Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230342e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          hJ6cJiHVyaP5Zvq74nxvNm2VUJyxmz/ckKLmGWEDIQk=
Subject key identifier:   B7:AE:0E:E5:C4:05:E5:A3:DD:EB:7C:39:89:16:68:52:2B:3F:89:0D
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       37EA409A9C7EB98A47C00D3137D8A951D0F4AEFB
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:18 +0000
ROA not before:           Tue 04 Feb 2025 18:47:18 +0000
ROA not after:            Tue 03 Feb 2026 18:52:18 +0000
asID:                     20015
IP address blocks:        200.71.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ea:40:9a:9c:7e:b9:8a:47:c0:0d:31:37:d8:a9:51:d0:f4:ae:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:18 2025 GMT
            Not After : Feb  3 18:52:18 2026 GMT
        Subject: CN=B7AE0EE5C405E5A3DDEB7C39891668522B3F890D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:83:4a:df:f4:f5:76:9f:b7:84:a3:3f:f9:
                    ac:6e:36:52:2f:5d:27:0d:a2:7b:ae:5d:3b:f3:f3:
                    a4:0d:52:3f:7f:10:4a:32:f7:6f:13:79:40:a2:8e:
                    5d:1b:15:f6:28:a8:4e:0c:9b:da:cb:5e:b8:88:a6:
                    4d:31:c4:64:62:65:92:ed:ce:23:06:65:96:28:6f:
                    df:46:80:53:f1:d2:0d:5e:c9:7a:28:11:5b:7e:f1:
                    c7:a4:b7:1e:c2:8d:14:f9:67:97:46:a7:4a:1a:8c:
                    90:26:0f:9f:ee:7b:f7:8f:33:58:db:97:bb:45:30:
                    38:c5:be:d3:b4:50:f7:57:77:98:37:fd:89:b1:b1:
                    6a:02:fa:1c:4c:1c:5e:41:8a:87:2d:da:59:9b:3d:
                    ba:3b:93:a9:ae:e2:bc:06:95:f8:a4:f0:84:32:98:
                    c5:8a:35:0a:8a:18:17:74:39:a0:6a:ac:96:df:bb:
                    5e:a4:1c:27:59:37:cd:f5:bd:61:07:0a:07:19:41:
                    45:fc:56:29:bb:17:9e:9f:77:25:a9:0a:46:dc:b2:
                    43:28:4a:a9:47:57:86:80:6a:73:e0:9f:cd:e5:1e:
                    45:3e:74:3a:a2:37:12:74:f6:14:4f:76:da:00:bd:
                    64:5a:cc:c2:48:2b:1e:38:cf:1a:c4:3e:26:3e:51:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:0E:E5:C4:05:E5:A3:DD:EB:7C:39:89:16:68:52:2B:3F:89:0D
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:c0:85:f0:d8:de:a8:6c:2d:c0:69:ff:dc:2e:9f:7d:26:
         e0:3d:c9:de:38:42:f7:0c:2a:da:65:9a:e6:0a:2d:bd:8c:55:
         0a:0c:c0:60:30:a7:17:c8:fc:fb:36:25:66:da:58:59:97:f4:
         66:29:fe:e3:6c:24:4a:03:f8:76:34:c5:bc:eb:cd:52:c8:3f:
         0e:0d:55:8a:87:5c:a1:d4:94:8f:e7:4a:bc:54:ca:02:e4:ff:
         c1:5a:a5:0f:92:10:ab:1c:8d:a1:87:f9:2f:4b:2f:57:23:4c:
         cd:25:44:51:a2:35:be:86:f6:eb:4b:c5:71:01:ab:75:db:61:
         61:ab:fb:f3:cc:2e:54:59:73:f4:ea:ec:8d:ad:d0:5e:5d:0f:
         87:33:9b:b2:60:3d:fa:a2:bd:67:10:a8:ab:95:85:39:da:1f:
         7c:15:0b:7f:cc:53:38:53:b8:ac:a9:f8:5a:92:68:70:f6:20:
         f0:16:16:d4:f0:2f:a4:1b:3e:cb:4f:d4:f4:eb:66:64:a6:38:
         85:0c:08:4e:5c:ff:18:55:2a:f9:29:cd:53:f4:af:76:57:cd:
         16:17:19:98:72:5c:be:d9:24:94:a3:95:a5:44:43:2e:78:7a:
         14:29:e1:d6:4b:91:e5:ea:01:2d:a6:ce:43:3c:16:76:dc:c8:
         63:dc:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:17 2025 by rpki-client