Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa
File:                     3230302e302e32312e302f32342d3235203d3e203238303137.roa (raw, json)
Hash identifier:          cdHwN+EJbvvLguE4cra2ECaHzSaFwJD8Q4sq1tmcpiM=
Subject key identifier:   28:D8:17:91:D7:07:EA:5F:F9:30:F4:42:B0:86:CC:07:7A:5D:4D:F2
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       0806D542B7CE950475FDFAC95D84CDFE7031E625
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa
Signing time:             Tue 04 Feb 2025 18:47:51 +0000
ROA not before:           Tue 04 Feb 2025 18:42:51 +0000
ROA not after:            Tue 03 Feb 2026 18:47:51 +0000
asID:                     28017
IP address blocks:        200.0.21.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:06:d5:42:b7:ce:95:04:75:fd:fa:c9:5d:84:cd:fe:70:31:e6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Feb  4 18:42:51 2025 GMT
            Not After : Feb  3 18:47:51 2026 GMT
        Subject: CN=28D81791D707EA5FF930F442B086CC077A5D4DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:62:e7:55:a1:b6:b2:7e:27:59:78:0c:0f:
                    cf:1a:19:9e:ba:a9:11:63:f3:2b:d7:ba:67:58:bd:
                    91:b2:a2:c6:83:58:7e:5b:3b:6e:67:25:41:71:ec:
                    b6:65:fa:f2:46:72:17:ef:c1:02:34:04:36:48:6b:
                    b4:09:12:a8:6c:65:c5:23:8a:f3:84:46:46:9d:d9:
                    06:a4:55:10:21:f1:7c:53:86:f6:3c:c5:b2:ef:b6:
                    28:c3:18:8b:6b:30:ba:92:d3:da:d9:a4:3c:d1:7a:
                    6f:b2:61:6a:48:49:54:c8:a0:eb:94:0d:4e:e0:a4:
                    6c:a4:82:23:48:60:06:1e:e2:1c:11:d5:19:14:b0:
                    ae:24:2a:60:65:5b:ae:aa:54:0e:d3:4a:64:3f:3f:
                    87:71:cf:1b:12:34:11:59:95:1d:e3:2d:08:82:fd:
                    ab:a8:30:d2:cb:31:f4:a6:4f:96:e2:9e:1c:68:8b:
                    a9:18:d4:f8:f4:8e:e6:0e:69:7b:55:10:95:d7:fb:
                    2f:81:d0:c5:2e:31:4a:e3:9e:4d:fe:c8:22:73:fc:
                    62:db:16:79:6b:6f:2e:a1:75:f6:80:be:ed:2d:6d:
                    63:bf:a1:03:ab:da:0a:a9:64:30:09:7d:ef:a9:a2:
                    00:1c:a0:99:f2:7c:f3:8d:da:d5:9d:23:13:3e:e9:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D8:17:91:D7:07:EA:5F:F9:30:F4:42:B0:86:CC:07:7A:5D:4D:F2
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:5c:34:c2:5c:13:f5:19:84:3e:a0:95:3d:74:ac:e3:2c:
         32:91:3a:5b:58:90:cd:b6:6e:dc:ac:bd:95:96:dd:11:7a:ff:
         0d:b1:e0:af:07:11:f3:35:65:72:9e:d4:43:34:37:83:05:55:
         6b:bc:8f:ee:34:aa:0f:80:1f:d8:94:74:b2:9b:7d:7d:9b:35:
         2d:b8:1c:16:11:c6:3f:69:78:0e:a5:c8:74:62:3c:99:ba:0a:
         8e:67:ac:3b:bc:72:e1:b2:9e:b9:c4:77:01:8c:c9:60:20:50:
         8a:f9:d7:e3:4b:0e:84:93:aa:72:4e:4d:2c:d7:d7:1b:26:5a:
         3c:71:34:da:d1:4c:bb:7f:62:95:c4:fd:2d:d7:f7:6f:72:98:
         c4:37:6a:d6:d4:a2:70:5d:a7:01:48:18:90:f1:4b:f0:5f:6f:
         f5:e7:28:bd:8d:a8:b1:79:0e:f5:26:e4:85:a5:c8:1d:b1:fa:
         3d:53:64:6c:ed:54:d0:ee:a6:dd:04:cd:28:28:57:52:b8:52:
         f9:3c:46:69:07:cc:a3:85:23:a5:4f:d3:69:df:d5:75:d7:c6:
         74:93:3d:f7:ba:f1:8b:78:e9:e4:34:71:a6:72:bf:1c:8e:5d:
         0b:24:f0:b2:cb:b5:4b:bb:ce:60:b3:3b:85:03:54:35:f1:65:
         5c:a4:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:26:19 2025 by rpki-client