Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136302e302f32332d3234203d3e203133373734.roa
File:                     3230302e302e3136302e302f32332d3234203d3e203133373734.roa (raw, json)
Hash identifier:          MYZqERksrwET2Cl882IJnu3sVI5cKtqOsEzr5CNAbMg=
Subject key identifier:   62:AF:80:A6:F2:5D:6F:06:EE:59:5A:F7:54:22:B4:55:33:FA:4D:48
Certificate issuer:       /CN=9E0418640D343DF276C373FC40288E6ABD81458E
Certificate serial:       389E6536203A4265096DA019EF2FDE2291A3ADB3
Authority key identifier: 9E:04:18:64:0D:34:3D:F2:76:C3:73:FC:40:28:8E:6A:BD:81:45:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136302e302f32332d3234203d3e203133373734.roa
Signing time:             Sun 13 Apr 2025 07:14:41 +0000
ROA not before:           Sun 13 Apr 2025 07:09:41 +0000
ROA not after:            Sun 12 Apr 2026 07:14:41 +0000
asID:                     13774
IP address blocks:        200.0.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9e:65:36:20:3a:42:65:09:6d:a0:19:ef:2f:de:22:91:a3:ad:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0418640D343DF276C373FC40288E6ABD81458E
        Validity
            Not Before: Apr 13 07:09:41 2025 GMT
            Not After : Apr 12 07:14:41 2026 GMT
        Subject: CN=62AF80A6F25D6F06EE595AF75422B45533FA4D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:05:94:d6:1b:6e:01:c4:6a:91:d0:ef:ca:
                    92:da:64:4a:b7:89:b8:39:75:3a:94:00:ab:0d:5d:
                    11:b2:99:af:98:7c:3d:43:2a:f0:07:24:15:9f:33:
                    6a:9f:2e:5a:6b:98:72:de:3a:b3:45:de:c2:a7:f5:
                    ca:82:63:71:0a:f3:d6:78:27:62:0f:34:5f:ec:52:
                    1d:46:64:8f:34:42:39:4c:c7:82:6c:11:ec:32:02:
                    20:cf:2a:3e:cf:d3:a2:6e:7e:b4:ad:e6:d6:d6:f9:
                    f3:ce:c3:14:5d:5e:6f:12:5f:93:c2:ba:d7:1e:3c:
                    5d:e0:9c:89:e9:bd:a7:ab:ed:a6:da:b8:5e:66:80:
                    58:b2:a8:33:68:43:6f:e2:6b:3d:ff:a7:b1:50:87:
                    c4:0e:22:c4:8a:63:8d:e8:13:ee:7c:c6:34:ab:9a:
                    2b:f6:4c:d2:35:d7:ec:b8:ac:02:b1:6d:41:6f:d1:
                    e8:41:e8:9e:21:31:6e:d4:54:81:1f:2f:de:3d:0f:
                    0e:ab:20:b4:cf:d0:42:99:5d:3d:cf:cf:83:a4:2c:
                    77:3d:cd:a9:0d:c5:ec:8f:00:9a:e3:02:18:26:5b:
                    bb:cd:ca:61:aa:04:2c:a3:13:62:6f:81:af:eb:62:
                    99:43:b2:53:eb:79:ba:ae:83:57:ca:48:37:4a:e7:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AF:80:A6:F2:5D:6F:06:EE:59:5A:F7:54:22:B4:55:33:FA:4D:48
            X509v3 Authority Key Identifier:
                keyid:9E:04:18:64:0D:34:3D:F2:76:C3:73:FC:40:28:8E:6A:BD:81:45:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136302e302f32332d3234203d3e203133373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:8b:c6:e6:c6:61:ac:44:63:33:ff:cd:3e:6c:0d:5c:99:4f:
         fa:ec:6d:2e:bb:81:3d:d2:b6:d9:63:b4:e7:54:28:2a:80:83:
         0d:a3:4d:51:a1:24:b3:6a:68:c9:99:c4:57:6b:0c:e3:ed:b4:
         5f:fb:5a:89:6f:2d:6e:19:57:49:bf:f3:e2:60:dc:ca:ac:2d:
         33:95:53:f1:a5:a5:e3:bf:cb:d7:32:81:bc:23:9d:4d:11:45:
         fa:1e:8d:6c:0c:22:c8:4c:77:73:07:ab:7e:b8:d5:31:0c:51:
         26:88:07:ce:4b:5f:ce:4a:17:71:7c:ef:c8:37:f5:1b:e0:ca:
         49:90:46:e3:10:b4:59:ea:f7:17:d2:c7:3c:62:3f:59:89:ae:
         a4:85:8e:d3:28:9e:0b:93:06:6c:7c:9b:2f:5c:03:b2:54:eb:
         bb:aa:bb:80:9c:68:dc:52:a9:30:a5:ed:21:c6:35:b1:62:00:
         17:9b:74:09:ba:f7:19:c3:eb:67:db:10:e7:82:18:79:d4:a6:
         8a:1a:6d:01:2c:0a:c5:14:ae:f8:ea:9c:1f:1e:13:5c:d9:c9:
         46:e2:2d:af:fe:41:32:bb:e7:2d:79:c4:6b:59:5f:5b:42:43:
         81:58:6f:83:6a:f7:93:fe:f8:03:66:d7:06:6d:a0:75:49:26:
         7f:d4:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:46:16 2025 by rpki-client