Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3139322e3130352e302f32342d3234203d3e203231353735.roa
File:                     3230302e3139322e3130352e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          bTr4wrvg/qPJkVsV35oMbjPa8DTo3LveTtknCFRSggI=
Subject key identifier:   27:59:D1:72:15:91:4A:21:2B:A0:B3:D1:5B:84:BA:53:91:3B:CF:98
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       727468069F985F3B1F3508DCA1A2CAD4D14E2400
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3139322e3130352e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:18:14 +0000
ROA not before:           Tue 04 Feb 2025 18:13:14 +0000
ROA not after:            Tue 03 Feb 2026 18:18:14 +0000
asID:                     21575
IP address blocks:        200.192.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:74:68:06:9f:98:5f:3b:1f:35:08:dc:a1:a2:ca:d4:d1:4e:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:14 2025 GMT
            Not After : Feb  3 18:18:14 2026 GMT
        Subject: CN=2759D17215914A212BA0B3D15B84BA53913BCF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:86:a4:b4:93:86:9c:97:e7:ed:32:cc:68:
                    65:13:2d:73:3a:36:fe:53:08:b4:7d:fd:fe:09:ef:
                    89:fd:12:05:6e:a9:99:c0:9c:60:3f:64:54:48:48:
                    96:b6:10:16:f4:5e:a7:e6:83:cf:f7:19:5b:39:25:
                    dd:d3:22:b2:cd:fb:16:01:3f:84:09:9c:0f:ea:51:
                    c9:a8:94:3a:0e:38:4a:83:d6:d7:17:20:4f:cb:8c:
                    0e:1c:58:ae:cd:fb:17:87:c1:49:b9:c1:aa:f6:c6:
                    f1:31:7b:df:ad:35:a4:cc:b5:59:74:b5:f5:e3:1d:
                    b6:65:fb:a1:e0:56:07:97:92:0d:e5:53:c8:9a:fc:
                    a3:9a:c0:9d:b4:9e:e9:a4:27:f9:21:a0:5a:6b:1b:
                    8a:1c:19:7e:a0:2d:b6:d8:4a:c9:35:7b:41:ad:58:
                    a8:a3:b0:9e:64:20:8d:5b:55:3f:b0:86:66:c6:ea:
                    1d:5f:19:32:0b:64:a5:86:cf:ba:55:a7:6d:95:68:
                    e9:76:32:c5:0e:c2:e8:e7:22:be:86:9e:24:50:8c:
                    15:ff:14:b5:bf:72:7f:a0:26:6c:0c:bb:4c:82:12:
                    f6:ea:43:75:aa:49:65:18:d5:bf:01:2f:e0:f4:49:
                    d6:de:b6:44:80:ee:8c:93:57:f3:3e:40:59:9b:e5:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:59:D1:72:15:91:4A:21:2B:A0:B3:D1:5B:84:BA:53:91:3B:CF:98
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3139322e3130352e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:d3:c1:dc:68:79:57:87:64:3c:b5:e3:fa:c7:e4:20:81:
         64:90:08:11:ae:ab:63:eb:bb:33:ed:20:20:20:64:e1:72:60:
         06:e5:4d:59:75:38:7b:87:40:e6:b0:86:09:f0:de:42:00:50:
         c3:af:f2:f1:98:5e:93:c4:9d:7a:78:a8:75:98:6e:e0:ae:a4:
         a9:2e:20:bd:a1:de:58:63:de:6d:25:ee:95:84:f2:f3:6d:ba:
         42:3f:b7:4b:66:e1:6a:5d:2d:dc:fe:8e:c4:84:9e:04:5a:0d:
         b4:20:89:d4:7c:a9:55:bf:de:09:0a:69:50:8f:78:ca:d1:82:
         1d:7d:0c:b0:a5:c8:b8:96:6b:8d:ca:0b:52:df:2c:bd:d1:64:
         8e:71:f9:64:ce:78:ef:ec:f2:2e:b4:ae:2a:ab:e2:12:f0:72:
         6f:af:1f:5d:b3:59:4c:a5:43:20:b4:a4:1c:55:77:d4:6e:53:
         d3:67:45:f6:36:ed:80:af:eb:d2:93:e0:f5:87:2a:70:92:2b:
         6d:07:49:1f:a5:32:3b:07:af:0d:73:80:b4:59:d0:6d:fc:44:
         b8:e3:2d:2c:a7:8f:c1:5c:6e:21:a3:1c:50:f5:7b:63:49:c8:
         4c:3c:b1:d1:47:8e:39:44:6f:b1:9e:84:a5:1e:fb:00:dd:22:
         8c:a3:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:26 2025 by rpki-client