Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          wq0uSUWhovvO4zuOrFqm1EmCxvPC1cRd59PDdISJCNg=
Subject key identifier:   6D:61:D5:F6:41:4D:64:A2:9F:FE:6B:9A:BF:17:E0:4D:0B:CC:0A:6C
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       3364987197E5584F96ADD35669B44E479C991007
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:14 +0000
ROA not before:           Tue 04 Feb 2025 18:47:14 +0000
ROA not after:            Tue 03 Feb 2026 18:52:14 +0000
asID:                     20015
IP address blocks:        200.71.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:98:71:97:e5:58:4f:96:ad:d3:56:69:b4:4e:47:9c:99:10:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:14 2025 GMT
            Not After : Feb  3 18:52:14 2026 GMT
        Subject: CN=6D61D5F6414D64A29FFE6B9ABF17E04D0BCC0A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:95:97:ac:58:f8:5d:a5:11:eb:a4:8e:92:
                    36:9a:a7:89:21:d8:ca:d3:29:7c:b7:a1:37:9a:f8:
                    9a:40:ad:98:fb:4d:40:ae:68:12:5c:d2:2a:39:c5:
                    eb:a7:13:ee:a6:37:67:98:1c:9e:00:cc:83:15:47:
                    6d:52:7f:8a:1e:af:40:33:53:7d:44:ba:db:b6:06:
                    6d:b1:7d:1b:37:36:ed:97:97:1c:63:d0:1f:b3:19:
                    eb:92:eb:d8:6b:01:cc:8d:f2:71:31:d9:d6:25:6e:
                    1c:5d:a8:3f:b5:4e:53:2d:1c:23:16:53:c3:86:c1:
                    c7:0f:68:8b:df:28:99:aa:f4:06:62:97:d9:ce:89:
                    74:19:d3:c6:e2:ff:3f:18:23:4e:40:60:e7:a4:ad:
                    d2:8f:eb:7f:78:6a:97:2b:35:02:df:10:9d:d7:25:
                    9f:71:cd:7e:f1:2d:e1:c0:35:53:4b:49:bd:44:75:
                    66:71:86:33:1d:7d:2e:63:51:8c:a6:67:7a:b2:bd:
                    e8:f7:a6:32:80:4c:77:dd:85:6b:27:51:34:b0:3f:
                    94:8f:5f:52:14:4a:7b:64:ac:6f:33:23:e9:20:38:
                    0c:fc:32:69:15:98:91:c3:d1:8e:53:52:09:1d:0a:
                    a4:47:ea:cd:56:99:f6:49:11:f8:70:9a:ad:43:30:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:D5:F6:41:4D:64:A2:9F:FE:6B:9A:BF:17:E0:4D:0B:CC:0A:6C
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:0d:7a:a7:00:44:b7:4a:95:27:6e:1e:01:d6:c2:75:3f:
         a5:06:23:ef:cb:7e:ce:c1:bf:52:dc:10:b9:57:d7:e0:71:b8:
         bc:25:0a:e2:89:e2:a5:4f:83:33:5d:93:c2:81:06:6b:e4:6b:
         2b:2c:36:9d:dd:45:03:e9:63:96:37:bc:fb:a2:ff:b0:27:67:
         f0:7b:ef:62:21:33:28:9b:8b:cb:19:a1:a2:de:cf:fc:9f:aa:
         85:0b:3a:0f:42:c5:2b:9f:b8:cb:79:59:67:d0:08:60:a9:03:
         1b:2c:7c:13:8a:e5:3e:3b:8f:fc:23:5e:52:fe:99:3c:77:bd:
         34:39:9f:fb:c8:c2:91:55:30:74:97:6e:cf:f2:27:d0:7f:93:
         25:00:b1:aa:66:28:e4:d3:e2:39:0e:b6:8e:07:94:5b:24:1d:
         09:84:d0:c6:00:5b:ce:fd:8f:2e:73:e7:22:d9:04:a9:15:c7:
         1b:72:7b:40:e4:f5:72:9e:13:83:64:17:3f:c6:e1:be:cc:85:
         03:e1:38:de:55:e1:7f:61:63:ce:93:ca:0d:eb:3f:f2:e9:78:
         ee:55:8d:41:3b:7f:15:fe:57:ae:73:e5:7d:6f:8b:4f:31:4c:
         33:49:4e:0d:3c:2e:46:6d:12:25:a0:34:da:6e:c0:7b:7e:9b:
         76:cf:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:19 2025 by rpki-client