Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230312e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230312e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          yo8hxM98WIyAiLjP+pz6ZgkraQJpEClEWSNOgM+5eHI=
Subject key identifier:   1C:3E:39:25:D1:F0:FC:2E:75:07:93:B9:5E:65:CF:27:07:93:11:C2
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       07C035EC8BE4DB376AEA929165B0E55D65CA9F6A
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230312e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:13 +0000
ROA not before:           Tue 04 Feb 2025 18:47:13 +0000
ROA not after:            Tue 03 Feb 2026 18:52:13 +0000
asID:                     20015
IP address blocks:        200.71.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c0:35:ec:8b:e4:db:37:6a:ea:92:91:65:b0:e5:5d:65:ca:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:13 2025 GMT
            Not After : Feb  3 18:52:13 2026 GMT
        Subject: CN=1C3E3925D1F0FC2E750793B95E65CF27079311C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:72:12:c1:35:54:56:a6:b6:5a:80:fe:c9:
                    3f:dd:3c:e7:47:84:c1:c4:0a:da:d8:3a:03:6e:10:
                    e0:e9:fd:db:35:7b:a7:9f:cf:48:96:e1:59:9d:0a:
                    0f:b9:75:94:c7:0f:35:33:ce:de:0f:1d:ba:47:48:
                    47:51:15:88:52:56:8a:15:da:68:24:97:94:68:ba:
                    58:ee:71:38:f3:a3:4d:b0:e0:a8:5e:4a:40:87:8f:
                    4b:2c:27:8d:12:aa:42:b0:f2:19:c5:b5:78:d2:94:
                    12:3e:d1:95:a4:a5:fd:0f:f2:e9:c8:0a:36:48:4b:
                    fd:da:24:07:b1:19:1c:ad:03:89:15:77:55:37:5f:
                    8b:d9:ce:3a:dc:75:b3:4a:a3:5d:29:90:09:3d:46:
                    4a:2b:fb:60:54:3d:0c:50:27:57:46:5d:ee:6a:e9:
                    ae:54:fd:ca:33:1d:35:d9:df:59:a4:1a:65:7f:03:
                    5e:a3:82:16:1e:37:ce:7a:65:36:7f:8a:69:14:5e:
                    0e:28:80:a5:42:e0:33:39:df:fc:35:93:a2:92:f0:
                    ec:b8:45:bc:c2:e1:c5:e8:e2:74:e5:97:35:69:25:
                    22:fa:89:73:7c:8c:b8:8b:e1:2f:3a:ae:b0:e4:09:
                    89:81:39:53:9d:81:7d:90:0b:72:96:dc:b2:1b:25:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3E:39:25:D1:F0:FC:2E:75:07:93:B9:5E:65:CF:27:07:93:11:C2
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230312e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:68:03:f6:7a:de:b8:75:47:5f:64:36:20:4c:2b:c3:d1:3d:
         af:03:50:29:4d:ae:fd:d5:d0:c5:ef:e7:29:4a:00:0b:b8:53:
         ea:13:40:e1:db:82:30:a4:e7:08:f0:22:bb:f9:fd:56:b7:28:
         f5:18:9a:c4:d5:1b:74:de:f6:52:ad:ad:5a:a2:d6:6f:20:d0:
         12:79:66:ba:14:31:9b:6e:41:48:68:19:79:66:7c:42:2b:fa:
         45:87:36:8b:4f:cc:19:02:5e:e2:d1:a1:e7:7b:30:cc:3f:95:
         ce:64:c7:2d:db:54:29:6b:29:63:8f:5f:62:4e:fc:30:28:95:
         62:91:e0:c7:95:48:d6:52:00:10:a4:21:4b:5e:3d:7b:57:a7:
         7e:35:b8:e7:26:ac:4b:3b:1a:a6:7d:69:d1:72:dd:e3:73:55:
         b2:be:6e:8b:e7:c0:72:bb:f0:5b:d1:08:a3:d8:6e:d1:e0:1c:
         83:42:89:ed:5e:f0:fd:43:6d:6b:c0:b1:da:77:ea:7e:40:0d:
         94:e6:4d:d3:60:ad:35:db:2a:43:97:f0:01:b0:ff:50:67:1a:
         54:8a:18:43:15:8e:eb:b4:36:64:ff:df:48:3c:38:9c:29:7c:
         98:f7:d3:fe:64:1f:bd:4f:25:81:9c:01:c6:cc:d2:89:94:ee:
         2a:47:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:09 2025 by rpki-client