Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203232393237.roa
File:                     3230302e36382e3139322e302f31392d3234203d3e203232393237.roa (raw, json)
Hash identifier:          EnwFb9/FpmLxdCXjPOA0txSWOKQcP/BJTFy6smvkQqg=
Subject key identifier:   B9:0A:3F:07:4D:4F:63:E3:FD:63:CA:E0:A2:9A:4D:0E:F3:14:E3:16
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       43A8450FDD0CD86316794475A15215819F5858C8
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203232393237.roa
Signing time:             Tue 07 Jan 2025 17:35:00 +0000
ROA not before:           Tue 07 Jan 2025 17:30:00 +0000
ROA not after:            Tue 06 Jan 2026 17:35:00 +0000
asID:                     22927
IP address blocks:        200.68.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a8:45:0f:dd:0c:d8:63:16:79:44:75:a1:52:15:81:9f:58:58:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  7 17:30:00 2025 GMT
            Not After : Jan  6 17:35:00 2026 GMT
        Subject: CN=B90A3F074D4F63E3FD63CAE0A29A4D0EF314E316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:20:f4:f4:83:82:1d:d3:42:9b:f9:ef:26:
                    6b:26:65:bf:be:be:50:ef:37:4e:0b:19:a7:6a:39:
                    de:0f:67:9b:59:14:0c:48:30:a7:52:52:7a:64:e7:
                    81:0b:98:9e:05:df:29:67:ff:4a:a8:34:46:a9:bc:
                    92:1d:55:20:17:11:b0:42:1c:b6:45:5c:21:7b:5d:
                    03:70:28:8b:74:48:6d:e7:98:e1:79:95:34:bb:cc:
                    d0:16:45:8f:52:61:4b:15:b6:35:3f:16:39:3b:4f:
                    26:3d:42:b0:42:54:61:eb:f3:8b:6e:41:f2:64:97:
                    76:5f:39:d6:f2:b8:51:97:a0:fd:ef:e2:f5:18:14:
                    ff:2e:92:87:37:f1:11:15:95:93:71:15:94:c1:8e:
                    a7:69:80:cf:09:be:7d:c0:06:b1:71:0d:2f:55:de:
                    e4:21:85:07:2e:3d:ee:0c:43:0a:d7:9c:a0:96:0e:
                    7f:2e:1e:d3:1b:d6:2d:19:8d:96:6f:42:89:e1:47:
                    2d:e9:bf:89:99:d8:21:88:55:55:43:62:7b:b1:5d:
                    29:57:2d:d4:8a:81:e0:87:e8:4d:59:6c:d7:64:ad:
                    5c:7d:27:95:9f:03:8e:4e:b4:66:74:4e:51:b3:88:
                    00:f0:43:8e:aa:39:de:46:5a:00:e5:f0:07:df:80:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:3F:07:4D:4F:63:E3:FD:63:CA:E0:A2:9A:4D:0E:F3:14:E3:16
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:6f:6e:c9:62:31:c7:b4:f5:68:f6:14:a5:e0:f0:ae:df:
         88:f9:74:f5:35:d1:95:91:e4:03:66:fc:6a:1c:7e:3b:c5:fa:
         8a:af:f1:23:cb:30:fb:aa:cc:97:02:12:78:ff:65:d0:37:bb:
         49:5f:19:e4:32:bc:1b:dd:f0:20:4f:23:99:a1:22:83:dc:d1:
         a2:85:4c:aa:5f:c9:ca:3c:b4:76:b7:96:6b:d6:01:0b:6c:29:
         47:fa:9a:da:fa:9e:60:bf:1c:ba:7e:eb:ef:c7:ec:a9:91:7e:
         01:90:66:c9:4e:37:62:eb:26:e7:45:30:aa:39:10:b7:b1:a0:
         a3:d9:27:b8:33:1e:0f:38:4d:53:54:db:31:c8:19:61:7b:8f:
         6d:8e:e7:79:b9:ea:ee:0c:89:39:c6:85:d2:07:49:3f:bf:13:
         6f:0c:a6:81:05:6f:d5:f4:55:fe:59:e1:44:0c:ee:84:a9:38:
         2c:9c:20:16:6d:c2:b0:da:bf:b4:8d:a2:f4:79:ad:04:25:2c:
         37:20:b7:e1:7c:3c:27:79:3d:2a:e8:82:34:3f:68:14:c7:15:
         87:06:f0:5e:e8:2f:4f:20:e3:49:2c:84:b8:e3:0c:4d:b3:20:
         f4:f3:4e:dd:5c:46:3e:e0:47:7c:5e:fa:3b:71:5e:08:12:4f:
         eb:4e:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:57 2025 by rpki-client