Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e34342e302f32332d3234203d3e203136373332.roa
File:                     3230302e35392e34342e302f32332d3234203d3e203136373332.roa (raw, json)
Hash identifier:          u798OM5hbJ+ILXOBGSeTLwhsfQ3FMZZ/VRj8C/8Z+AA=
Subject key identifier:   67:36:C2:F0:C3:B0:6A:C3:42:EE:BB:3E:D3:E8:E1:D5:2E:CF:B5:2E
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       632DEC5EAF4C9C11D7FC3A9BCFA558D533828759
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e34342e302f32332d3234203d3e203136373332.roa
Signing time:             Tue 04 Feb 2025 18:53:25 +0000
ROA not before:           Tue 04 Feb 2025 18:48:25 +0000
ROA not after:            Tue 03 Feb 2026 18:53:25 +0000
asID:                     16732
IP address blocks:        200.59.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:ec:5e:af:4c:9c:11:d7:fc:3a:9b:cf:a5:58:d5:33:82:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Feb  4 18:48:25 2025 GMT
            Not After : Feb  3 18:53:25 2026 GMT
        Subject: CN=6736C2F0C3B06AC342EEBB3ED3E8E1D52ECFB52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:5f:6d:77:31:ee:04:67:40:6d:cc:34:d6:
                    0f:6e:37:93:24:f3:20:3c:fc:b2:d9:c2:01:26:a3:
                    96:30:e2:c8:d5:db:54:af:1b:44:55:1f:6f:c6:7c:
                    64:59:a3:2e:87:cb:e2:e6:4f:41:34:b3:98:10:ad:
                    1d:60:4e:dc:2b:8a:a3:1b:60:a9:82:f4:22:da:55:
                    e6:9d:f3:66:a5:e0:25:17:1f:91:e5:c3:63:7a:c0:
                    e3:30:17:f3:f3:00:b1:3a:4a:35:9e:44:7e:03:09:
                    62:d2:61:94:b6:12:f5:c0:42:ef:ed:e8:0f:c2:3c:
                    d6:1e:87:ef:44:5b:b8:06:d2:84:dd:1f:1c:f1:08:
                    79:bd:b3:ce:59:d7:c2:50:5a:46:8e:c2:3d:92:ac:
                    0d:9f:0e:48:55:40:10:b9:97:f1:9f:4e:04:88:03:
                    87:98:74:4c:06:b4:eb:ae:b6:96:53:bc:53:19:85:
                    c6:32:f8:54:f8:73:30:27:f9:78:07:1e:3a:0a:03:
                    ab:a1:9b:b0:fb:c8:30:fc:0b:19:ea:41:42:6c:dd:
                    42:f5:22:9a:20:90:58:2c:46:98:42:4f:c1:a6:70:
                    03:7a:fa:00:48:5b:3b:d4:66:1a:76:9a:81:f8:66:
                    4e:61:d4:a0:5a:18:e6:ce:d8:85:32:d4:bb:25:06:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:C2:F0:C3:B0:6A:C3:42:EE:BB:3E:D3:E8:E1:D5:2E:CF:B5:2E
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e34342e302f32332d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:97:8b:9a:02:c0:c3:60:7e:a7:ed:24:b3:db:d3:56:1e:6e:
         36:80:cf:48:de:77:1e:1f:c0:1d:9b:5c:5d:86:0b:73:91:f3:
         a1:0f:26:d4:2a:7b:4e:fc:08:6a:df:72:a2:75:21:a8:bd:fd:
         35:07:ad:82:20:e9:f5:d5:4b:3e:04:3f:46:7d:7a:5e:5a:71:
         51:88:1f:40:ad:33:e7:33:2d:51:bc:47:17:84:fd:6a:4c:6f:
         4d:c7:95:f7:2b:94:9f:5a:82:b3:ec:ab:b3:09:2b:17:19:e0:
         90:ea:e2:73:6a:e2:b7:e2:5c:08:8c:e7:07:0c:23:f8:10:89:
         a4:59:a4:95:ba:9d:a1:b6:a1:ff:1a:fa:2a:36:ed:cf:ed:59:
         53:b5:48:83:29:1a:89:76:89:2c:63:fb:e8:83:c9:3a:1e:b1:
         49:36:8a:43:27:36:75:a9:0d:c9:ca:07:c2:11:2c:f7:fd:2f:
         81:7f:ea:30:1b:d3:13:04:2a:52:7a:08:8f:58:07:8e:47:69:
         af:dc:d6:d2:9b:ae:c0:40:cb:47:a2:8b:67:4c:19:41:bc:01:
         0b:b0:d3:23:00:84:88:40:82:3b:23:0f:57:fe:0b:18:57:83:
         db:ab:05:ec:75:e9:fa:79:33:91:a0:a2:85:00:27:a6:98:48:
         94:7a:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:50 2025 by rpki-client