Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f31392d3234203d3e203237373633.roa
File:                     3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (raw, json)
Hash identifier:          uJjNy8XbLIhMUXWrEaXKzaGqSNEJyYbVqDtNw9Ok8V8=
Subject key identifier:   7D:C0:BB:E0:CC:A1:51:65:34:11:60:48:58:65:CE:A0:EE:6B:ED:4E
Certificate issuer:       /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial:       3D33EA055ECEFF8C46EF548E40A54A72D4CD439A
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f31392d3234203d3e203237373633.roa
Signing time:             Wed 04 Dec 2024 19:55:00 +0000
ROA not before:           Wed 04 Dec 2024 19:50:00 +0000
ROA not after:            Wed 03 Dec 2025 19:55:00 +0000
asID:                     27763
IP address blocks:        200.25.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 04:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:33:ea:05:5e:ce:ff:8c:46:ef:54:8e:40:a5:4a:72:d4:cd:43:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
        Validity
            Not Before: Dec  4 19:50:00 2024 GMT
            Not After : Dec  3 19:55:00 2025 GMT
        Subject: CN=7DC0BBE0CCA15165341160485865CEA0EE6BED4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:cd:8e:39:4b:89:3e:27:9d:1c:06:03:9f:
                    e7:02:f7:54:93:3d:a1:d5:d0:9e:fe:39:45:04:b6:
                    90:22:32:bd:b4:e1:47:30:81:61:67:ec:ff:b3:cf:
                    11:a5:f3:3f:6b:50:cc:56:29:90:51:b5:58:21:18:
                    84:a9:87:fb:a9:82:f8:00:8f:41:99:e3:3d:46:95:
                    17:16:47:06:3c:1f:ce:b8:48:24:ed:2c:37:00:60:
                    c9:c8:b0:d6:18:c5:91:b3:4f:4d:41:7e:96:4b:c2:
                    dc:fb:6f:b3:42:91:74:24:97:20:cf:a7:30:7e:2e:
                    22:f5:87:07:db:8a:3b:06:cf:c1:8b:69:ee:6e:9b:
                    60:9e:c2:f8:9e:e5:b5:e8:4e:3c:b4:3c:37:81:90:
                    cc:a3:30:ef:d0:d9:91:1e:95:59:c4:4f:de:02:f0:
                    27:f7:7f:5b:01:97:d9:24:9a:88:90:77:6a:6a:b0:
                    cd:eb:2d:fb:1e:a3:85:f8:af:cb:1e:89:a4:9a:8c:
                    c6:47:37:cc:76:30:6a:12:7c:c1:46:5c:99:a6:31:
                    4f:9d:ba:d2:a8:b9:35:fe:c9:03:86:6f:77:e3:9e:
                    c8:eb:34:9c:32:86:c2:4d:28:47:fa:7e:01:61:05:
                    ac:c4:48:75:f5:39:27:78:2a:a0:99:22:61:00:fc:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C0:BB:E0:CC:A1:51:65:34:11:60:48:58:65:CE:A0:EE:6B:ED:4E
            X509v3 Authority Key Identifier:
                keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f31392d3234203d3e203237373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:40:48:55:46:89:c1:ee:ef:09:4d:2e:f3:e5:4b:80:44:
         b7:99:52:c4:f4:3a:4e:8c:88:f9:b7:11:a5:da:3b:ba:12:61:
         a3:f4:ce:82:47:ad:ad:58:d0:53:ae:55:cb:ce:87:b2:03:e8:
         f6:b3:92:d5:44:6f:c5:98:e2:d9:75:72:0f:b9:1d:cc:12:2c:
         d8:c1:25:04:cd:6b:b5:23:23:fa:60:f5:f0:ce:6c:26:4b:6e:
         96:dd:48:fe:b4:eb:a0:5a:cc:29:60:92:21:7b:42:18:0b:f5:
         8a:8d:22:8d:dc:91:d4:24:71:e1:09:ac:e2:b1:64:25:a2:da:
         85:40:a3:74:c5:66:cd:4d:47:c6:3c:39:a5:ef:3d:ce:35:d9:
         01:f8:0d:f9:f3:ba:a7:f4:b5:2d:eb:93:d5:4f:9a:7a:ad:35:
         cf:0c:cc:38:49:20:5a:42:bc:20:23:8e:54:04:fb:dc:06:10:
         54:d4:16:d8:0a:44:3b:cb:b8:0c:7a:84:ff:52:58:81:d2:ca:
         fd:c5:d3:e6:be:4b:47:66:2e:cb:07:13:36:cf:e4:b1:bf:3d:
         9c:4b:29:6a:c2:b6:f3:59:1d:f3:24:01:7f:55:9c:6a:cf:cb:
         5e:bf:6e:4e:f0:7e:1c:be:08:81:5e:41:f0:a2:67:7b:44:05:
         e0:d7:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:56 2025 by rpki-client