6BF5CF2F0AE66A76BDA1BCD5F904708E6CF
Authority key identifier: 01:72:6C:9C:C4:0D:25:E0:48:18:13:9C:B4:28:E3:A4:7F:5D:05:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/3230302e302e36352e302f32342d3332203d3e203237383038.roa
Signing time:             Tue 04 Feb 2025 18:24:48 +0000
ROA not before:           Tue 04 Feb 2025 18:19:48 +0000
ROA not after:            Tue 03 Feb 2026 18:24:48 +0000
asID:                     27808
IP address blocks:        200.0.65.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:b6:bf:5c:f2:f0:ae:66:a7:6b:da:1b:cd:5f:90:47:08:e6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01726C9CC40D25E04818139CB428E3A47F5D05EC
        Validity
            Not Before: Feb  4 18:19:48 2025 GMT
            Not After : Feb  3 18:24:48 2026 GMT
        Subject: CN=4620FE2CD7E4BB1B82E61D4CB0806F0C55AC052E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:0f:84:56:a7:e9:3e:1b:8a:f4:a4:7d:c6:
                    fc:45:a2:e1:6d:76:2c:03:b2:37:8b:d2:ac:af:ef:
                    3a:98:f5:18:8f:62:30:e1:50:80:ba:3b:94:00:bc:
                    c1:8d:34:4c:08:9c:e9:b4:d5:85:ce:1a:27:e7:03:
                    78:21:dd:93:f3:8b:f9:59:f5:c6:c4:6f:e7:9c:4b:
                    cb:92:12:3f:92:57:42:40:3e:fc:6d:1b:50:5c:1c:
                    59:9a:b8:12:e2:0c:ce:5a:a8:9d:43:80:ef:13:c2:
                    8c:88:73:52:17:d3:e1:1c:1d:94:da:c6:27:2d:53:
                    eb:f1:a3:ab:b6:16:98:b8:aa:14:ff:37:21:fd:90:
                    7b:8b:c1:8e:df:c1:8d:fe:b1:7f:1c:64:16:c4:3c:
                    82:25:f3:ca:2b:64:cd:3a:05:c6:77:90:3a:87:82:
                    c8:35:12:77:4f:28:a4:06:74:6f:e0:4e:92:da:0c:
                    f6:a7:d6:f0:6c:87:02:d4:6e:f1:33:5a:fc:cf:c3:
                    f0:12:74:c2:e7:58:15:8e:9d:ac:db:38:40:f4:8e:
                    a8:7a:30:c1:52:00:c3:d5:e3:04:6c:23:4e:96:ec:
                    9c:7d:b0:4d:44:a9:d5:6c:4f:ef:85:4b:83:8b:11:
                    55:ed:70:67:25:b6:dd:ef:23:ab:90:c2:ca:ce:14:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:FE:2C:D7:E4:BB:1B:82:E6:1D:4C:B0:80:6F:0C:55:AC:05:2E
            X509v3 Authority Key Identifier:
                keyid:01:72:6C:9C:C4:0D:25:E0:48:18:13:9C:B4:28:E3:A4:7F:5D:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/3230302e302e36352e302f32342d3332203d3e203237383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:5d:28:70:e5:e6:a3:06:6a:76:1f:e8:b4:e5:16:62:d5:
         0c:5f:d8:be:b7:5e:8b:c7:bb:23:e6:3a:de:95:0e:4c:6e:4e:
         20:14:2c:69:b2:64:97:53:8d:00:6b:26:53:c8:0c:df:31:f0:
         5e:9e:5e:a7:ba:3c:e7:4a:8e:e1:8c:ac:6b:8f:88:f7:0f:79:
         e9:68:e0:56:2d:da:e0:90:21:d6:be:92:10:09:9a:ac:58:0d:
         ea:ae:7b:6d:df:07:8f:f4:e0:e0:33:2f:c9:29:ea:7d:69:83:
         fe:8f:2c:9d:4f:57:60:ca:33:41:64:2f:f2:a3:c5:02:76:a9:
         4e:96:72:24:52:4d:e2:4b:21:91:5b:5f:72:45:95:5a:79:45:
         8b:1d:02:bb:ed:13:5f:14:8f:d6:5a:7e:37:59:40:cc:2a:ca:
         4f:85:1e:a8:ea:ed:53:13:a0:f4:a3:dd:9d:d9:ec:c7:29:92:
         0c:e4:6a:de:5e:90:ed:61:e4:ba:f9:2f:d9:e0:0e:00:00:a0:
         5d:3f:14:f8:78:7b:96:eb:92:d4:9f:e2:bf:c1:22:54:95:1b:
         2d:b7:08:34:7a:c5:1f:67:2d:76:16:77:09:22:b0:ab:9b:6c:
         b8:28:c1:3d:4c:88:c3:fb:ef:c4:e1:28:cc:82:5e:de:27:c1:
         1f:0d:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:27 2025 by rpki-client