Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/3230302e33312e3232342e302f32302d3234203d3e203130393634.roa
File:                     3230302e33312e3232342e302f32302d3234203d3e203130393634.roa (raw, json)
Hash identifier:          20Skg/VXLRXGUHdlmdVX2WHO0QNl314V4J+Q/AWjTXY=
Subject key identifier:   31:3C:4A:95:30:FE:8E:24:E1:D6:33:3B:51:93:9C:B9:05:98:99:86
Certificate issuer:       /CN=1AE1F7F878280542E5E790B352C0AEC7268C8C90
Certificate serial:       19AE5C06EA1C7E5489E60EF67DADDA0C6AD0522D
Authority key identifier: 1A:E1:F7:F8:78:28:05:42:E5:E7:90:B3:52:C0:AE:C7:26:8C:8C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/3230302e33312e3232342e302f32302d3234203d3e203130393634.roa
Signing time:             Tue 04 Feb 2025 18:40:32 +0000
ROA not before:           Tue 04 Feb 2025 18:35:32 +0000
ROA not after:            Tue 03 Feb 2026 18:40:32 +0000
asID:                     10964
IP address blocks:        200.31.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ae:5c:06:ea:1c:7e:54:89:e6:0e:f6:7d:ad:da:0c:6a:d0:52:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE1F7F878280542E5E790B352C0AEC7268C8C90
        Validity
            Not Before: Feb  4 18:35:32 2025 GMT
            Not After : Feb  3 18:40:32 2026 GMT
        Subject: CN=313C4A9530FE8E24E1D6333B51939CB905989986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:2b:74:a8:8a:b3:c4:e2:d2:6a:76:26:ee:
                    5d:1a:06:48:8d:d9:2f:30:26:17:6a:9e:71:25:58:
                    15:47:20:83:ca:bf:96:26:0b:a5:5f:68:3a:54:15:
                    11:5d:a5:90:ec:90:ec:88:eb:6b:d9:31:6e:5c:60:
                    54:09:be:ed:a0:e2:d7:71:af:7b:89:9d:bf:81:1b:
                    14:2f:61:84:18:20:61:7a:3f:e6:45:bb:5f:eb:7b:
                    41:00:b7:b7:36:6b:6a:ac:60:2b:e4:ae:7e:01:37:
                    a7:05:ce:fe:91:13:ea:4b:af:e1:bf:87:c7:e8:76:
                    e3:49:5a:c7:e5:c1:ed:19:2b:18:8b:de:43:e7:cc:
                    f5:45:d3:94:3b:7a:fa:4d:4c:4e:9a:7a:01:88:20:
                    45:26:f8:1c:91:eb:62:e4:c9:92:19:43:bd:49:5c:
                    b5:2e:d6:ab:d8:f0:f8:78:53:b0:27:d8:bb:ef:c7:
                    a9:0c:2b:90:8d:b5:ad:c5:30:a0:12:41:b6:ef:ab:
                    3d:29:e2:47:ce:15:bd:a8:fe:43:b7:db:4d:b7:9a:
                    08:07:31:6c:23:b1:c4:0b:5c:99:3d:e4:d3:5a:63:
                    45:0e:5b:fb:7e:36:c6:27:4d:41:74:a2:98:3f:d2:
                    b8:25:e1:2a:6b:16:57:6a:47:80:73:1a:30:e8:a1:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:4A:95:30:FE:8E:24:E1:D6:33:3B:51:93:9C:B9:05:98:99:86
            X509v3 Authority Key Identifier:
                keyid:1A:E1:F7:F8:78:28:05:42:E5:E7:90:B3:52:C0:AE:C7:26:8C:8C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/3230302e33312e3232342e302f32302d3234203d3e203130393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:73:13:0e:7a:05:d6:c5:e1:41:c0:5b:fe:05:9d:44:bb:5e:
         30:7b:3b:88:27:6b:68:b0:ff:c3:6d:21:0a:a3:c2:eb:82:94:
         f3:98:c0:01:32:ef:84:ad:b6:af:71:f0:b5:5d:ae:03:52:a8:
         47:3e:b1:f9:4a:67:82:f6:bf:bb:6d:00:f2:23:67:5d:1e:52:
         ee:a9:d6:46:54:fa:d2:4a:8c:39:88:07:40:55:84:9c:4f:0e:
         10:18:9b:73:c7:f2:30:5a:78:7a:57:2f:1b:dd:d1:15:22:fe:
         e4:38:6c:c9:4a:4d:c5:a7:d7:6d:88:e6:41:ff:97:2e:4b:f1:
         af:f5:99:f5:f7:ad:09:d3:cf:43:75:1e:86:f5:ca:89:c2:61:
         98:3f:16:c2:70:26:97:da:ab:81:6b:fa:24:c7:38:7f:98:2e:
         2b:86:48:98:93:d8:54:d2:e5:7d:2a:5a:b6:3c:44:c5:dd:8f:
         0e:78:88:5d:57:31:29:f1:29:53:3e:eb:d4:3c:7f:3e:8f:ad:
         32:ff:19:2f:be:01:86:f4:50:b4:60:d9:b4:0c:ef:7b:3c:59:
         ad:1d:98:91:d2:ee:88:f0:7c:cc:ab:3d:87:88:bf:fd:d3:ec:
         c7:74:06:89:ac:38:b2:a6:ce:d2:46:bb:54:df:be:5d:03:69:
         6e:ec:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:30 2025 by rpki-client