Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230352e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230352e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          ws8uTkB0ghuobdWVfOp294gnR18slNqTDiex8hoWiGc=
Subject key identifier:   C0:87:EC:57:08:A9:CD:4C:F1:D8:25:9C:DE:38:78:96:51:49:80:EC
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       5B68907971B4E1357A8E0E19E52E776F7BDA08AD
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230352e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:16 +0000
ROA not before:           Tue 04 Feb 2025 18:47:16 +0000
ROA not after:            Tue 03 Feb 2026 18:52:16 +0000
asID:                     20015
IP address blocks:        200.71.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:68:90:79:71:b4:e1:35:7a:8e:0e:19:e5:2e:77:6f:7b:da:08:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:16 2025 GMT
            Not After : Feb  3 18:52:16 2026 GMT
        Subject: CN=C087EC5708A9CD4CF1D8259CDE387896514980EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:57:3d:29:eb:77:46:36:97:c6:27:76:e7:
                    15:34:51:89:39:bd:82:18:95:35:c0:a8:93:fb:ec:
                    e7:6e:b7:0d:09:71:99:6a:7d:d5:b2:f0:09:9b:d6:
                    51:58:0e:ca:c0:b6:63:36:95:7f:83:15:15:22:90:
                    38:31:ec:ce:79:b4:d9:3c:ef:2f:4a:e3:8c:2b:f0:
                    f5:b9:0a:d6:64:a1:9f:d7:a6:e1:7d:3e:1b:49:51:
                    7c:1f:f3:ea:80:68:e6:e7:1f:bc:22:21:d7:78:2b:
                    53:f1:c9:55:14:8f:96:9e:d2:e2:8f:63:c5:2b:b0:
                    f5:63:ac:23:c4:e9:2b:18:c9:9d:f7:96:45:cc:a9:
                    85:de:d3:65:f9:91:a3:e0:e9:e0:50:52:44:6e:47:
                    65:6f:1e:6c:df:82:73:09:b0:db:86:1d:e7:94:74:
                    be:35:29:7a:0d:d8:a8:22:a6:6c:19:0e:2b:5f:f0:
                    2f:6c:d8:d8:35:74:02:c7:41:a5:6c:ed:2d:d4:e4:
                    bb:4e:47:ae:99:61:b2:47:d3:ff:c7:ae:f2:11:b6:
                    ac:ec:03:40:00:42:f2:29:b4:b0:52:f6:b5:b6:c9:
                    d0:4c:6f:05:b7:4e:f4:68:23:63:12:f3:a3:7e:3e:
                    4d:d3:b4:7d:9d:30:c9:f1:5c:31:76:34:a6:38:93:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:EC:57:08:A9:CD:4C:F1:D8:25:9C:DE:38:78:96:51:49:80:EC
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230352e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:db:9e:04:0d:51:d4:ca:64:11:90:38:a5:a6:6d:2e:1c:73:
         0b:12:5d:8f:0f:ba:1b:56:d8:b9:29:02:a0:08:18:8a:6d:1d:
         52:aa:58:91:99:8d:b4:76:2d:0f:1a:e3:e4:d5:a4:13:4b:09:
         20:2e:8b:9a:84:19:f1:d8:03:4c:c6:6d:07:c5:5f:68:7a:80:
         20:63:b3:ba:46:32:c4:98:92:14:e2:71:7b:ad:ff:34:f8:1b:
         87:d3:fd:d9:87:ed:d2:01:3b:2f:f6:53:7e:12:f4:d6:89:ba:
         55:f4:11:68:c9:d0:52:d9:03:97:a4:a8:49:6f:68:65:49:6f:
         fd:45:94:e9:79:0b:54:ba:d2:e9:15:8c:a5:d3:a8:9f:52:df:
         99:2b:7e:0b:99:43:03:f2:fb:12:8b:0c:f3:3f:2a:bf:21:b9:
         ad:90:47:72:55:f9:ba:05:27:02:20:95:7e:aa:5e:36:a4:25:
         ad:fa:cf:a2:cd:22:f3:f1:cd:9f:03:70:49:0d:4d:37:a0:c9:
         a3:ce:a3:9b:33:69:8d:74:cf:28:1f:9f:d6:5f:2e:69:c1:3d:
         76:5d:a9:fe:de:66:43:f9:9b:13:ca:c0:50:46:a9:d3:11:2f:
         5f:a0:74:e7:a6:fd:57:d2:0d:da:b9:fe:72:3a:02:0d:15:f1:
         68:08:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:10 2025 by rpki-client