Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32332d3234203d3e2037303439.roa
File:                     3230302e35392e35322e302f32332d3234203d3e2037303439.roa (raw, json)
Hash identifier:          gTPdynYkkdZ3ZnJpCI0sUNtPXEzqRJ53KvSn8BHqzGw=
Subject key identifier:   23:C9:95:42:BF:6B:07:4A:97:65:A9:97:25:FE:12:DC:00:F6:A9:73
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       2A937EB38E2C2251A724F3C9EBACF1FD4AEE9D0F
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32332d3234203d3e2037303439.roa
Signing time:             Tue 04 Feb 2025 18:53:23 +0000
ROA not before:           Tue 04 Feb 2025 18:48:23 +0000
ROA not after:            Tue 03 Feb 2026 18:53:23 +0000
asID:                     7049
IP address blocks:        200.59.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:93:7e:b3:8e:2c:22:51:a7:24:f3:c9:eb:ac:f1:fd:4a:ee:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Feb  4 18:48:23 2025 GMT
            Not After : Feb  3 18:53:23 2026 GMT
        Subject: CN=23C99542BF6B074A9765A99725FE12DC00F6A973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:38:3c:b0:26:99:8c:f2:28:50:a5:3f:f5:
                    34:5c:f0:ad:1e:a2:ef:b3:41:a0:d6:cf:e0:eb:f5:
                    18:7e:78:23:8d:d4:30:c6:bf:97:83:d1:2b:79:54:
                    a5:37:35:e8:2a:da:50:57:b0:55:5b:b6:e9:31:de:
                    28:4a:69:97:54:fc:5a:cf:ac:2e:4e:dc:fb:8a:59:
                    ae:e8:2f:67:e3:31:f4:4a:fc:e0:e0:49:b7:5c:77:
                    89:58:d1:6b:c4:e2:ad:7e:28:08:94:6d:73:67:e9:
                    22:0a:34:e9:b5:95:cf:bb:e5:e2:57:49:1a:a1:b3:
                    2c:dc:13:08:be:a5:47:40:80:57:c1:3b:b9:1f:b1:
                    16:31:0a:06:a4:09:db:1a:e5:17:bd:9e:fe:45:ef:
                    12:91:c3:0d:34:4c:e1:32:cb:4d:90:c3:ed:41:16:
                    33:ed:32:dc:6f:9a:c6:46:9a:c6:83:3f:42:81:3c:
                    09:ab:3b:48:63:a8:fe:08:24:1e:1a:3f:44:d9:88:
                    f5:cc:2a:a2:93:88:42:09:ff:a5:ab:10:29:e6:06:
                    93:78:99:73:7f:31:07:4f:8d:3a:61:67:37:6e:f7:
                    c2:aa:66:2a:3e:e0:13:54:cf:0b:b6:1f:c6:82:cd:
                    29:7a:4c:92:92:26:ca:f2:9c:09:4f:99:52:15:28:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C9:95:42:BF:6B:07:4A:97:65:A9:97:25:FE:12:DC:00:F6:A9:73
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32332d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:35:be:15:53:98:8e:d7:9d:1d:5e:03:20:fb:29:31:f7:fa:
         c3:c2:85:9f:05:46:78:e0:c3:00:8d:86:5c:f1:ed:e7:e8:d1:
         ee:5e:65:e8:fe:90:da:94:cc:98:63:eb:2f:58:1e:6a:73:58:
         be:9a:ba:f7:a8:8f:cd:d1:b2:3c:80:2a:cc:4d:61:43:2a:51:
         ad:bb:a7:fe:88:e0:f9:84:94:83:37:eb:cc:d0:0e:5f:ad:71:
         92:96:97:80:a8:1d:dd:38:26:25:d4:51:6c:92:ca:42:cb:1f:
         cb:ac:4b:46:78:54:18:7f:0e:e3:d6:5f:52:53:91:1e:f2:39:
         c4:c2:ee:5a:17:fc:9a:79:cc:a3:2c:76:f6:11:94:21:fe:1b:
         ee:3a:a9:ee:d7:66:df:62:50:85:8b:ff:d8:dc:6d:f5:0e:a3:
         45:4a:e6:11:a8:92:39:40:f6:2f:1d:97:3a:2b:05:ea:4e:80:
         74:f5:0f:98:b6:3f:11:c9:92:e0:50:fc:cb:b1:4b:96:7f:fc:
         6a:42:e0:89:af:b8:c2:20:5a:d3:a9:89:50:aa:b3:f0:f5:8a:
         ed:c1:d6:1b:d0:34:e4:24:6c:7e:b8:c2:0d:d2:81:6c:1d:ab:
         df:0a:91:6c:d1:d8:26:da:d6:84:42:d8:f6:bd:32:ba:cd:26:
         6c:1d:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:23 2025 by rpki-client