Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383339.roa
File:                     3230302e3131302e34382e302f32302d3234203d3e203237383339.roa (raw, json)
Hash identifier:          ej4j17xpkO66hlnrFSBBpU7j+qzLfF1W8WVxUwoMy4o=
Subject key identifier:   24:AD:45:74:5C:F1:73:EF:F4:41:70:49:38:8F:81:95:6C:CA:0B:D8
Certificate issuer:       /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial:       3D988391598DE4019826906D1C8CF037A0366044
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383339.roa
Signing time:             Tue 04 Feb 2025 18:01:08 +0000
ROA not before:           Tue 04 Feb 2025 17:56:08 +0000
ROA not after:            Tue 03 Feb 2026 18:01:08 +0000
asID:                     27839
IP address blocks:        200.110.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:83:91:59:8d:e4:01:98:26:90:6d:1c:8c:f0:37:a0:36:60:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
        Validity
            Not Before: Feb  4 17:56:08 2025 GMT
            Not After : Feb  3 18:01:08 2026 GMT
        Subject: CN=24AD45745CF173EFF4417049388F81956CCA0BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:ee:fc:22:71:07:f7:79:8e:9d:ed:aa:40:
                    54:4c:ce:55:a6:8a:00:69:e9:61:d4:64:82:56:15:
                    ea:4b:bb:9b:f6:b2:d1:1a:46:d7:55:06:30:42:ca:
                    d0:99:b8:8f:14:bd:bc:ae:a4:fc:3b:63:70:e7:ec:
                    ec:70:bb:fe:4f:47:ce:ec:ad:7f:f4:ae:ea:7d:34:
                    6c:a0:21:1e:09:bb:ab:ed:f2:36:83:03:5e:af:61:
                    fb:c5:8f:43:1a:93:8b:a6:81:c4:9b:17:fd:8d:a5:
                    ae:68:df:26:3e:42:7b:7d:af:2d:e6:75:95:3a:fe:
                    77:e0:2f:a8:5a:23:e9:00:f7:84:3b:65:c6:49:b8:
                    a5:98:3f:46:ad:1b:a3:64:e1:09:76:89:a0:b7:d8:
                    61:bf:23:7d:7e:15:e8:93:78:c0:3c:85:84:6f:de:
                    8f:82:fc:f1:26:02:b7:c9:65:95:0c:a2:09:dc:ed:
                    81:64:f0:d6:e6:92:ba:cc:f5:59:78:c5:c8:4e:95:
                    14:37:0c:41:8f:3c:00:55:63:44:04:0c:18:23:91:
                    1a:c0:8f:fb:bb:28:58:a5:a7:b3:ec:21:27:b1:dd:
                    f3:84:8b:f5:b3:24:62:b4:cb:b5:ee:a6:14:8a:c2:
                    2b:af:f3:6d:6d:e7:45:b3:da:5a:07:8d:c1:70:62:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:45:74:5C:F1:73:EF:F4:41:70:49:38:8F:81:95:6C:CA:0B:D8
            X509v3 Authority Key Identifier:
                keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:f1:16:14:08:fb:c0:f0:2f:5e:fe:6d:ec:5a:b7:d5:17:fb:
         19:73:57:f6:1f:f5:e9:16:c9:b6:3d:3b:70:87:fd:56:06:ae:
         ee:3b:30:a1:8e:11:23:46:70:c1:e5:10:82:7b:86:6d:57:34:
         04:f5:a4:bc:cc:49:19:70:bc:3a:0c:0d:e9:f4:d1:d7:67:dc:
         50:52:f1:35:c9:89:7f:1e:8c:0a:f7:d1:25:a0:a0:54:17:eb:
         60:66:03:e7:2e:57:36:b1:a6:48:9c:74:1f:d9:3c:4c:9d:2f:
         a2:7e:68:9f:45:00:29:9d:bb:41:fb:38:36:22:05:3c:da:d1:
         43:e1:05:bf:cc:32:1f:de:46:6b:a2:b4:41:b2:79:ab:6a:dc:
         a3:05:f0:6e:4b:2b:b0:48:94:a0:d8:90:09:e8:b6:3a:2f:e2:
         ac:55:f7:83:24:f1:4e:1c:4c:28:39:85:49:d4:c5:7b:a6:72:
         95:43:8a:ed:cc:73:0d:60:05:a0:0c:c5:b5:35:43:0c:20:60:
         a1:ae:5e:ed:69:4a:30:b7:4a:19:0a:e7:51:e7:c1:f6:c7:27:
         85:76:50:fd:1d:3f:65:d6:ad:4b:36:be:3e:cc:2d:f3:d3:21:
         b9:eb:dc:f1:33:ce:ab:79:b3:a7:be:04:53:c1:01:dd:f0:c5:
         10:7d:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:22 2025 by rpki-client