Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131322e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131322e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          x03ufHtQNkcKwY61DqJ+Q8QnkvKTcmIAKcuG9tK5AN0=
Subject key identifier:   F6:ED:9A:67:EC:FC:7F:A7:D4:BB:7B:CC:8F:B7:69:80:56:75:D3:27
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       1E1348D95C2B5524055375111E8F2282D94680D8
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131322e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 04 Feb 2025 18:11:55 +0000
ROA not before:           Tue 04 Feb 2025 18:06:55 +0000
ROA not after:            Tue 03 Feb 2026 18:11:55 +0000
asID:                     52283
IP address blocks:        200.108.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:13:48:d9:5c:2b:55:24:05:53:75:11:1e:8f:22:82:d9:46:80:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Feb  4 18:06:55 2025 GMT
            Not After : Feb  3 18:11:55 2026 GMT
        Subject: CN=F6ED9A67ECFC7FA7D4BB7BCC8FB769805675D327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:62:fa:fb:2a:d4:95:f3:52:96:b5:1f:77:
                    be:6a:d7:65:5e:f5:d1:b9:08:07:dc:92:a9:37:59:
                    57:aa:5e:c9:db:c1:b7:72:b6:d8:69:ff:c9:3f:f2:
                    45:85:04:e0:93:7f:c7:91:18:29:26:15:c0:8a:f8:
                    eb:31:3c:de:dd:23:4a:27:0b:0e:ed:b0:8b:8d:1c:
                    83:ab:56:aa:b1:05:2a:90:a8:35:be:cf:03:00:98:
                    3c:08:71:28:a0:fa:98:23:ce:a3:ba:e9:05:c5:0e:
                    a4:bb:57:b4:c3:a3:0d:3d:37:c1:2a:1a:ee:02:d9:
                    45:9a:e6:94:cf:8c:02:c5:f8:5f:29:16:ad:fe:74:
                    27:6b:83:69:9b:cf:33:e2:fb:65:4c:59:4d:9e:7b:
                    bf:86:c5:a8:43:f2:8f:be:49:d6:d4:94:72:44:b0:
                    10:b3:21:4f:7a:d0:ea:15:e0:26:f3:ad:fd:de:32:
                    dd:46:3d:f1:28:72:52:64:e7:90:e1:00:0b:cf:7a:
                    d7:e9:5f:cb:65:1b:12:c8:ec:56:d2:d0:fc:4d:cf:
                    1e:77:22:d0:0b:b1:cc:c6:db:ac:a2:0a:ab:37:38:
                    29:30:0b:fa:b8:4b:89:31:0f:7a:4a:fb:82:73:bd:
                    16:8c:e2:ed:e0:7a:64:2f:b3:1d:2f:e3:38:83:e0:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:ED:9A:67:EC:FC:7F:A7:D4:BB:7B:CC:8F:B7:69:80:56:75:D3:27
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131322e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:89:a5:6d:7c:53:64:a1:26:95:d0:33:96:af:c4:3d:c6:
         b2:c0:70:fe:20:56:9a:1c:a5:e2:6e:aa:87:40:50:e9:63:9a:
         6d:28:e0:a7:23:5c:66:4a:a1:4c:80:9e:cf:22:ae:73:b0:28:
         a7:69:a8:48:29:0b:2f:d2:ff:49:51:e5:10:e9:2a:de:44:cf:
         d0:18:53:e6:b4:4c:35:5c:c5:7d:e8:11:62:26:ad:6e:25:07:
         38:82:18:c8:b8:34:10:da:be:e9:24:df:6e:76:37:cc:b5:ec:
         65:b2:79:7e:d1:7f:37:88:93:e1:a6:6a:8a:87:94:8c:83:c2:
         93:c6:37:50:7b:a1:62:e0:ae:b3:a9:79:75:80:a5:ec:86:71:
         4d:8d:18:36:e5:7d:cc:df:d4:bb:f5:66:23:2c:9f:c5:31:ce:
         1a:50:41:d9:a7:d5:e3:16:8c:14:97:3c:fb:6f:30:20:3d:61:
         fc:f4:13:23:bc:fe:d8:1e:94:65:45:44:f4:29:55:df:ac:3b:
         b2:62:b5:f2:b4:08:e0:b9:5e:53:38:4b:3c:6d:a4:ad:61:58:
         72:ba:e9:2f:86:dc:f6:58:39:2c:14:b7:09:e2:97:ec:20:27:
         f3:d8:a8:18:bb:da:64:52:b4:95:f6:05:02:b0:07:b0:7a:84:
         2e:55:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:42 2025 by rpki-client