Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e38312e33322e302f32302d3234203d3e203232393237.roa
File:                     3230302e38312e33322e302f32302d3234203d3e203232393237.roa (raw, json)
Hash identifier:          mY6fGO/nbqifY91V+3gvrZZxxR+mNTK2Q2d69k6dz+c=
Subject key identifier:   82:0D:09:1E:6B:C3:99:B7:E4:13:C0:FA:A4:E2:C2:97:2A:1E:5A:91
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       258BDB1711BF991025789CF018E53F68448504D3
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e38312e33322e302f32302d3234203d3e203232393237.roa
Signing time:             Tue 07 Jan 2025 17:35:02 +0000
ROA not before:           Tue 07 Jan 2025 17:30:02 +0000
ROA not after:            Tue 06 Jan 2026 17:35:02 +0000
asID:                     22927
IP address blocks:        200.81.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8b:db:17:11:bf:99:10:25:78:9c:f0:18:e5:3f:68:44:85:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  7 17:30:02 2025 GMT
            Not After : Jan  6 17:35:02 2026 GMT
        Subject: CN=820D091E6BC399B7E413C0FAA4E2C2972A1E5A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:9b:ee:fb:2a:61:c9:8a:ac:18:18:3f:7b:
                    0b:02:8e:1d:3f:36:e3:56:46:cb:8f:f5:09:a2:a8:
                    9f:4e:11:63:77:41:f5:45:63:82:35:14:14:46:8d:
                    b8:ff:86:a2:cb:ed:a1:9d:24:01:1d:5d:37:40:72:
                    4c:64:f2:c0:fc:35:82:59:3e:e1:d2:7b:5c:87:c7:
                    24:59:ee:f4:29:07:75:b5:6d:92:f1:a1:cf:e9:94:
                    32:bd:a2:2e:cc:1e:29:97:e3:ea:0a:9d:10:1e:e4:
                    67:37:d7:7b:23:75:b0:77:70:30:14:55:79:4f:b5:
                    6f:e5:0e:90:28:3e:f9:01:02:4f:45:06:40:a0:e0:
                    fd:7f:9f:80:41:8b:56:fc:df:ae:94:59:cc:70:9d:
                    ce:90:72:b0:ff:dd:15:93:ef:1d:fe:d9:7b:72:d1:
                    8c:a2:16:e0:f2:a2:ca:5e:bc:b3:3a:ef:c3:a3:66:
                    10:d5:c9:53:bd:b2:91:c6:a7:2f:b4:2e:d7:ce:15:
                    dd:dc:a3:5c:ca:b4:4f:3f:87:1d:a6:3f:46:1d:99:
                    8b:40:13:8b:72:80:15:eb:f9:8e:29:30:56:54:03:
                    d3:cd:38:d1:8f:e9:48:d0:cd:30:86:8c:69:8f:54:
                    59:56:78:24:ee:19:32:b6:c1:cf:a3:38:b2:86:20:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:09:1E:6B:C3:99:B7:E4:13:C0:FA:A4:E2:C2:97:2A:1E:5A:91
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e38312e33322e302f32302d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:1d:03:20:a5:53:71:98:03:13:89:63:21:45:9d:f6:bd:13:
         56:a8:df:e9:f9:85:c5:55:72:e9:43:e4:ff:10:6b:ae:16:35:
         4b:ef:59:35:a6:60:6b:ab:78:ee:6f:a5:3e:5c:24:3d:85:16:
         e5:9d:37:c5:7a:1a:75:a9:fe:94:89:3c:b6:b1:14:24:8d:fa:
         49:aa:49:c9:cf:94:59:a0:5c:dc:62:1c:f5:1c:40:de:3f:88:
         14:42:01:eb:6c:d7:ca:21:dd:7a:06:92:b5:b9:d9:22:ec:00:
         ca:9d:e6:27:9c:b1:b8:98:f5:84:38:47:83:84:bf:f8:ed:2a:
         8b:36:38:cb:cc:c6:0b:01:d9:ac:59:3e:02:6a:10:ba:29:9e:
         af:6b:7d:47:f9:4e:35:81:4e:75:e8:40:df:a6:43:6a:2a:18:
         17:8c:26:27:44:1a:61:be:f3:40:53:44:7d:ea:6b:d9:46:8b:
         35:e2:13:62:38:55:73:cb:79:ac:a0:f8:e2:8e:97:a8:1b:85:
         d3:8a:2c:6c:72:68:5b:67:d4:66:1a:9c:d6:fd:04:40:06:db:
         2e:41:95:1b:ea:52:90:92:da:44:fc:ce:f7:33:79:f1:6f:73:
         4b:21:c8:9a:60:fe:01:ef:42:47:71:f7:ed:4d:e0:6f:ef:93:
         05:0a:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:19 2025 by rpki-client