Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35302e302f32332d3234203d3e203136373332.roa
File:                     3230302e35392e35302e302f32332d3234203d3e203136373332.roa (raw, json)
Hash identifier:          yFyfjga+pKn0Xsl3xaCccuN4qwDvN8dMPTciEtKFME0=
Subject key identifier:   80:E4:92:F4:BF:96:2A:B7:83:82:D7:73:4B:DB:66:64:4C:38:E7:3E
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       3CCC344B9B8E49E957C973CC55B4381B8FC83F77
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35302e302f32332d3234203d3e203136373332.roa
Signing time:             Tue 04 Feb 2025 18:53:25 +0000
ROA not before:           Tue 04 Feb 2025 18:48:25 +0000
ROA not after:            Tue 03 Feb 2026 18:53:25 +0000
asID:                     16732
IP address blocks:        200.59.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cc:34:4b:9b:8e:49:e9:57:c9:73:cc:55:b4:38:1b:8f:c8:3f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Feb  4 18:48:25 2025 GMT
            Not After : Feb  3 18:53:25 2026 GMT
        Subject: CN=80E492F4BF962AB78382D7734BDB66644C38E73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:9d:90:aa:d1:1a:52:17:ce:0a:18:0c:e0:
                    9a:1c:95:7d:1c:e3:28:60:2f:e8:d4:f8:ab:2d:9c:
                    a0:69:db:8c:48:c6:d8:d7:ab:35:8f:9e:8f:61:1c:
                    6c:a4:71:92:c5:78:c2:d2:11:93:e8:bd:f6:f0:53:
                    94:ea:fc:2f:8f:5b:75:41:0d:8c:a5:26:e7:66:cd:
                    7d:c6:b1:45:9c:3a:d8:06:64:c2:ad:a5:3b:f0:fd:
                    c0:10:9b:b9:b6:fb:11:00:9c:20:a2:1e:2b:07:fc:
                    e9:53:9c:e6:2f:4b:81:25:5e:8f:d4:f1:62:28:ea:
                    f5:b1:3e:ad:48:bb:38:cd:d2:44:85:f2:86:a8:cd:
                    f7:e3:0d:20:67:6e:42:b7:73:f0:94:fe:2c:40:a8:
                    62:48:e8:cb:f6:70:fe:0e:2a:79:d1:25:25:8f:ff:
                    ab:fa:2c:8d:af:d4:af:ad:7c:8a:2e:7e:f0:50:12:
                    4b:09:d6:fa:db:c4:de:d0:77:33:c6:36:0c:98:53:
                    88:67:4b:3b:8c:de:8a:5d:fb:c7:67:ac:8b:9f:81:
                    66:69:ee:8b:9d:69:18:1f:9a:c4:1a:6c:25:a0:48:
                    39:28:4f:16:0a:b2:92:ad:33:37:f3:5c:cd:f8:9f:
                    89:b9:20:af:a3:31:66:77:53:89:36:5e:8e:30:05:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E4:92:F4:BF:96:2A:B7:83:82:D7:73:4B:DB:66:64:4C:38:E7:3E
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35302e302f32332d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:4e:21:61:34:8f:df:d6:21:28:d0:e1:2c:70:95:9a:df:
         33:d1:9c:0e:6f:c6:8c:98:1a:74:85:e2:c2:1c:43:79:2e:e2:
         f2:5f:7d:c5:a0:e0:86:17:03:bd:7d:85:46:a2:22:29:bf:4a:
         2d:90:b8:d6:ff:a2:5f:4a:aa:2d:b7:58:9e:b9:b7:26:50:b1:
         3f:a7:45:bf:da:3c:d1:c6:88:2c:4f:ef:00:00:d8:ec:b9:92:
         85:ac:17:87:82:18:99:49:57:b2:14:fe:5a:6a:65:58:8c:cc:
         09:58:7e:bb:c8:c3:7c:6f:01:8d:a8:78:c2:a3:80:d0:f8:b3:
         3b:c9:1a:1a:ed:3c:22:77:bd:8c:c4:ca:a7:ed:8c:f6:55:ae:
         96:3c:49:24:13:a3:5c:4a:2e:e2:f8:88:c8:cf:26:a6:7d:88:
         be:d9:17:d5:c0:36:f3:1e:4c:15:65:a8:fe:44:36:29:d0:e5:
         85:ae:57:0f:83:6c:d8:34:4d:dd:63:c9:e3:c1:50:87:fd:3c:
         65:f7:73:c5:a0:61:f7:dd:8b:aa:2d:2e:66:3a:45:ee:fb:7e:
         10:cc:19:f0:e8:97:19:fa:fe:8a:01:49:01:c6:04:e3:c2:59:
         a7:12:34:97:6f:d1:5f:4f:bf:00:c4:66:bb:3d:f2:75:ab:27:
         8c:59:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:19 2025 by rpki-client