Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
File:                     3230302e37312e3230382e302f32302d3234203d3e203230303135.roa (raw, json)
Hash identifier:          NEOvlPF5VC9en/Mvv42pcWPgOJnpaOpGzMd2DHV5Orw=
Subject key identifier:   CE:39:E0:0B:D3:14:AE:65:B3:46:A2:CC:48:58:2C:4D:70:36:3D:FE
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       4413262CB175D59D0D2335757EDD68F57A620739
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:15 +0000
ROA not before:           Tue 04 Feb 2025 18:47:15 +0000
ROA not after:            Tue 03 Feb 2026 18:52:15 +0000
asID:                     20015
IP address blocks:        200.71.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:13:26:2c:b1:75:d5:9d:0d:23:35:75:7e:dd:68:f5:7a:62:07:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:15 2025 GMT
            Not After : Feb  3 18:52:15 2026 GMT
        Subject: CN=CE39E00BD314AE65B346A2CC48582C4D70363DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:fd:79:b5:33:02:53:4a:b5:e0:c4:43:7c:
                    35:46:c4:73:1d:1c:80:df:3a:8e:60:de:c4:4c:79:
                    ae:d3:bc:58:da:5c:58:18:23:40:b7:e4:1d:e4:46:
                    cd:23:c9:ed:8d:74:73:0a:6c:dd:1a:aa:97:b6:e8:
                    f9:50:73:16:90:21:67:0a:f4:69:4e:b9:ff:4f:cd:
                    d0:5f:b4:3b:53:f7:a6:db:f5:d1:63:a8:2f:02:b5:
                    1c:c9:6a:a9:0c:22:8f:f1:ac:f3:3b:7f:6c:fe:23:
                    a6:00:4b:31:cb:77:00:af:fd:39:43:44:4f:31:38:
                    e6:84:80:b3:f6:cd:d4:9d:30:74:29:f3:b8:83:27:
                    5a:2e:eb:30:f1:e3:60:0e:3e:6c:6e:ff:f0:69:50:
                    43:4d:69:9f:43:5c:db:83:b8:10:51:b7:c0:c2:04:
                    29:c7:5b:1c:fa:2a:5e:d2:2a:fa:ea:9f:fb:2f:8a:
                    8e:41:46:e5:4e:26:a6:63:27:ac:83:31:4d:7b:1e:
                    19:84:f7:bf:f9:6f:cc:b1:e0:32:82:b9:95:f6:b2:
                    82:4d:28:59:8d:0a:52:d7:30:c0:dc:19:73:6c:02:
                    36:b5:c4:73:38:60:b8:cc:c2:a9:ea:1e:2f:7e:2a:
                    0d:ab:d0:c4:62:85:58:af:27:c2:f9:66:cd:d6:0f:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:39:E0:0B:D3:14:AE:65:B3:46:A2:CC:48:58:2C:4D:70:36:3D:FE
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:d1:67:96:eb:c1:7b:9d:7c:6d:3b:28:c4:62:4d:8b:0f:
         17:79:c8:88:7f:e4:b2:12:73:4b:24:e9:11:f8:94:ed:f7:73:
         8f:79:d6:73:55:e7:94:5f:9a:48:1d:fd:14:97:ab:40:fc:92:
         a7:db:25:29:82:d5:71:07:90:73:07:a7:fe:be:c3:9b:60:63:
         d9:e7:ec:13:e4:f6:5f:6d:57:93:f0:33:e3:f4:bb:77:ff:6f:
         e3:65:54:8a:36:69:86:ec:50:a7:fc:6f:9c:1a:fd:93:c7:b9:
         f9:1a:81:40:f0:fa:0c:5c:b5:31:cf:ec:8d:44:42:0d:11:6c:
         3d:ed:1b:83:c6:d7:c3:97:d9:d7:d6:d0:7c:86:85:14:8c:b6:
         ff:33:75:c7:fd:1c:01:fa:9e:92:f6:71:5e:5c:e4:01:ad:c4:
         15:e1:40:25:c5:d7:72:3a:af:6e:7f:b9:7a:8c:6c:42:17:73:
         cb:db:2c:33:3f:b7:aa:2f:13:2d:8a:63:a1:e6:4f:a9:ac:6c:
         5d:02:86:43:12:62:e5:9f:37:f0:b3:ad:9f:92:05:83:dc:a0:
         aa:2b:b5:5b:34:7c:72:b9:b3:98:13:29:51:75:11:38:e9:a9:
         78:88:1e:8f:65:5a:ba:67:be:4d:6e:0e:f1:32:cb:55:18:19:
         b9:e7:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:09 2025 by rpki-client