Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e20323730303734.roa
File:                     3230302e312e3131322e302f32342d3234203d3e20323730303734.roa (raw, json)
Hash identifier:          XaHbYNLuVewJHATgYKf0MaIe4UruXhUmxAwe3BIRG/c=
Subject key identifier:   42:D8:04:1D:2C:7D:1A:6A:5A:C4:E4:2F:15:47:23:C0:0B:F3:5F:DE
Certificate issuer:       /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial:       7059C4EF706C3C49E3C4C25B442B0B36427B4182
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e20323730303734.roa
Signing time:             Tue 04 Feb 2025 18:38:28 +0000
ROA not before:           Tue 04 Feb 2025 18:33:28 +0000
ROA not after:            Tue 03 Feb 2026 18:38:28 +0000
asID:                     270074
IP address blocks:        200.1.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:59:c4:ef:70:6c:3c:49:e3:c4:c2:5b:44:2b:0b:36:42:7b:41:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
        Validity
            Not Before: Feb  4 18:33:28 2025 GMT
            Not After : Feb  3 18:38:28 2026 GMT
        Subject: CN=42D8041D2C7D1A6A5AC4E42F154723C00BF35FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:99:40:a7:09:75:58:04:c8:5b:d8:d6:88:
                    16:dd:2a:dd:dd:36:9a:79:05:2f:23:cf:d9:bf:aa:
                    29:a9:aa:40:83:1d:ad:63:6f:7e:65:c9:79:d2:bb:
                    7c:32:bd:0d:c4:0d:72:b4:d6:88:9c:17:cc:f1:a1:
                    1f:65:c1:d3:46:62:95:18:52:0e:4f:ed:65:35:e2:
                    c3:78:6e:b2:78:d5:f3:ac:20:4b:f9:2a:58:78:5c:
                    fc:9e:6b:e6:00:58:6a:93:04:46:56:8c:6e:59:be:
                    e1:ab:4c:61:a4:66:73:a0:f4:a6:5d:13:f3:96:14:
                    7e:97:b3:1d:ae:58:3a:46:d5:bf:17:e1:44:17:dd:
                    5a:03:74:b8:fb:04:3f:97:69:09:da:5b:3c:f6:f4:
                    8f:79:83:69:59:4d:f6:f4:d8:86:8a:78:5f:e2:81:
                    61:e8:ba:f5:7e:ab:d5:8a:94:47:25:22:fa:21:a1:
                    d3:be:75:15:79:6c:42:c5:81:14:f5:50:8c:75:9e:
                    2e:bf:ed:a1:54:3a:40:ae:b8:64:14:5f:91:a1:e3:
                    55:c5:21:ae:a0:b2:2a:88:2e:c4:f0:f8:29:83:c0:
                    dc:d6:6d:4c:ec:c5:c8:fc:cb:c0:a2:f4:e4:ef:31:
                    db:b6:b6:64:2f:9e:89:e5:82:35:93:6d:98:c2:c4:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:04:1D:2C:7D:1A:6A:5A:C4:E4:2F:15:47:23:C0:0B:F3:5F:DE
            X509v3 Authority Key Identifier:
                keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e20323730303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:c9:2c:1b:37:c9:75:8f:fb:1d:5a:30:d7:13:d0:86:86:d5:
         85:a3:7a:6d:0e:62:17:fb:97:ad:05:15:4e:12:9d:62:cd:b6:
         26:61:fa:2d:d0:2b:99:46:f5:85:d2:cc:6f:d4:3a:02:5a:87:
         5b:a8:ab:94:0e:01:78:9d:43:6f:07:b3:5d:22:b3:e2:c0:b0:
         11:4c:6b:0a:51:69:4e:dd:71:e6:29:86:be:61:45:6d:80:a3:
         ca:14:cb:a6:d0:21:57:7a:9a:28:ae:8e:75:46:38:2e:71:ad:
         0a:fe:df:53:6e:0a:96:83:97:7a:cb:43:dc:b9:5f:bd:c6:85:
         97:42:2b:9d:a7:c6:e4:b6:e8:e8:c6:24:e0:63:ae:ed:d3:5d:
         3b:d9:eb:c9:ef:05:6f:fd:9a:d1:57:d3:3b:10:df:15:51:19:
         0e:4e:be:40:51:dd:23:0e:f7:b1:6d:d3:8f:be:c9:22:13:ae:
         d8:fd:38:db:03:d5:86:23:c8:0b:a9:3d:ef:9f:69:b3:7f:8d:
         b4:d9:f8:36:23:77:e8:8c:9f:fb:f6:89:e2:f8:86:e4:4e:ad:
         f7:7e:76:94:c9:57:18:4f:0d:20:c7:9e:ae:fd:f2:a0:65:68:
         0d:c8:55:88:1d:25:34:eb:35:4c:6d:71:7f:c5:22:8d:7d:f3:
         f1:44:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:33:07 2025 by rpki-client