Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e34302e302f32312d3232203d3e203139313830.roa
File:                     3230302e3131302e34302e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier:          Td/TrBbcgIjr8JIu2KQHtqi8IFdUuJ6CSp8sHzdRDkU=
Subject key identifier:   4F:6C:4F:3C:1A:F7:9D:E4:E2:4B:13:4E:24:DB:41:36:F4:2E:2C:35
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       581578A83BF53737FB2FC203292C65AFB16F3A82
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e34302e302f32312d3232203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:18:10 +0000
ROA not before:           Tue 04 Feb 2025 18:13:10 +0000
ROA not after:            Tue 03 Feb 2026 18:18:10 +0000
asID:                     19180
IP address blocks:        200.110.40.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:78:a8:3b:f5:37:37:fb:2f:c2:03:29:2c:65:af:b1:6f:3a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:10 2025 GMT
            Not After : Feb  3 18:18:10 2026 GMT
        Subject: CN=4F6C4F3C1AF79DE4E24B134E24DB4136F42E2C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f7:3a:07:f9:62:ec:fb:37:61:e2:73:7e:80:
                    d5:5c:b0:ce:4c:ec:eb:a6:e0:ed:96:4e:7f:be:48:
                    89:5e:57:63:52:e1:a1:82:33:75:c7:01:20:d7:c1:
                    99:9d:5c:12:cd:67:85:e5:ff:e5:82:4b:33:ef:db:
                    79:38:c8:c5:7a:7a:46:9b:bd:e1:f1:3b:2a:02:7d:
                    34:0e:df:47:3e:e7:18:fe:8c:c9:6a:61:d6:0a:02:
                    50:f7:c9:fd:6d:39:58:3d:bb:51:04:65:75:8e:0d:
                    c0:65:5a:eb:aa:d0:d6:fb:7a:4a:be:14:17:ed:60:
                    07:c2:c7:48:94:36:5a:0f:46:89:5f:6c:01:e5:12:
                    87:04:4b:24:f7:00:15:3b:37:98:38:2b:49:3b:6e:
                    00:9e:78:62:a0:78:e7:2d:b5:d5:73:53:9c:a4:a7:
                    e7:71:ab:8c:d3:54:72:e6:77:c1:79:25:95:e5:f2:
                    9b:ed:c4:78:c4:c8:cb:7a:5c:3e:b2:34:50:83:32:
                    76:7d:d9:75:1e:e6:ec:27:ed:52:a5:0d:7e:44:81:
                    c0:78:a0:91:70:2a:d3:98:ce:b5:7d:ba:ab:92:81:
                    a0:68:98:64:f8:98:17:6b:4a:24:1d:6d:7f:a6:86:
                    9b:e6:07:01:7e:57:26:c1:f7:09:2a:3c:09:c0:ae:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:4F:3C:1A:F7:9D:E4:E2:4B:13:4E:24:DB:41:36:F4:2E:2C:35
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e34302e302f32312d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:00:f4:f5:c5:1d:33:de:b3:7c:d1:03:f2:7f:f7:f0:72:
         89:8d:24:1b:ca:fb:fd:d4:36:db:90:fe:fb:cc:db:79:d6:34:
         78:e1:87:32:8d:02:45:df:a9:6e:0e:22:02:ce:10:d9:56:e4:
         90:bb:7c:8b:e1:e0:58:fa:3c:04:4f:8d:0a:52:73:6a:ff:7f:
         05:24:49:34:35:88:4c:49:ce:ab:7b:d8:1f:a4:a9:6a:27:70:
         5f:bc:60:df:d6:bc:d1:c5:1f:3b:8c:e1:0c:11:72:84:7d:15:
         1d:bb:10:09:f6:4b:23:19:e6:d6:39:ed:ec:a9:5d:3e:27:ac:
         f3:0d:a9:12:73:08:93:f0:26:2b:fd:ba:7e:73:0b:ec:6e:e6:
         26:0a:d9:f1:52:d3:68:49:68:35:a3:36:95:8c:3c:10:47:97:
         68:f5:10:59:2e:7b:ad:75:95:4b:3b:71:6c:2a:f3:bc:6a:10:
         3e:bd:3b:c5:55:16:95:d0:06:64:34:f8:80:a8:57:2b:36:3b:
         44:80:2c:36:3f:da:7d:d6:bc:84:db:81:f2:a4:2b:eb:81:ef:
         80:82:d3:14:97:d8:e8:a8:f8:59:6c:ff:47:b8:ed:f2:61:50:
         e2:06:88:5e:4f:56:03:24:bf:11:cd:c7:c8:a8:9e:ac:37:d4:
         04:ad:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:07 2025 by rpki-client