Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa
File:                     3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa (raw, json)
Hash identifier:          36j2ystFSeA5mHjVqY44ONqz2WEXlnO0qgLfeQ6Mobo=
Subject key identifier:   7C:4B:47:1E:B2:BF:25:68:C3:3C:3D:00:30:C5:F8:6F:86:1B:B7:6E
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       7F1EF46746A8E5063A6488599225595BEA6EA6DC
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:59:01 +0000
ROA not before:           Tue 04 Feb 2025 19:54:01 +0000
ROA not after:            Tue 03 Feb 2026 19:59:01 +0000
asID:                     28075
IP address blocks:        201.190.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:f4:67:46:a8:e5:06:3a:64:88:59:92:25:59:5b:ea:6e:a6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:54:01 2025 GMT
            Not After : Feb  3 19:59:01 2026 GMT
        Subject: CN=7C4B471EB2BF2568C33C3D0030C5F86F861BB76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:5c:5c:d3:ee:f5:da:46:d6:58:1a:f1:1c:
                    ac:c9:c6:56:a6:1d:69:10:1f:3e:02:a8:0f:14:d4:
                    fe:68:55:8d:e8:9f:a5:6d:f3:cf:7c:5b:f5:09:d9:
                    c4:31:39:45:40:a5:05:00:86:77:75:4b:e8:b6:cb:
                    f5:2a:8a:83:45:c8:b6:3a:51:82:7a:3d:e1:8b:01:
                    be:78:8d:8f:93:af:66:e9:d4:06:21:77:8a:19:a0:
                    4a:65:83:64:8b:f0:6c:fd:f9:99:72:d3:10:98:7d:
                    55:73:bb:66:41:14:46:3c:0c:54:61:ce:01:56:87:
                    e3:90:d1:60:64:5b:03:cf:85:a7:7b:d9:20:93:fb:
                    d4:ed:29:4c:a3:83:3c:c4:90:86:ef:07:04:2f:d3:
                    cf:af:14:a9:d8:e7:da:09:d0:4b:9e:e5:72:4a:bd:
                    38:2b:44:ef:35:45:b1:dc:30:ed:9e:79:f6:50:e3:
                    a6:3f:36:d5:fb:db:b3:ca:7f:db:8c:4e:e4:68:db:
                    58:a6:fe:f3:4c:a5:42:39:60:80:43:6b:09:79:f2:
                    38:da:a7:41:92:cb:61:07:70:45:38:bb:b3:fd:9e:
                    22:01:b8:97:e3:6b:34:1a:28:a6:74:a9:08:c7:58:
                    06:de:34:66:20:34:3e:c8:2a:04:fc:fe:a7:b1:e8:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4B:47:1E:B2:BF:25:68:C3:3C:3D:00:30:C5:F8:6F:86:1B:B7:6E
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:e5:23:7a:2f:5c:9a:8d:53:de:af:56:40:1e:bf:79:de:c9:
         70:50:aa:ff:8f:b8:e7:d4:89:55:bd:2e:f8:c2:be:75:da:23:
         6a:25:f3:ec:35:8e:73:34:7e:bd:92:d0:80:4e:a5:53:2c:a1:
         63:c5:a2:1d:30:b6:5b:87:28:fa:81:19:7e:cd:3a:94:40:ff:
         d9:b7:f8:e4:e4:9c:a9:1c:a5:10:57:ef:5b:03:51:13:c4:79:
         72:32:88:f0:fd:a1:49:67:65:23:d8:28:1a:80:dd:64:22:f7:
         d0:4b:10:5d:51:dd:78:aa:9a:15:4c:1d:17:0a:6d:18:87:df:
         18:71:3a:b0:48:2b:9f:bb:5a:5f:06:b4:c5:0c:d7:d6:ac:ed:
         05:cc:9b:aa:be:a1:e2:93:21:47:c5:3f:20:a9:c3:5c:4c:96:
         f1:a8:62:ae:2e:93:17:92:26:74:df:e9:de:7c:12:ad:8f:35:
         63:9a:54:4e:84:0d:93:21:79:82:80:a1:6f:38:46:1b:e2:c5:
         15:be:db:63:59:4c:2a:8b:c0:8d:22:f8:d9:14:5b:2c:40:77:
         31:48:44:a2:b4:a4:96:d6:ec:b3:5a:99:67:bd:8a:b6:60:7d:
         fe:ff:7f:98:ec:24:93:fd:b9:28:a3:e6:cb:b6:e5:b7:0d:10:
         6f:19:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:55:58 2025 by rpki-client