Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137322e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3137322e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          ZldDGlsIGxtHJyebB9tT+1ETFwkJKIQN1IWb2m50+lY=
Subject key identifier:   1F:43:73:82:94:A3:DC:98:81:BA:BA:FA:11:31:7F:4B:BD:34:2F:85
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       432267ECFA6F3F292C1394CC06D37413B401B6DA
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137322e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 04 Feb 2025 19:59:21 +0000
ROA not before:           Tue 04 Feb 2025 19:54:21 +0000
ROA not after:            Tue 03 Feb 2026 19:59:21 +0000
asID:                     22541
IP address blocks:        200.75.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:22:67:ec:fa:6f:3f:29:2c:13:94:cc:06:d3:74:13:b4:01:b6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Feb  4 19:54:21 2025 GMT
            Not After : Feb  3 19:59:21 2026 GMT
        Subject: CN=1F43738294A3DC9881BABAFA11317F4BBD342F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:84:19:d2:92:06:39:07:2b:50:5d:4d:24:
                    53:3d:1b:6d:51:3a:11:ad:69:9b:97:3a:54:ae:89:
                    8e:b2:c6:36:c4:3a:7d:e9:4c:f7:c6:85:9e:5d:1e:
                    b5:cd:65:3d:64:6c:09:62:8f:1f:cb:be:a7:61:21:
                    67:50:51:8f:1a:5f:4c:1a:3b:70:be:c4:cd:ce:f7:
                    ca:52:6f:0f:5e:85:7c:cb:4d:bf:2a:74:11:43:62:
                    9f:30:2e:a0:7a:04:d2:52:b7:2e:b0:3c:2d:70:23:
                    eb:ff:21:0c:1d:ba:5c:78:25:9f:d4:49:cd:e9:cc:
                    5d:dd:e2:9d:da:06:3b:f8:ce:62:1e:60:4d:f9:65:
                    8f:f0:67:39:17:77:67:c1:a7:e4:d0:b9:9b:63:81:
                    f7:2d:04:e3:db:d4:56:d4:b9:15:2d:27:c3:39:7d:
                    8f:cc:b4:aa:4d:fb:79:b8:ac:2d:fb:cf:1a:3c:ab:
                    10:81:d6:8c:b4:44:18:e9:cb:bb:2e:be:d9:9e:03:
                    c3:50:49:6f:14:49:72:8b:91:99:60:8d:58:d7:53:
                    e2:04:a2:94:21:e5:4d:11:61:fa:da:e1:a2:36:a0:
                    76:b1:a0:27:e8:1c:de:55:6d:c5:cb:81:2b:e4:b8:
                    e2:6b:4d:33:9f:30:dc:47:a6:9b:13:80:7d:a2:fd:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:73:82:94:A3:DC:98:81:BA:BA:FA:11:31:7F:4B:BD:34:2F:85
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137322e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:67:58:ab:38:a8:97:8c:4d:b9:f9:92:74:b0:d5:8a:d6:64:
         54:49:26:e0:34:ae:28:bb:2b:35:d9:6d:91:e1:cc:1c:27:f8:
         00:10:07:e7:a6:cf:68:61:3c:f3:f0:4a:f4:5f:82:ba:2a:62:
         94:3f:e0:25:50:25:8e:2c:9f:b0:3e:9e:da:1c:43:da:6a:23:
         83:67:ee:69:5b:1b:bd:d6:63:db:8f:cb:f9:67:16:29:e2:a0:
         31:7d:2f:0c:29:a8:41:55:58:ea:93:05:c0:7d:0d:a1:87:26:
         a1:55:e1:17:96:d2:49:b2:46:93:10:a2:80:30:29:7e:96:43:
         bc:9b:7d:09:93:d1:e0:d9:67:cc:8a:8d:05:0b:66:a7:62:f5:
         11:04:25:13:29:d9:a3:dc:de:65:29:90:d9:4a:ce:be:be:f1:
         6b:41:f7:15:96:1f:61:34:e1:82:da:d0:3c:2e:5a:e1:20:9e:
         50:f9:46:90:fb:16:67:e4:e8:bb:e3:f0:cf:aa:b5:4a:7b:08:
         b6:4c:36:9e:87:ba:f2:05:50:26:ad:cf:d0:86:31:a5:01:6d:
         e1:27:df:f4:8c:0a:b9:1f:b9:15:ff:cf:70:b9:c5:50:13:95:
         66:67:cc:89:f6:a9:db:75:49:fd:3d:08:22:8c:41:18:e7:0a:
         0d:c7:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:36 2025 by rpki-client