Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa
File:                     3230302e36382e3139322e302f31392d3234203d3e203131333135.roa (raw, json)
Hash identifier:          jnzFThwfcHB2R4PNg8ceA5EbaKutiExk8yCyC0CqNFk=
Subject key identifier:   F6:3F:4F:F2:72:D9:76:D4:FA:92:2E:FA:17:FB:B3:2A:F8:50:E9:72
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7B272D6DC4074D690FCF2C4C8AB96616AB1C7155
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa
Signing time:             Tue 04 Feb 2025 20:03:49 +0000
ROA not before:           Tue 04 Feb 2025 19:58:49 +0000
ROA not after:            Tue 03 Feb 2026 20:03:49 +0000
asID:                     11315
IP address blocks:        200.68.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:27:2d:6d:c4:07:4d:69:0f:cf:2c:4c:8a:b9:66:16:ab:1c:71:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:49 2025 GMT
            Not After : Feb  3 20:03:49 2026 GMT
        Subject: CN=F63F4FF272D976D4FA922EFA17FBB32AF850E972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:19:48:55:24:30:d0:25:85:4e:f2:4f:98:
                    92:aa:2e:db:f6:7c:cd:57:a5:09:49:98:59:4d:34:
                    b2:b1:4b:56:9b:96:a5:0c:00:4e:35:02:35:13:14:
                    02:ca:d9:58:b2:a3:58:bf:4c:cb:00:47:fd:c0:38:
                    bc:6b:ff:5a:85:dd:74:1f:40:7b:95:cf:fc:15:ef:
                    8c:22:7e:95:fb:e4:8d:12:36:89:c1:f1:aa:24:13:
                    e2:46:88:49:f6:01:41:f6:06:e8:6c:4a:f0:9d:33:
                    57:d0:9b:c0:e7:71:cf:ca:7e:61:4e:a0:97:c8:99:
                    dc:76:87:87:e3:6d:43:cc:fc:73:26:3d:42:a3:49:
                    a9:00:74:4a:22:4f:48:fe:3d:d7:6a:fa:cd:a6:18:
                    c3:f8:d6:33:82:77:ae:55:60:bf:90:9d:53:76:4b:
                    4e:3c:6d:61:63:68:04:c0:d2:e2:74:b8:f9:57:a3:
                    d0:5e:8b:ce:cf:62:35:3b:9f:c9:dc:06:5d:37:f6:
                    ab:31:af:1b:5f:a2:46:46:77:25:74:e1:8e:ad:64:
                    6c:29:ce:71:80:29:74:29:20:6a:0e:0f:d6:ec:9e:
                    f7:7d:4f:71:28:f9:99:69:cb:fa:b4:70:11:a2:47:
                    6e:03:13:0b:47:e6:36:bb:25:1d:44:df:95:0b:56:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:4F:F2:72:D9:76:D4:FA:92:2E:FA:17:FB:B3:2A:F8:50:E9:72
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:59:04:b5:a8:c5:51:bc:0c:45:6f:bd:aa:52:ad:d7:e5:ac:
         3b:e9:2a:14:b6:13:9b:9b:be:2a:5e:3f:bd:fb:72:2c:1b:b3:
         70:ff:2c:2b:e7:83:10:a3:0a:10:5c:c2:ce:b6:b2:80:84:46:
         ce:7a:04:fb:1c:2b:6f:ff:dc:1f:a9:1a:f9:5c:d6:22:6b:6b:
         86:a9:87:c0:a7:0d:f8:af:d0:a2:11:0c:d6:6a:8f:3f:9e:1e:
         ac:57:af:68:47:74:e7:10:a3:03:61:d5:40:7f:4d:7a:74:12:
         d3:6c:ba:1f:64:d2:ce:b7:2e:50:11:d8:bc:ab:bc:61:04:c4:
         bd:74:73:8d:16:56:23:a8:e8:22:b4:6c:9c:a4:01:c7:93:98:
         12:ba:33:12:ca:a5:74:b5:74:ed:bd:9b:05:52:2f:ce:0b:51:
         2e:71:ba:a2:84:02:57:c4:d7:f1:af:2d:c2:9d:da:1c:5b:6c:
         5a:41:71:56:c8:a7:8e:90:95:8c:5a:3b:9e:7e:30:e9:cc:75:
         97:a4:21:d8:30:03:bd:34:37:f1:48:a6:dc:5b:b5:b6:af:ef:
         32:d8:b0:3e:c6:7e:d5:a7:c5:e3:e5:3b:76:ad:94:6e:9f:91:
         97:5b:47:29:cf:0d:60:51:4a:22:4b:d8:8b:e3:8c:b7:10:b9:
         77:22:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:27 2025 by rpki-client