Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3130342e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e3130342e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          AeVQ+hnsw9rYdige3XTVUm8YjG2giEx94N45/PfRfi0=
Subject key identifier:   3D:A6:5A:43:30:1A:57:B4:9F:6D:30:32:82:1B:DA:50:4B:55:83:7C
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       2BC7BD003745A0A3893F61FD8AC5639496021FA7
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3130342e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 04 Feb 2025 18:19:15 +0000
ROA not before:           Tue 04 Feb 2025 18:14:15 +0000
ROA not after:            Tue 03 Feb 2026 18:19:15 +0000
asID:                     22047
IP address blocks:        200.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:bd:00:37:45:a0:a3:89:3f:61:fd:8a:c5:63:94:96:02:1f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Feb  4 18:14:15 2025 GMT
            Not After : Feb  3 18:19:15 2026 GMT
        Subject: CN=3DA65A43301A57B49F6D3032821BDA504B55837C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:c9:13:dd:7e:f2:0d:8c:55:51:c4:69:a7:
                    00:36:c8:25:82:2f:9c:b1:ba:87:e6:b2:d0:50:d4:
                    e3:92:45:19:6a:1e:ee:7d:1c:f9:0a:d6:5f:43:de:
                    ed:47:36:67:b9:93:dc:5d:28:dd:02:2f:82:44:85:
                    94:f8:10:41:ee:a2:ef:00:2b:22:af:85:d2:88:c2:
                    53:9c:04:dc:1d:d3:e6:6f:cd:e6:cc:de:98:5e:e4:
                    df:89:e3:d5:05:4b:33:43:8c:fe:e1:c0:ab:dd:aa:
                    ce:a6:04:18:93:38:97:05:d8:ee:24:71:16:51:a6:
                    93:66:59:f6:8b:02:ab:5a:22:20:69:f2:a8:dc:02:
                    2c:b1:61:b2:e4:fe:48:d8:60:ee:2e:21:77:5b:00:
                    a6:0b:39:9e:38:e4:c3:47:75:7b:b1:9a:c8:08:58:
                    f3:be:80:c7:36:e0:77:b5:80:c6:61:7c:21:5a:f9:
                    5b:13:19:3d:27:98:12:8d:05:b5:cd:d3:84:fb:fc:
                    1b:ed:6e:a5:b9:83:21:e2:cc:23:29:89:41:e7:8d:
                    f1:6a:82:3e:9c:35:7a:46:d8:f6:b4:23:c3:0c:71:
                    b6:c1:19:c9:35:16:70:6d:4a:fa:05:5b:e9:dd:9e:
                    fc:52:13:b5:10:14:0b:7f:07:70:26:cd:3c:cb:27:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:5A:43:30:1A:57:B4:9F:6D:30:32:82:1B:DA:50:4B:55:83:7C
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3130342e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:90:ef:ca:67:cc:5d:fb:3a:84:d4:7a:b1:48:84:ea:13:8e:
         92:f2:b8:35:43:ed:65:e0:d5:a0:b6:bc:ff:a5:b7:c3:61:09:
         10:0f:c5:7c:2b:e1:a0:f4:cb:e4:6b:b0:7a:13:c2:7e:d2:de:
         12:23:64:b4:b8:83:8c:c7:69:0d:4b:80:2a:f9:99:b4:0f:ea:
         1d:42:c0:62:21:eb:62:46:4e:9c:82:12:0d:e1:fd:4c:5a:8e:
         92:25:34:a6:62:db:a1:16:7d:8d:8e:cd:45:fd:62:67:3e:ca:
         fc:79:ea:34:97:e9:b6:cd:e0:bc:09:05:c7:44:e2:95:77:11:
         72:87:e1:97:66:ea:55:08:8b:79:27:a3:0f:9d:b2:87:71:24:
         3b:c2:07:f0:a2:4d:6f:37:f4:80:70:3e:50:89:33:85:ed:fd:
         bc:92:14:aa:21:61:bb:6d:6c:69:bd:c3:2d:07:c0:bf:52:53:
         9d:17:a8:1f:9a:de:96:c2:01:4d:b7:2f:97:9b:70:68:61:cb:
         c9:7c:79:a1:a6:3f:fe:29:06:12:25:d4:92:a6:2e:3d:6c:7c:
         91:62:01:ed:33:f3:47:04:ed:d7:1c:5f:1b:08:0c:28:d9:59:
         9b:77:25:8c:76:34:2e:ce:43:08:a6:3b:3c:21:c5:1a:5b:c8:
         d1:98:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:44 2025 by rpki-client