Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230342e302f32332d3234203d3e2037303439.roa
File:                     3230302e35392e3230342e302f32332d3234203d3e2037303439.roa (raw, json)
Hash identifier:          6QlOR3oIbxepCDLvCEud4l9H3/CVptDglRFyWg2OUPw=
Subject key identifier:   F4:02:46:07:FC:0B:16:07:33:6A:58:31:16:02:D2:05:B5:81:4E:0F
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       0A5EAFF7634C1A7E7D2BF07A1F10E78BEDCF083F
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230342e302f32332d3234203d3e2037303439.roa
Signing time:             Tue 04 Feb 2025 18:53:27 +0000
ROA not before:           Tue 04 Feb 2025 18:48:27 +0000
ROA not after:            Tue 03 Feb 2026 18:53:27 +0000
asID:                     7049
IP address blocks:        200.59.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5e:af:f7:63:4c:1a:7e:7d:2b:f0:7a:1f:10:e7:8b:ed:cf:08:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Feb  4 18:48:27 2025 GMT
            Not After : Feb  3 18:53:27 2026 GMT
        Subject: CN=F4024607FC0B1607336A58311602D205B5814E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:4f:df:d7:57:e7:78:e3:de:87:a2:0e:c9:
                    b2:c9:7a:90:c9:52:a4:75:77:f8:3b:11:33:da:a3:
                    ea:17:05:c9:1a:ff:8e:5b:6b:80:c3:2e:91:0d:38:
                    f7:ed:46:14:95:12:40:60:c0:42:3f:b2:13:dc:df:
                    0e:6c:83:97:05:5c:e7:a8:a5:19:82:cf:20:40:f0:
                    13:4a:9d:e3:12:1f:1c:f8:3a:a2:3e:83:be:0f:69:
                    5b:de:fc:6a:a8:8d:68:c5:d4:f0:44:bf:15:26:c4:
                    6f:22:34:87:1b:3f:d3:ed:69:a8:27:af:43:64:da:
                    29:48:2d:e5:3f:3b:5b:e7:ac:0a:d7:b0:2e:28:b3:
                    ce:fc:b7:12:fa:cc:62:f6:c6:18:69:b3:61:ab:9b:
                    5f:bb:f2:a2:a4:71:90:46:37:3c:51:25:d4:94:89:
                    ba:31:b2:fb:46:b1:5e:0c:e6:89:9c:fb:30:a5:7b:
                    b8:7a:e7:ea:c2:35:58:5b:ad:2e:68:40:1d:31:b3:
                    4a:e6:de:33:da:e3:92:5d:b8:1e:2f:69:63:8f:c9:
                    6f:fd:e3:92:27:68:e3:01:bd:9d:cf:a8:ab:63:17:
                    4a:c7:5e:6f:85:0d:26:54:5e:1e:81:d3:cd:99:fd:
                    7d:68:74:b8:9f:7d:a2:b4:cd:3f:d3:5a:76:3d:98:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:02:46:07:FC:0B:16:07:33:6A:58:31:16:02:D2:05:B5:81:4E:0F
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230342e302f32332d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:53:03:1d:6b:51:62:b2:50:73:51:a9:dc:3f:7e:69:0b:cd:
         6d:06:ba:86:93:fe:55:46:6b:4c:93:02:94:1b:66:cd:68:26:
         fd:9d:b3:32:ab:5d:35:d9:8b:26:4d:1f:6b:ec:43:46:bc:43:
         69:33:85:26:6e:33:76:13:00:f6:aa:21:04:84:70:99:71:23:
         17:12:99:fb:99:b0:35:23:84:57:88:4e:a8:3d:e7:3c:65:9b:
         9a:da:96:d9:ef:cf:9c:91:c3:1a:9d:ec:ea:4a:12:a7:2c:a8:
         cf:a6:78:ae:59:8f:2e:69:8c:bd:be:11:7e:80:92:64:0c:08:
         94:bf:f1:da:21:14:0c:53:99:c3:a3:42:2f:51:c4:66:7a:6a:
         48:62:b2:e5:0e:29:d9:81:25:11:65:e4:14:9e:45:75:5c:a2:
         64:2b:d0:f5:f2:dd:45:fe:fa:4d:ba:4a:f4:e5:d0:8b:79:ae:
         d3:a3:b3:1c:66:ee:b4:69:39:05:b3:6c:48:e9:15:61:9c:24:
         d6:8c:78:7e:0a:86:97:a3:56:19:68:2a:be:87:91:6e:65:1d:
         f8:1d:96:9b:32:fc:82:26:f9:92:04:2f:09:d1:0b:1d:d5:9e:
         20:c7:11:9c:e8:27:14:11:77:a6:f8:a1:bd:b3:5d:f3:e7:4d:
         af:ed:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:04 2025 by rpki-client