Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa
File:                     3230302e32342e31362e302f32302d3230203d3e20323733303237.roa (raw, json)
Hash identifier:          CubNZNLiyl1Xp7KSb/oszf1huJCp+d6mdwqxRztyqxk=
Subject key identifier:   3B:B2:9F:4E:64:93:A4:53:26:05:29:66:6C:15:11:80:E5:90:5F:E9
Certificate issuer:       /CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
Certificate serial:       09F7E4F687AC617930E9F75D270AB159D553A77D
Authority key identifier: B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa
Signing time:             Tue 04 Feb 2025 18:50:32 +0000
ROA not before:           Tue 04 Feb 2025 18:45:32 +0000
ROA not after:            Tue 03 Feb 2026 18:50:32 +0000
asID:                     273027
IP address blocks:        200.24.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f7:e4:f6:87:ac:61:79:30:e9:f7:5d:27:0a:b1:59:d5:53:a7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
        Validity
            Not Before: Feb  4 18:45:32 2025 GMT
            Not After : Feb  3 18:50:32 2026 GMT
        Subject: CN=3BB29F4E6493A453260529666C151180E5905FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:7c:02:d7:5f:08:10:5c:47:97:4e:c7:16:
                    e9:d2:d6:6b:7b:06:ae:f9:e9:b4:08:0d:b8:f1:71:
                    67:df:1c:64:5e:ed:83:74:25:70:6f:fb:95:d5:b8:
                    e0:63:6b:c6:9e:6f:30:ad:fa:75:83:a6:84:61:65:
                    3f:f0:a9:5e:70:f3:ed:da:97:e3:d3:9b:34:c2:27:
                    5b:3e:c0:bb:82:48:cf:b0:f9:ca:7f:89:6a:a5:fa:
                    12:36:f5:d5:7e:f8:01:4f:1a:f9:6c:4c:d8:51:cb:
                    a1:e1:bb:ee:41:6e:45:5b:a5:d3:d6:cd:56:70:10:
                    8e:3a:13:c3:a6:04:48:d7:fe:d3:8a:3b:3e:b8:86:
                    a9:8e:da:af:bc:53:59:b6:40:92:be:52:8b:a9:84:
                    c3:f3:06:a5:0d:88:32:c7:a2:4f:cd:b4:27:b1:3e:
                    66:9e:66:df:7e:13:8f:66:4b:c3:aa:06:be:e4:05:
                    9e:56:36:85:a2:89:7f:e3:9a:d7:2a:b0:e2:d2:30:
                    60:55:7b:81:a3:73:31:d1:f3:6d:ea:10:79:10:cc:
                    d4:59:e8:40:be:11:3d:dc:f1:b5:10:15:02:99:7e:
                    a6:4b:c5:8a:64:57:93:08:e8:54:9d:44:86:ac:25:
                    16:f7:43:6d:27:39:25:7b:68:4f:af:64:97:bd:c6:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:9F:4E:64:93:A4:53:26:05:29:66:6C:15:11:80:E5:90:5F:E9
            X509v3 Authority Key Identifier:
                keyid:B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:f5:39:d6:f0:cb:24:94:d6:ad:f0:cf:03:bb:f4:b9:82:
         f9:ad:be:5f:0c:c7:e9:4e:fd:f9:e0:3f:50:55:65:30:d9:73:
         46:f7:15:d8:1a:76:92:07:07:81:24:3a:b9:14:f9:4e:5f:3a:
         c4:59:46:a5:10:77:e9:fd:aa:92:7b:c8:05:38:d9:8b:c9:08:
         c3:f9:c7:22:e4:ad:0f:bf:25:a1:d5:82:ea:67:91:c7:9d:04:
         67:94:8d:3d:ea:9a:a2:b2:01:fa:8d:9a:dd:04:f2:2f:71:21:
         b4:db:bb:f5:30:26:dd:64:e0:79:42:c9:49:0c:b6:28:67:3a:
         b2:db:93:a0:27:e3:a8:a9:11:06:f8:8d:14:1f:4c:68:bc:98:
         8b:44:a1:de:07:86:1d:70:f1:c4:1f:50:a8:f7:c5:a7:d2:02:
         e5:98:af:89:0a:6d:8e:54:3d:0d:4d:17:93:c2:07:90:88:f1:
         ce:1a:15:17:73:14:3e:6d:28:f3:c7:6d:52:a3:e8:d3:cd:0d:
         78:9a:c4:2d:ee:a8:53:c2:56:94:70:81:4e:07:a3:b3:76:ac:
         d1:80:8b:cd:00:8d:cb:79:7c:ad:e4:db:1d:55:44:34:45:23:
         3c:af:ea:29:34:58:69:2e:72:64:fb:af:e7:e9:bd:10:8b:0c:
         32:14:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:36 2025 by rpki-client