Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/3230302e3130372e38302e302f32342d3234203d3e203238303535.roa
File:                     3230302e3130372e38302e302f32342d3234203d3e203238303535.roa (raw, json)
Hash identifier:          A0Ic5x2PcMsV3+ZrXOZaeRfwiXxujWRjPuS0p9tK1Yc=
Subject key identifier:   73:D8:D9:0A:FE:43:29:16:88:D3:20:70:2A:63:7D:9B:F1:45:C5:43
Certificate issuer:       /CN=7C4C6EE5589457742CB9D92B3B4C697DB229C555
Certificate serial:       777B2B4DDCDFE1C808C04775A43241BFDAF7F0D4
Authority key identifier: 7C:4C:6E:E5:58:94:57:74:2C:B9:D9:2B:3B:4C:69:7D:B2:29:C5:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/3230302e3130372e38302e302f32342d3234203d3e203238303535.roa
Signing time:             Tue 04 Feb 2025 17:59:15 +0000
ROA not before:           Tue 04 Feb 2025 17:54:15 +0000
ROA not after:            Tue 03 Feb 2026 17:59:15 +0000
asID:                     28055
IP address blocks:        200.107.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 12:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7b:2b:4d:dc:df:e1:c8:08:c0:47:75:a4:32:41:bf:da:f7:f0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4C6EE5589457742CB9D92B3B4C697DB229C555
        Validity
            Not Before: Feb  4 17:54:15 2025 GMT
            Not After : Feb  3 17:59:15 2026 GMT
        Subject: CN=73D8D90AFE43291688D320702A637D9BF145C543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:d9:90:9e:84:dd:d2:d0:29:07:08:aa:bf:
                    46:33:1d:9e:6b:28:48:1f:b5:44:96:50:54:95:b4:
                    39:7c:a0:23:d2:a1:54:b8:fc:97:77:11:bc:47:28:
                    92:26:7a:14:28:83:9d:08:9c:92:90:79:9e:46:05:
                    f3:97:ee:cd:9c:3d:8e:8e:c7:a8:46:db:74:c9:ed:
                    8d:1f:95:01:03:01:92:0d:e8:4f:b5:7a:a8:59:a4:
                    8e:ba:e4:93:bc:68:01:01:85:93:ae:8e:9d:54:6e:
                    a2:dc:2c:31:f3:52:cb:26:f5:c5:23:c6:3d:90:98:
                    b3:1a:85:c6:46:dd:18:6e:40:c4:a1:00:0e:e7:78:
                    77:d2:4e:d9:05:1d:dd:c3:2a:f9:04:71:d7:b3:9e:
                    3b:a0:98:88:38:d2:ce:39:61:56:aa:7c:35:dc:37:
                    77:9b:d6:ea:15:6d:18:fa:58:19:5b:cc:8b:b9:b0:
                    ee:1a:8b:0c:99:66:80:6a:75:84:3e:ca:46:ab:84:
                    5f:8d:0a:d1:66:e1:91:23:79:ec:a4:83:ef:16:33:
                    40:12:07:2b:a6:e6:53:8c:77:a7:04:ba:03:c9:34:
                    d2:a6:99:94:bd:e7:dd:67:f7:42:d7:fc:5e:5a:51:
                    17:2b:2a:3f:95:27:7b:cc:2d:01:13:d7:4a:de:52:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D8:D9:0A:FE:43:29:16:88:D3:20:70:2A:63:7D:9B:F1:45:C5:43
            X509v3 Authority Key Identifier:
                keyid:7C:4C:6E:E5:58:94:57:74:2C:B9:D9:2B:3B:4C:69:7D:B2:29:C5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/3230302e3130372e38302e302f32342d3234203d3e203238303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:14:47:88:49:19:47:0e:4c:ba:47:81:4e:8f:d1:e8:65:65:
         95:4f:32:cf:43:03:b7:7a:c1:07:b5:8c:46:a2:a7:5c:17:1e:
         6d:0e:d9:60:23:54:1d:aa:6a:d2:cd:96:b0:ff:47:46:9a:0e:
         b4:33:05:41:9e:59:9a:45:78:16:09:51:29:8c:9c:3e:2f:f9:
         93:69:e3:17:15:a0:e7:09:24:c7:54:77:b4:e2:95:22:4e:d5:
         f3:c4:1c:49:e2:fe:18:48:04:68:03:4c:99:a5:81:54:5c:12:
         fe:32:d8:23:5d:3a:7c:a9:a1:8b:a2:d0:51:51:fd:ac:9f:f7:
         7a:a2:e4:1c:c8:60:6b:49:0a:24:12:27:ec:f4:eb:ba:b6:1a:
         a2:52:4c:30:f2:40:05:f3:7b:fc:51:96:48:16:fe:47:3e:8b:
         35:15:c6:4e:f1:bc:cb:6d:d8:8d:82:58:05:3e:c0:38:94:59:
         7f:d5:dd:b7:e9:f8:1c:86:3b:cd:66:f6:ad:3f:88:73:e3:0f:
         8e:5e:71:73:0f:02:97:5f:1f:35:94:21:a1:11:b3:6f:4c:93:
         14:87:26:0a:04:72:d5:91:18:77:56:08:b7:2e:82:2c:ba:4c:
         ae:73:b5:f9:22:7f:20:32:9b:9b:c0:22:cc:8f:97:e8:b5:a2:
         40:ba:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:39:14 2025 by rpki-client