Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e203631343638.roa
File:                     3230302e312e3131322e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          Uv+hMooG95nFWKu8F2pBcuaNlTf8wlOdQwkLaTHd0j8=
Subject key identifier:   53:AB:ED:F4:30:9F:94:E6:E4:2F:4F:FB:C1:A1:0F:37:06:4B:8F:B6
Certificate issuer:       /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial:       6E5B096F91B47E5C5AA0AE6CA4198E2394372CB0
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e203631343638.roa
Signing time:             Fri 07 Mar 2025 21:10:00 +0000
ROA not before:           Fri 07 Mar 2025 21:05:00 +0000
ROA not after:            Fri 06 Mar 2026 21:10:00 +0000
asID:                     61468
IP address blocks:        200.1.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5b:09:6f:91:b4:7e:5c:5a:a0:ae:6c:a4:19:8e:23:94:37:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
        Validity
            Not Before: Mar  7 21:05:00 2025 GMT
            Not After : Mar  6 21:10:00 2026 GMT
        Subject: CN=53ABEDF4309F94E6E42F4FFBC1A10F37064B8FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:f4:ad:51:92:a9:3c:41:df:a7:ef:b6:6c:
                    5d:12:56:27:5b:17:10:88:1f:eb:a8:d5:bc:38:01:
                    07:f3:87:f9:36:33:56:22:12:12:84:2b:10:7a:ea:
                    31:19:dd:8e:ac:ae:55:8f:22:3f:21:8b:64:85:ec:
                    4b:61:5f:71:b1:73:aa:1d:ba:31:44:d3:55:bc:93:
                    08:48:ec:1e:93:06:11:f5:22:30:a8:81:27:6e:e7:
                    a3:2d:a9:df:d4:84:33:03:87:1d:32:d7:0f:0c:72:
                    88:c0:22:38:f5:07:d2:f7:7f:6f:02:7c:9a:3d:85:
                    fc:09:0b:31:2a:88:c9:89:e6:17:b2:88:ce:fd:e1:
                    49:b2:50:6d:f6:8b:8c:5a:14:7f:60:36:0d:db:84:
                    6b:d8:50:3b:bf:f8:b3:3c:2e:b0:a8:91:7a:02:4f:
                    d4:ad:31:8d:d6:7e:d2:59:29:f7:71:b5:ea:0d:5d:
                    3a:47:a3:30:f6:14:e9:6f:eb:76:79:a3:17:09:25:
                    3f:4c:a8:9f:b4:0d:2a:69:ea:30:13:55:98:3d:f3:
                    ec:c9:9b:cf:27:37:03:53:92:b0:9c:24:98:e2:d5:
                    06:96:7d:d8:41:a0:31:43:e9:c2:78:9b:65:37:c1:
                    0e:29:89:af:aa:cc:ad:30:aa:3b:30:94:9c:86:91:
                    a7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:ED:F4:30:9F:94:E6:E4:2F:4F:FB:C1:A1:0F:37:06:4B:8F:B6
            X509v3 Authority Key Identifier:
                keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:a8:15:15:a6:d1:c7:6a:b1:95:ea:57:6d:32:a8:50:11:
         cd:d7:2e:6f:27:09:70:c9:3d:2f:2b:ec:a6:89:ef:da:6a:3c:
         9c:21:97:d2:27:82:9e:bd:20:6f:b2:14:8e:9c:8d:7e:63:28:
         ad:12:b8:89:2d:41:22:ca:58:0b:1c:88:ed:7f:5c:94:34:c7:
         4a:18:3d:57:6c:e7:fa:4d:3c:08:8b:e4:a2:94:4a:b3:e7:45:
         41:28:ca:39:8a:4c:fc:26:29:bc:fc:d6:b0:00:0e:53:dc:7e:
         b6:ca:76:f5:aa:ac:98:9d:aa:be:72:aa:01:d8:65:e2:48:df:
         43:0a:e9:1d:47:0d:9e:14:f3:c9:ce:0c:e1:ba:ca:cc:7b:9d:
         07:c4:d7:f3:c9:fd:b4:34:14:14:10:0e:a1:4d:90:b1:f3:cb:
         b5:fd:ca:6d:33:6b:e0:a5:69:80:95:4a:ab:a6:a3:ae:02:6f:
         fb:8f:d3:b9:eb:95:d9:5e:73:48:07:c0:e2:01:b4:96:83:4a:
         71:0f:18:eb:55:b7:ef:81:6c:a4:90:13:8e:67:2c:64:a5:68:
         34:6b:52:e1:af:43:1b:0d:d9:81:8a:4f:91:2d:1b:df:39:8b:
         18:b5:09:15:0b:b5:73:8c:5f:8b:a6:d6:5c:20:05:c9:d5:37:
         cb:31:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:44:58 2025 by rpki-client