Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137352e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3137352e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          UQ8kChjmSp7m+XaJwbkQGRGW5ubohZq1WCZMC1ysrg4=
Subject key identifier:   C4:D4:A2:10:33:7D:E7:11:65:5B:69:6C:99:5F:25:7E:4F:03:25:99
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       5EABAD9ABEEE8EAFBE738B85697E606BAE76F542
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137352e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 04 Feb 2025 19:59:15 +0000
ROA not before:           Tue 04 Feb 2025 19:54:15 +0000
ROA not after:            Tue 03 Feb 2026 19:59:15 +0000
asID:                     22541
IP address blocks:        200.75.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ab:ad:9a:be:ee:8e:af:be:73:8b:85:69:7e:60:6b:ae:76:f5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Feb  4 19:54:15 2025 GMT
            Not After : Feb  3 19:59:15 2026 GMT
        Subject: CN=C4D4A210337DE711655B696C995F257E4F032599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:02:fc:5b:88:8d:09:fb:6d:2a:3b:41:04:
                    95:f2:21:f1:bc:35:85:22:f7:b5:67:de:87:01:87:
                    23:13:d7:b1:5d:dc:9f:3e:6f:7c:10:ff:a4:ab:6c:
                    30:fd:5c:45:b8:60:5f:95:01:78:1c:2b:2c:96:95:
                    e2:de:5c:97:c1:c0:b6:75:ea:98:0f:1c:40:22:57:
                    1a:81:3f:a0:ca:09:62:cc:6f:3e:bc:e5:59:00:07:
                    26:f5:da:e3:7e:96:57:2d:b1:df:f5:d8:22:5e:24:
                    d0:ff:d8:51:73:01:d2:a8:1e:b5:89:00:6c:df:5d:
                    48:a0:d8:a8:c0:0c:dd:26:b5:4d:44:0e:b2:1d:6a:
                    5a:cb:38:bd:9e:12:eb:78:76:e1:24:63:e9:15:0e:
                    41:31:0c:78:74:34:21:33:d6:fa:f2:46:66:d4:94:
                    84:e7:05:a0:7b:ea:11:ea:41:b1:9d:92:5c:64:38:
                    b9:56:19:51:fc:31:a6:ed:8a:fa:50:b9:99:c7:3b:
                    b2:e3:e4:8e:6b:0e:7a:a5:7e:e2:79:32:72:63:e1:
                    5e:64:0b:3e:ab:e7:7e:f4:1f:1b:9f:36:93:7c:24:
                    c9:76:c6:c8:2c:02:1d:35:78:e8:40:18:8c:7c:9a:
                    f0:bc:42:06:27:c1:9f:cd:ae:5d:fc:fe:4b:d9:12:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:A2:10:33:7D:E7:11:65:5B:69:6C:99:5F:25:7E:4F:03:25:99
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137352e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:3f:36:38:75:c3:93:0b:30:4b:3c:79:a5:ee:ff:19:03:
         5a:f4:76:38:94:dd:6c:8a:3c:22:6f:0a:1a:f6:1f:80:de:45:
         ef:60:75:2f:5e:e6:23:c1:b9:e0:d1:ca:d8:c9:fc:ed:57:03:
         40:6c:20:66:7e:f5:c8:9e:57:58:86:23:6a:de:7b:79:bb:8c:
         77:74:02:e8:a2:51:68:a8:ca:3d:fb:fe:68:b4:1a:41:ee:9b:
         8b:6f:c3:37:30:b3:ee:00:b5:09:15:7e:31:29:76:49:43:dc:
         84:d7:60:2c:83:9e:ec:8b:11:6f:a6:c5:80:16:cd:5e:a1:91:
         29:40:fb:83:82:bb:63:d8:c9:4d:09:9e:de:e6:93:b2:d5:b2:
         9e:bc:80:c9:44:e5:70:c0:3b:00:ff:d1:1b:80:4b:7b:d7:78:
         30:69:5a:a2:99:4a:fa:89:b1:14:97:70:86:06:18:7b:74:2f:
         5a:63:cd:77:e9:69:36:54:d1:2d:35:3b:21:00:bf:b1:8c:95:
         78:10:48:f2:b3:5b:b7:9c:86:68:3c:53:ea:6e:c5:52:a1:97:
         6b:e5:11:9b:1e:cf:81:47:0d:5a:78:c8:88:88:a2:9e:57:6e:
         6b:03:a8:4a:27:35:a3:fb:34:9c:10:27:49:15:10:d6:69:6f:
         69:c4:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:59:31 2025 by rpki-client