Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136312e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          PFb0m1tU2N9pGzz45U+SdJIrug7SmyD63tJOR0yI92o=
Subject key identifier:   63:EB:86:F7:AF:27:00:97:9A:FB:D6:8B:2F:9B:E1:9A:28:43:B4:71
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       0F039BA79D7DB22A5254EAB38199A6C756B33994
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 04 Feb 2025 19:59:18 +0000
ROA not before:           Tue 04 Feb 2025 19:54:18 +0000
ROA not after:            Tue 03 Feb 2026 19:59:18 +0000
asID:                     22541
IP address blocks:        200.75.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:03:9b:a7:9d:7d:b2:2a:52:54:ea:b3:81:99:a6:c7:56:b3:39:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Feb  4 19:54:18 2025 GMT
            Not After : Feb  3 19:59:18 2026 GMT
        Subject: CN=63EB86F7AF2700979AFBD68B2F9BE19A2843B471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:c2:d8:0d:40:b4:67:ab:4d:29:9a:fb:93:
                    00:f4:97:da:16:51:ab:ad:cf:13:50:92:2d:b3:ed:
                    98:11:39:7f:68:1e:cb:78:76:10:75:81:02:e7:6c:
                    5c:3d:73:b4:25:74:09:f1:c5:2e:40:33:95:72:1a:
                    55:d0:5f:15:72:b5:f0:7c:c3:29:cf:2e:fb:60:61:
                    63:be:d3:ee:fb:49:ab:f9:7c:ab:e5:84:b9:0a:37:
                    f0:ca:c4:ee:13:b4:c1:01:b8:cb:86:d0:14:1b:ee:
                    e5:44:36:e9:fe:9b:97:98:0d:f1:01:df:c9:cc:10:
                    cd:1e:e0:41:17:a3:f8:8c:5f:21:38:e1:9b:86:f9:
                    4a:8b:17:c4:a0:c3:ad:34:5d:3d:70:67:fe:30:f2:
                    dc:08:58:fe:9f:a7:c3:75:68:d6:7f:c1:e0:37:a3:
                    5b:f7:eb:be:f0:44:c4:05:ee:b0:a2:3a:6d:0c:33:
                    ff:08:52:da:53:e5:ab:6f:bb:ea:e4:ac:0e:b7:15:
                    af:c9:4a:65:29:ce:2e:a8:dc:28:22:63:18:98:e3:
                    a8:72:20:ca:e8:99:8d:6e:77:d9:fe:4c:56:56:32:
                    24:10:03:07:e6:e6:ef:4c:d7:25:43:06:c2:2d:5d:
                    ba:f1:e4:c2:d9:71:d1:fa:1b:64:6e:e6:f6:8c:8e:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:86:F7:AF:27:00:97:9A:FB:D6:8B:2F:9B:E1:9A:28:43:B4:71
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:3f:d2:3c:93:03:17:ad:35:a7:52:88:e1:cd:cc:2f:02:
         c0:e8:64:93:9a:31:2c:77:c2:69:63:1a:29:aa:39:03:11:55:
         a9:e6:d8:6c:b4:14:71:e1:a3:bb:80:16:13:f3:64:2e:63:95:
         8e:49:d8:50:bf:8b:3e:d1:bf:53:ef:c4:79:a2:5d:eb:db:fe:
         ce:e9:a4:5a:a6:e0:c6:d0:54:80:7d:a0:3a:eb:22:5f:16:84:
         a4:70:7c:60:fc:d6:3d:ca:14:73:54:1d:89:91:54:b7:2b:97:
         8f:c9:78:f3:6a:59:b6:61:dd:81:73:50:af:ff:71:92:b5:94:
         29:64:d5:02:9d:1a:58:42:be:fb:ad:73:7f:d5:48:80:88:b6:
         7d:3a:f0:3f:24:44:34:1d:2a:db:3e:b2:97:3b:b6:8c:a0:36:
         0e:60:67:8f:9a:f3:2a:30:71:8e:21:ca:ec:bb:ed:0f:f0:6e:
         c4:5f:ad:7c:b6:0f:92:9b:f7:8c:72:61:55:53:df:c5:9c:a4:
         b4:33:76:da:a5:d1:00:cf:e9:d7:7a:2f:8d:11:09:e5:5a:54:
         46:c4:0b:b5:2b:b0:40:07:8c:f6:96:29:7d:23:76:34:14:1c:
         f8:b5:7f:95:6c:21:20:8e:a8:ce:03:5b:71:ed:e7:c1:5b:4d:
         e7:12:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:42:47 2025 by rpki-client