Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/759E22995C07FC938AEB5D45940DAAB4DC835C179C50142B91AE67821D741015/0/3230302e332e3138342e302f32312d3234203d3e203237393335.roa
File:                     3230302e332e3138342e302f32312d3234203d3e203237393335.roa (raw, json)
Hash identifier:          we7C+Mc/rEjqxgHdWYCApW9oU5ju4HCg8bDowIUiL2c=
Subject key identifier:   2C:01:B5:51:37:E0:7D:63:DB:9D:EB:04:6C:33:52:76:B4:08:89:12
Certificate issuer:       /CN=91DB0B5933D47338F0DC3FD137BB68956667C5D5
Certificate serial:       1BF527DD1BE7C038E04F67A248A51717ED947948
Authority key identifier: 91:DB:0B:59:33:D4:73:38:F0:DC:3F:D1:37:BB:68:95:66:67:C5:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DB0B5933D47338F0DC3FD137BB68956667C5D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/759E22995C07FC938AEB5D45940DAAB4DC835C179C50142B91AE67821D741015/0/3230302e332e3138342e302f32312d3234203d3e203237393335.roa
Signing time:             Tue 04 Feb 2025 18:29:06 +0000
ROA not before:           Tue 04 Feb 2025 18:24:06 +0000
ROA not after:            Tue 03 Feb 2026 18:29:06 +0000
asID:                     27935
IP address blocks:        200.3.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/759E22995C07FC938AEB5D45940DAAB4DC835C179C50142B91AE67821D741015/0/91DB0B5933D47338F0DC3FD137BB68956667C5D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/759E22995C07FC938AEB5D45940DAAB4DC835C179C50142B91AE67821D741015/0/91DB0B5933D47338F0DC3FD137BB68956667C5D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DB0B5933D47338F0DC3FD137BB68956667C5D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f5:27:dd:1b:e7:c0:38:e0:4f:67:a2:48:a5:17:17:ed:94:79:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91DB0B5933D47338F0DC3FD137BB68956667C5D5
        Validity
            Not Before: Feb  4 18:24:06 2025 GMT
            Not After : Feb  3 18:29:06 2026 GMT
        Subject: CN=2C01B55137E07D63DB9DEB046C335276B4088912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:76:04:42:08:70:d4:e1:62:90:e3:cd:d9:
                    a3:19:27:d8:55:0a:57:c6:d8:a1:77:04:2b:29:b9:
                    29:f9:98:84:96:f9:4a:83:af:03:68:e2:62:fe:98:
                    d7:b5:af:d2:7e:29:c7:f9:11:d3:30:d7:50:c2:cc:
                    7e:ab:af:1b:67:18:02:0f:8a:94:5f:e4:4e:e6:61:
                    d3:2a:cf:35:bc:a6:e0:f0:e0:6d:40:20:77:c7:34:
                    dd:e4:ea:95:fc:70:2f:08:a3:4f:90:a4:ac:b4:eb:
                    37:0a:9c:99:f7:f6:de:d3:c7:0c:8c:f9:af:7d:f1:
                    29:ff:cf:fe:6a:3b:95:d9:13:f7:b7:13:dc:48:44:
                    e4:c2:41:fc:a9:5a:64:98:87:96:d9:e4:e8:8e:18:
                    ed:85:fa:dd:c4:b6:86:e1:f2:9c:91:ad:99:03:01:
                    d7:bd:81:91:e5:e7:5c:22:22:ee:bd:e9:ee:ac:0b:
                    95:ae:a7:4d:2f:58:ea:78:89:9e:ca:4e:84:0f:cc:
                    e2:4b:1a:3f:57:68:65:fe:bd:a0:ac:93:de:89:87:
                    99:b0:de:4b:18:1f:49:73:97:7f:46:f4:2c:40:9a:
                    1b:6a:47:3d:fc:e2:9e:b2:80:32:4e:9d:7a:d8:c8:
                    2d:95:c9:08:d4:67:f0:41:79:54:b7:48:f3:e8:b4:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:B5:51:37:E0:7D:63:DB:9D:EB:04:6C:33:52:76:B4:08:89:12
            X509v3 Authority Key Identifier:
                keyid:91:DB:0B:59:33:D4:73:38:F0:DC:3F:D1:37:BB:68:95:66:67:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/759E22995C07FC938AEB5D45940DAAB4DC835C179C50142B91AE67821D741015/0/91DB0B5933D47338F0DC3FD137BB68956667C5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DB0B5933D47338F0DC3FD137BB68956667C5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/759E22995C07FC938AEB5D45940DAAB4DC835C179C50142B91AE67821D741015/0/3230302e332e3138342e302f32312d3234203d3e203237393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:09:04:a6:03:34:07:52:f8:93:54:fc:ed:ab:01:92:73:c9:
         12:a1:69:ff:e6:c8:59:67:0e:0b:3b:d6:17:a9:7b:47:ae:16:
         4c:7b:d3:95:8c:ae:e8:a4:1c:bf:21:83:ee:20:2d:ea:61:e8:
         9c:71:eb:ec:73:38:d9:77:8d:9a:47:f9:3a:f4:cd:cb:b3:ad:
         57:9b:64:0f:67:8f:16:5a:a3:2b:05:10:8d:df:0a:52:96:41:
         f7:91:dc:81:af:65:c8:5f:6e:b3:39:66:ee:69:3a:7e:7e:40:
         8f:39:81:80:5e:bd:70:13:40:39:e5:92:9e:d2:00:e1:bb:b1:
         f4:61:2e:40:ea:28:0d:cf:ae:f8:76:f6:5e:f9:cc:43:df:36:
         1d:1a:d2:bd:9c:aa:b4:12:7d:28:8f:fc:02:80:67:8b:1d:50:
         62:e2:1d:16:d8:fd:a6:8c:d2:87:b4:90:73:a2:26:0b:00:cd:
         e2:75:71:62:82:56:6b:80:5e:dd:11:41:06:85:cd:bc:1d:ee:
         eb:1e:ee:14:ec:64:3b:cb:0a:61:d0:85:e4:df:5a:52:30:fc:
         cd:7c:6d:44:ba:e9:b0:80:8d:d8:c4:16:b9:75:e9:5c:aa:aa:
         20:1f:a0:10:ea:d9:67:14:b2:59:a8:42:9e:35:45:b7:68:36:
         b2:c4:cf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:11 2025 by rpki-client