Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa
File:                     3230302e35392e3230362e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier:          WCLtzAgRxrL20IyFejgSZmxt9HTCfu8Qg1rKNrPUs3Q=
Subject key identifier:   14:F5:6D:E0:5B:D8:64:36:C5:DD:9E:16:9A:EA:44:D5:09:4D:B8:02
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       0248FCE8FFFA9F20979875A3F0217011ABA54B00
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa
Signing time:             Tue 04 Feb 2025 18:53:24 +0000
ROA not before:           Tue 04 Feb 2025 18:48:24 +0000
ROA not after:            Tue 03 Feb 2026 18:53:24 +0000
asID:                     7049
IP address blocks:        200.59.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 22:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:48:fc:e8:ff:fa:9f:20:97:98:75:a3:f0:21:70:11:ab:a5:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Feb  4 18:48:24 2025 GMT
            Not After : Feb  3 18:53:24 2026 GMT
        Subject: CN=14F56DE05BD86436C5DD9E169AEA44D5094DB802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:61:84:c0:f5:30:81:9f:b8:bd:39:61:27:
                    b9:76:09:65:b6:19:43:44:31:62:92:5a:9e:de:ff:
                    2a:8a:cd:19:03:b3:f5:82:87:59:79:a6:a1:37:63:
                    fd:a0:1b:18:1d:61:b1:63:5e:a3:e9:52:24:6a:25:
                    8a:c4:15:2f:fe:a2:0e:87:48:f1:61:d4:3d:0b:77:
                    3c:d5:0d:7d:a7:95:ad:91:a8:a7:d5:0b:7c:79:02:
                    9f:03:d4:2a:83:aa:15:15:45:9e:f9:79:2b:a9:b3:
                    4c:6d:95:e2:70:3b:66:42:95:87:89:d1:92:58:6e:
                    6f:32:77:59:7f:1d:df:d2:8a:a9:e0:c2:3c:b3:66:
                    5f:f7:89:6a:c4:d2:d6:df:15:9d:35:57:9e:ea:70:
                    ed:10:8b:5e:2e:65:50:0d:95:65:a5:93:5b:10:eb:
                    24:ee:13:67:64:92:58:f6:23:c8:a8:43:15:50:b9:
                    b5:b0:ac:df:7c:c8:87:44:8b:af:c8:60:14:4b:18:
                    ec:c4:ff:0d:4a:9c:5d:cb:49:d4:77:bb:4a:d6:2f:
                    c9:e9:1e:a5:6d:8f:a9:5c:2e:bb:9a:69:4c:8e:2f:
                    14:0d:c7:70:87:da:41:88:21:ba:9d:62:cb:ee:d1:
                    90:3f:76:8f:8a:0e:9b:a6:cd:00:3e:84:e1:b2:b2:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:6D:E0:5B:D8:64:36:C5:DD:9E:16:9A:EA:44:D5:09:4D:B8:02
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:43:06:d5:77:85:ca:4e:09:b0:45:ce:26:c6:72:68:97:
         87:86:ea:61:e3:a3:f7:a0:00:cf:e7:00:a0:ee:08:5d:27:24:
         c9:d8:09:a6:0a:25:a5:07:da:24:e6:0c:87:4c:dd:40:cc:24:
         a4:42:05:28:3b:c8:03:d3:22:41:d3:b0:5d:de:16:36:d3:42:
         20:50:1f:77:ae:bd:e2:58:38:c1:0e:4c:4b:f1:c2:83:05:0a:
         a5:c2:6c:9c:f1:b9:72:6b:68:96:c9:6a:a9:96:0f:a1:6f:e1:
         cd:4d:a3:8e:a7:f8:78:1f:05:0a:5b:7e:aa:74:7d:2d:a2:f6:
         5b:49:ba:18:34:cb:f0:34:7c:f8:5b:f6:34:6e:3f:7a:d2:d7:
         74:38:6b:fd:40:52:61:06:33:d0:7e:b2:47:49:6c:3f:2d:c8:
         06:11:4c:0f:e4:be:2b:44:80:6e:05:60:66:9c:c9:97:0e:6b:
         54:ff:a9:cd:40:db:2f:00:b3:c1:61:a1:0d:c4:d6:b9:73:5c:
         8b:88:a6:4c:2a:17:5c:56:8c:f6:8f:6c:fc:7e:8f:c1:fd:13:
         d4:e6:41:3b:e2:ac:43:8c:07:72:d7:fa:72:9e:5a:26:94:f2:
         64:c9:31:97:c2:61:16:4c:6c:29:86:fb:40:da:7f:a7:99:90:
         5e:c1:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:03 2025 by rpki-client