Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e33362e3136302e302f31392d3234203d3e2037343338.roa
File:                     3230302e33362e3136302e302f31392d3234203d3e2037343338.roa (raw, json)
Hash identifier:          dM2dxGBtOfhO732ri6stknkUN8Tya03cYnEQ349coCE=
Subject key identifier:   4C:93:6C:DB:F0:EC:88:A3:1C:12:5D:3F:F2:D2:8F:FA:9D:D2:A7:E6
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       2F7130E6ADDE373E5FCA6DDCD2C93BC142B12AA0
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e33362e3136302e302f31392d3234203d3e2037343338.roa
Signing time:             Tue 04 Feb 2025 20:05:59 +0000
ROA not before:           Tue 04 Feb 2025 20:00:59 +0000
ROA not after:            Tue 03 Feb 2026 20:05:59 +0000
asID:                     7438
IP address blocks:        200.36.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:30:e6:ad:de:37:3e:5f:ca:6d:dc:d2:c9:3b:c1:42:b1:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Feb  4 20:00:59 2025 GMT
            Not After : Feb  3 20:05:59 2026 GMT
        Subject: CN=4C936CDBF0EC88A31C125D3FF2D28FFA9DD2A7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:25:f5:2d:a4:cc:a4:30:bd:46:43:40:2c:
                    dc:7e:ab:8e:fb:2a:fb:75:61:71:ed:41:ee:6f:26:
                    dc:ab:92:5f:cb:97:1c:41:09:d0:b9:29:16:e6:6a:
                    93:4b:9d:a5:9e:f5:0e:a1:d9:32:0e:37:1d:e8:b7:
                    47:0a:02:ba:18:bf:8b:8b:c3:d9:00:0f:99:c2:86:
                    c2:93:27:8a:f9:8e:a0:02:5c:e6:01:ff:e0:ba:df:
                    41:a3:eb:d1:d5:82:9d:1c:61:bb:78:c1:21:de:06:
                    f5:41:8a:07:6b:1f:15:a1:ba:f3:6e:a4:ec:d3:d9:
                    f0:f9:3b:3f:58:12:32:8d:67:3b:81:b4:ee:30:33:
                    79:75:4e:18:60:f5:82:e1:83:79:4b:43:7c:a5:39:
                    63:e1:7d:7c:06:ef:76:10:d5:84:c6:e9:05:26:85:
                    94:02:3e:26:52:ad:47:b4:a5:e2:b6:05:20:64:93:
                    f0:21:e7:f3:b3:f0:6c:d9:9c:69:97:92:19:8e:62:
                    63:8c:ef:cf:06:d1:fe:db:26:f2:43:fb:a1:5d:f2:
                    f4:2b:3f:86:58:4d:f0:5e:f1:1c:ed:47:a0:c8:d3:
                    37:31:dc:93:2b:56:ed:39:ac:5c:92:1a:0e:6b:ec:
                    ef:8e:17:71:9e:b9:cf:14:8e:8f:ba:59:94:c0:c9:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:93:6C:DB:F0:EC:88:A3:1C:12:5D:3F:F2:D2:8F:FA:9D:D2:A7:E6
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e33362e3136302e302f31392d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:92:40:d3:70:bb:64:e6:4b:29:b6:d3:65:b8:70:50:b8:8d:
         88:06:00:6e:fb:79:45:89:7e:36:1b:a1:92:5c:e2:2f:a6:7d:
         ef:4c:a8:18:2e:1c:b8:db:8d:81:ad:72:74:05:4f:ed:cc:19:
         66:52:ef:15:bb:57:55:a7:e6:f0:15:a3:28:68:8a:5b:9c:5f:
         92:59:d6:92:a2:4b:d5:59:ec:0e:a8:cc:a8:a7:eb:54:ff:cf:
         23:27:76:a8:46:41:e8:bb:b0:42:8c:35:81:74:3d:d3:4f:b1:
         88:73:f5:ad:ee:9d:e7:ed:33:85:c8:0a:3c:3e:49:b5:65:c8:
         13:3e:2f:2d:19:a2:ae:c3:cc:bb:d6:e9:3f:ce:e5:f8:8d:2b:
         da:de:0f:ad:5e:a2:d8:79:f6:3b:44:62:69:e0:fe:d4:f4:39:
         0b:a8:83:74:46:a3:5d:1a:c8:99:c9:af:44:d3:53:57:a4:1b:
         a1:b3:3b:34:bb:00:54:fe:c7:89:5d:6b:c8:8f:88:9e:e8:fb:
         94:40:fd:80:c1:bf:74:f4:1d:37:47:4c:cf:40:c0:8f:dd:12:
         b3:5b:6f:76:fd:d5:59:81:0b:29:fc:98:f4:55:a8:95:78:91:
         d4:f2:14:8d:e1:49:48:a2:cf:01:1a:86:30:7b:a7:cc:31:6c:
         51:ea:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:22:26 2025 by rpki-client