Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa
File:                     3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          fiWPLSteNTOYUsvzRZ5xKClLt4HpxAijR7LnOKlsxSY=
Subject key identifier:   E1:7F:E3:2E:A9:AB:C7:CA:98:F1:BE:0E:DA:AF:FC:E5:11:9B:CD:B3
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       3A55D10CBC87342D304BA83F4CB676B7676AD6F1
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:56:00 +0000
ROA not before:           Tue 04 Feb 2025 18:51:00 +0000
ROA not after:            Tue 03 Feb 2026 18:56:00 +0000
asID:                     14754
IP address blocks:        200.107.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 08:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:55:d1:0c:bc:87:34:2d:30:4b:a8:3f:4c:b6:76:b7:67:6a:d6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Feb  4 18:51:00 2025 GMT
            Not After : Feb  3 18:56:00 2026 GMT
        Subject: CN=E17FE32EA9ABC7CA98F1BE0EDAAFFCE5119BCDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:eb:dd:93:33:6d:d1:6a:5f:39:23:2c:56:
                    af:23:53:af:cf:fc:0c:99:52:eb:d0:c9:4c:22:46:
                    57:63:8e:04:85:ef:ea:7b:ae:ff:80:72:e6:55:56:
                    55:c5:a6:90:a1:4a:28:8f:ac:9b:d6:24:41:1c:1c:
                    bc:f5:af:c8:47:0b:c2:e4:4d:52:5e:fc:4d:3c:b2:
                    e9:5a:e7:ae:01:f7:af:e4:99:aa:7a:f2:39:68:71:
                    cc:1d:e4:c2:6a:35:38:f3:59:81:99:1b:e4:7e:67:
                    d6:29:6a:36:79:ed:55:8a:bf:b9:a5:15:b9:43:ab:
                    99:78:b5:f9:3d:45:d6:5f:9a:d1:76:64:d1:93:ed:
                    54:fc:c6:a9:cf:2f:8c:a8:20:d1:9c:ca:8b:34:a2:
                    eb:09:04:6f:26:de:20:6d:56:dc:c0:9a:70:79:e1:
                    85:d4:eb:f0:8f:48:39:36:e4:8a:bb:5b:6f:2c:f4:
                    d2:54:de:28:27:fb:8d:57:5f:eb:3e:d6:6e:14:5b:
                    c1:b6:f1:ca:eb:6e:e3:85:18:e1:f3:67:54:29:63:
                    b3:87:0d:cf:84:68:0d:a0:66:1c:75:17:6b:6c:50:
                    c7:41:d4:32:57:0c:52:18:0b:55:72:7b:2b:d1:23:
                    a8:28:2c:a9:10:c0:68:42:26:17:4b:6d:29:62:fe:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7F:E3:2E:A9:AB:C7:CA:98:F1:BE:0E:DA:AF:FC:E5:11:9B:CD:B3
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:0d:9b:34:50:18:8c:a7:68:e0:5e:71:27:eb:03:2e:59:
         65:1a:5e:07:69:68:73:4d:2b:0b:2e:27:56:d3:1e:a2:92:9a:
         71:00:5b:5e:e5:fe:86:bc:43:0e:1c:87:4c:65:c6:14:7a:4a:
         cb:e3:37:57:d9:0f:66:ce:3a:73:10:89:d4:53:cb:f5:1e:40:
         7b:a7:63:d6:76:4b:f9:d8:a1:4c:a8:d3:9c:37:37:6e:d2:f4:
         fe:c5:c8:f6:38:ce:f8:f6:b7:51:38:0f:05:e6:e7:07:3d:1b:
         fb:07:51:8b:b7:15:90:43:46:f1:01:b9:37:62:c4:10:68:32:
         a7:23:a0:b5:f8:2d:f9:4a:25:87:61:22:32:67:65:3c:bf:ec:
         56:5d:f8:2e:69:8c:83:3a:16:68:d8:27:cf:9e:6a:42:c0:a7:
         2d:bf:41:00:47:8c:ab:3f:68:f8:3e:eb:63:28:cf:9a:30:3e:
         06:67:b9:f0:6f:f4:85:92:3a:31:5f:94:d2:91:cd:0c:55:20:
         35:90:92:7d:d0:32:dc:02:3f:eb:9a:ea:49:c9:3d:75:6c:4e:
         fd:b8:a1:ed:30:a6:67:57:c6:ba:f2:1b:f3:a0:51:cb:65:b9:
         93:ff:ad:7c:34:23:35:4a:cc:0a:fd:bc:a1:59:7c:70:7e:c1:
         a5:7b:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:25 2025 by rpki-client