Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/3230302e3131342e36342e302f32302d3234203d3e20323730303635.roa
File:                     3230302e3131342e36342e302f32302d3234203d3e20323730303635.roa (raw, json)
Hash identifier:          Zxt0ydQZ7qFImnNDAt/aXYF47yATpGzu3G6/DqjA/Qw=
Subject key identifier:   57:DA:CD:40:21:FC:E3:9F:0F:4F:3B:DA:DD:C2:17:73:00:80:19:67
Certificate issuer:       /CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
Certificate serial:       4AE1AA6B26CC2826568BC8C8BFD2C98CEFEEADD2
Authority key identifier: 02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/3230302e3131342e36342e302f32302d3234203d3e20323730303635.roa
Signing time:             Tue 04 Feb 2025 20:06:26 +0000
ROA not before:           Tue 04 Feb 2025 20:01:26 +0000
ROA not after:            Tue 03 Feb 2026 20:06:26 +0000
asID:                     270065
IP address blocks:        200.114.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e1:aa:6b:26:cc:28:26:56:8b:c8:c8:bf:d2:c9:8c:ef:ee:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
        Validity
            Not Before: Feb  4 20:01:26 2025 GMT
            Not After : Feb  3 20:06:26 2026 GMT
        Subject: CN=57DACD4021FCE39F0F4F3BDADDC2177300801967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:78:6b:81:96:c3:7c:b5:51:1a:a5:e7:9f:
                    c2:8b:52:29:95:da:4d:0a:b7:e1:3b:52:5a:30:e6:
                    eb:b8:6d:22:56:1a:35:e8:8f:84:e5:90:b2:1c:2f:
                    11:1c:14:39:02:3c:23:bc:0b:c7:17:a4:da:c7:25:
                    f3:c3:11:90:45:90:bb:7e:0b:1e:a3:30:20:f1:a1:
                    44:41:fb:57:51:74:7b:0f:4e:ac:d0:ac:18:c0:77:
                    85:b1:b8:bf:e1:7a:5e:7f:e0:0d:5b:02:79:70:58:
                    31:b1:05:c9:93:64:6d:4b:95:00:88:d3:28:2b:44:
                    5b:26:40:86:48:12:bc:45:9b:1a:91:3d:59:9a:4f:
                    77:24:07:33:d5:33:d7:02:8b:d3:e2:71:4f:97:9b:
                    99:2e:35:05:7a:66:d8:bf:3e:74:f6:84:d2:a3:c4:
                    a6:fd:c5:f9:b6:bd:ea:86:d0:24:ad:34:a8:5e:27:
                    f7:bf:24:b8:f0:9c:bc:04:1d:5e:cd:15:77:a6:86:
                    83:a6:67:68:a4:53:7f:7c:79:7d:fc:48:13:77:de:
                    7e:4a:16:4b:4b:4a:e6:c7:fb:f9:2f:94:5a:10:08:
                    a1:1d:aa:d6:54:08:26:f3:d4:98:e1:8b:0d:8e:db:
                    1f:29:a3:19:7b:52:d1:f9:5a:1d:1e:b9:88:14:1d:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:CD:40:21:FC:E3:9F:0F:4F:3B:DA:DD:C2:17:73:00:80:19:67
            X509v3 Authority Key Identifier:
                keyid:02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/3230302e3131342e36342e302f32302d3234203d3e20323730303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:37:b7:8b:29:69:68:10:50:f4:bc:89:2e:8e:17:f6:1f:
         69:72:66:58:68:36:ed:d1:f0:25:94:2b:90:15:ad:77:14:24:
         23:09:f0:d2:ae:da:b3:f1:69:a0:21:34:e0:27:72:b3:92:ea:
         32:97:b2:99:48:3c:4f:d4:88:a0:dc:f2:61:52:9a:30:b6:01:
         31:41:98:41:89:1a:da:80:dd:82:df:5d:79:36:b9:01:af:4f:
         a0:d8:88:9b:b8:6b:eb:5b:23:82:68:f4:5a:01:1d:4b:d0:3a:
         44:5f:00:43:21:41:80:a6:8f:3e:94:d5:ec:3d:fd:64:aa:81:
         c1:c9:5f:a9:0f:93:39:54:d2:0b:8a:a7:bb:06:6f:01:a2:b6:
         e7:71:cb:da:6d:78:09:dd:a4:7c:11:7e:48:1f:1d:24:c7:f0:
         8d:ec:27:4b:6f:40:6e:20:9b:91:eb:04:be:ff:c7:da:14:65:
         42:30:64:6e:cb:fe:98:3e:75:47:70:3e:81:cc:3d:93:a0:a8:
         28:3d:bb:05:a2:43:1d:94:86:65:7d:b5:53:51:e9:7a:c3:76:
         29:c1:a0:40:ce:dd:b5:93:e4:fd:65:ae:42:70:c6:f8:40:c0:
         d0:5b:73:3d:ed:e5:5d:be:08:b6:26:5f:93:15:79:d8:75:e7:
         a0:57:b1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:39:14 2025 by rpki-client