Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa
File:                     3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa (raw, json)
Hash identifier:          aDNbgmgAqaNd33TeOOFZbpTre4XVi8nAEiW39XH+Mo8=
Subject key identifier:   36:37:35:BB:38:54:AA:BC:37:1B:90:D0:B6:1D:28:C8:3C:79:70:25
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       4A3C248AD11C74B701B61AF5A503C6864B352679
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:36 +0000
ROA not before:           Tue 04 Feb 2025 20:02:36 +0000
ROA not after:            Tue 03 Feb 2026 20:07:36 +0000
asID:                     22724
IP address blocks:        200.105.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3c:24:8a:d1:1c:74:b7:01:b6:1a:f5:a5:03:c6:86:4b:35:26:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:36 2025 GMT
            Not After : Feb  3 20:07:36 2026 GMT
        Subject: CN=363735BB3854AABC371B90D0B61D28C83C797025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:26:8b:9a:30:5f:d2:d4:7f:d0:97:39:0f:11:
                    ab:aa:d8:91:a0:fc:69:0f:bb:61:a4:ac:24:24:b7:
                    23:f7:d4:e8:31:fb:45:51:4d:7d:e9:47:c2:aa:20:
                    5d:d2:66:cc:f9:49:1b:66:a9:b8:c3:76:d0:db:c1:
                    b4:52:db:d6:22:5a:91:00:b9:17:a7:4e:a3:71:aa:
                    8b:df:a8:ef:69:7d:9b:f6:d7:10:9c:ff:2e:54:fa:
                    ca:21:90:cc:28:da:fa:50:0e:1a:1d:d5:69:a9:bf:
                    78:72:3e:16:01:fc:4f:21:bf:b3:37:9e:90:f6:6d:
                    eb:94:83:76:7b:e9:c0:81:fb:46:27:f3:06:2b:ea:
                    98:d2:16:62:08:a8:13:04:f8:fc:8e:b6:cb:75:1d:
                    b5:75:f0:f6:9c:36:d8:3a:61:de:e5:d1:b8:25:80:
                    75:10:7e:f9:7e:be:8f:d3:3a:ce:77:60:bb:0e:1e:
                    9e:d6:8b:d0:02:1e:da:cf:c6:1c:4a:1d:ae:f3:0d:
                    ce:fc:de:e6:ce:6e:be:43:a1:c2:6c:91:fe:7d:7d:
                    d5:2a:98:03:fa:61:1d:bd:eb:b3:7d:09:02:c9:22:
                    2b:31:09:5c:ba:8b:a6:51:1e:0b:58:86:7f:39:f5:
                    5b:c3:2c:0d:6a:1e:1a:60:e1:41:bc:d6:03:e7:1f:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:37:35:BB:38:54:AA:BC:37:1B:90:D0:B6:1D:28:C8:3C:79:70:25
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:54:13:66:5d:36:96:58:ca:2c:a6:b5:e3:e1:86:62:ff:
         79:04:f8:5d:63:2c:fd:3f:ec:db:6a:24:1d:33:88:8b:df:85:
         71:2c:c2:6d:b5:ab:24:12:4d:54:26:ad:f6:d2:a1:15:1f:ca:
         38:19:92:93:2b:ca:0d:70:26:ff:2b:e6:fd:f9:81:40:94:a3:
         d5:8c:ad:0f:f4:7c:49:2c:5d:58:54:cb:83:2d:84:01:05:f0:
         f9:7e:35:3f:c8:2b:25:bc:ad:fd:8a:f3:00:7b:62:ee:32:65:
         6c:d9:52:39:c2:a3:89:5e:e2:fd:af:e3:5c:f2:a2:4f:2e:01:
         3d:01:64:3f:7c:24:03:f1:10:94:82:0b:07:c3:e1:3e:34:c0:
         86:e0:e2:7d:3f:fd:81:bd:bd:c8:02:6d:4d:c7:a8:da:1d:31:
         65:4c:03:a4:25:b2:56:3f:85:46:29:7a:28:a4:d1:ea:56:4c:
         0b:5d:93:5a:4a:25:88:7c:0c:50:5b:53:2f:d2:b8:a7:d8:db:
         ad:17:02:8e:ef:f8:48:a6:2c:a9:d0:ab:74:fb:87:54:3c:b7:
         08:0e:26:6a:10:de:3a:be:e8:9a:3a:84:ff:19:20:47:4b:2d:
         65:7e:1e:78:0b:8c:85:f8:8d:28:8a:61:28:6a:c7:4b:f2:e1:
         d6:6f:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:48:29 2025 by rpki-client