Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa
File:                     3230302e3131302e32382e302f32322d3232203d3e203139313830.roa (raw, json)
Hash identifier:          9SlrrcVHyQxezTKvn/rahAGBqFrt4cj8m6WllTdk51g=
Subject key identifier:   05:3D:E1:E5:F8:66:51:B2:C7:F4:E3:23:13:11:24:C0:08:95:1E:79
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       228A0BAA68A574455EAEF1F68AE75C84F6855532
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:18:06 +0000
ROA not before:           Tue 04 Feb 2025 18:13:06 +0000
ROA not after:            Tue 03 Feb 2026 18:18:06 +0000
asID:                     19180
IP address blocks:        200.110.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:0b:aa:68:a5:74:45:5e:ae:f1:f6:8a:e7:5c:84:f6:85:55:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:06 2025 GMT
            Not After : Feb  3 18:18:06 2026 GMT
        Subject: CN=053DE1E5F86651B2C7F4E323131124C008951E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:83:de:f3:e8:69:1e:ec:05:f8:73:39:0c:
                    88:c5:55:07:1c:e5:36:0d:f6:ec:df:07:91:5f:b5:
                    bf:e8:a0:45:2b:4e:28:2c:1a:e2:f1:1e:95:a9:46:
                    22:1d:ec:15:30:fe:96:d9:ed:17:87:f1:a4:bb:8a:
                    72:35:a7:e3:76:57:a8:d7:b5:82:86:06:76:84:e9:
                    38:fa:62:f2:e8:82:1f:cb:06:2d:e2:26:88:b7:24:
                    de:00:39:d6:8d:60:97:f8:5d:80:c5:eb:d6:19:96:
                    94:5e:57:ab:07:5c:c9:92:22:5c:fd:85:a3:5f:24:
                    da:93:3f:eb:c7:03:ce:41:25:c1:c8:4b:92:21:94:
                    b2:7e:e3:61:70:9b:a7:e9:f1:a8:27:f0:ae:7a:fd:
                    c3:ba:7a:8e:95:f3:50:a3:47:c0:4e:18:4e:a3:fc:
                    28:8e:3f:1c:ce:8c:f6:2d:31:8e:a6:82:70:1f:fc:
                    27:bc:94:c5:4d:f2:bc:eb:b8:3c:ee:76:dc:b2:6b:
                    7f:a1:dc:ff:bb:d3:9b:23:1c:ba:2d:04:0e:ed:16:
                    fb:64:be:e1:f6:3c:47:9d:dc:75:4c:4c:d8:8e:48:
                    18:25:7d:4e:57:e9:73:9a:1a:5a:ca:dc:02:8a:40:
                    70:3e:83:76:2d:0d:f9:be:24:97:59:26:e0:c1:36:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:E1:E5:F8:66:51:B2:C7:F4:E3:23:13:11:24:C0:08:95:1E:79
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:22:ea:8c:5e:24:5b:57:7a:cd:5d:23:80:73:9d:96:80:
         61:b0:11:4c:1a:53:6a:68:87:6b:18:0f:10:ba:06:a5:ee:d1:
         c4:34:75:0e:a1:bf:9d:ca:bc:2e:0d:e7:89:1a:2f:22:e5:f6:
         ab:55:17:dc:94:51:33:e8:46:da:3e:44:cb:be:29:1b:53:a9:
         52:a7:2f:d3:3a:7c:69:82:19:de:25:d5:f1:16:72:ad:7e:2b:
         f1:b0:fb:3d:08:b2:7f:fa:fc:6e:83:b3:c1:3f:5b:77:ba:28:
         75:6e:25:cd:13:5f:30:a1:ec:b8:0f:d1:4d:81:4f:85:9d:16:
         3c:44:20:d8:9f:e6:58:9c:90:79:38:86:7b:3b:d0:69:50:91:
         e0:b6:2d:7d:96:86:dd:ec:eb:59:ad:fb:2e:a6:b3:a0:04:4d:
         61:96:bb:45:29:34:a9:bf:b9:02:43:de:17:1c:e8:b3:e0:b6:
         3b:6a:9a:48:b4:9c:44:6a:ca:68:3e:80:18:86:e8:18:47:fb:
         ed:e1:ef:cf:64:3d:d1:ed:9d:73:b7:8d:42:5a:b8:b5:e1:91:
         2d:78:da:50:4b:ef:53:b5:04:e5:6c:4a:f1:a4:33:17:e7:ab:
         dd:cb:35:9b:44:58:7e:64:fa:c6:96:f6:ad:00:2b:06:95:7c:
         5b:cf:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:26 2025 by rpki-client