Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231312e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231312e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          qotGXC4sTTAHr3V1UpRCMUhpLehWH33XaoQnWrlSGPM=
Subject key identifier:   F0:AB:CC:FF:DF:BF:90:12:3B:C6:94:8E:3C:CC:1B:6A:D5:5F:11:5E
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       678B41332BF500D7EC703C76C0880533CCE9A9AB
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231312e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:13 +0000
ROA not before:           Tue 04 Feb 2025 18:47:13 +0000
ROA not after:            Tue 03 Feb 2026 18:52:13 +0000
asID:                     20015
IP address blocks:        200.71.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8b:41:33:2b:f5:00:d7:ec:70:3c:76:c0:88:05:33:cc:e9:a9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:13 2025 GMT
            Not After : Feb  3 18:52:13 2026 GMT
        Subject: CN=F0ABCCFFDFBF90123BC6948E3CCC1B6AD55F115E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:9d:fd:b0:61:e8:1d:ea:37:5c:58:e6:59:
                    76:5f:7f:58:74:b4:9a:26:88:9c:e4:9a:d9:4e:e7:
                    9e:e2:e7:55:f5:54:36:e3:5c:94:ea:20:5d:2a:d2:
                    26:51:98:ea:13:19:ed:e4:dc:54:65:a7:b6:80:d8:
                    75:b0:59:f8:2e:d9:d2:d8:0f:2e:d6:40:46:89:26:
                    58:75:a1:02:ab:ae:b4:4b:e7:70:95:3a:30:7f:f0:
                    42:3b:4f:49:94:40:72:dd:9c:0d:4f:b3:d9:1a:1f:
                    20:7a:08:de:98:13:e2:1f:21:70:8c:29:38:8a:aa:
                    f0:ab:e2:4a:1e:f5:08:f4:0e:ee:8b:1f:03:5f:50:
                    95:fd:5e:52:43:c4:a2:cc:58:76:ef:d9:f4:c5:57:
                    e2:f7:a2:ff:0f:46:b6:e7:d2:c0:a1:3d:7f:5b:fd:
                    cf:55:e8:53:7b:da:16:97:99:ba:84:95:59:2a:fe:
                    15:45:f7:7e:d9:63:f5:ff:8d:2f:d6:9a:09:ef:2b:
                    80:c8:76:41:4d:50:7d:3b:b3:08:1e:9c:d6:39:c1:
                    71:9e:54:09:95:57:66:f1:e0:f8:1b:30:5f:d1:00:
                    1d:7a:e1:e5:1c:5c:7e:1d:06:e5:f5:3a:04:a6:fc:
                    88:de:4c:5f:57:da:fc:bd:6f:65:c7:c7:db:59:9b:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:CC:FF:DF:BF:90:12:3B:C6:94:8E:3C:CC:1B:6A:D5:5F:11:5E
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231312e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:de:94:ae:80:7f:14:51:cc:1c:9f:2b:1c:90:ea:6a:ba:
         48:a9:22:24:f2:99:aa:73:e3:07:93:9b:ab:71:60:1c:55:e6:
         e3:bd:74:d6:21:a8:67:94:ae:03:91:b6:7c:fe:46:c3:41:48:
         4d:d6:7a:84:8b:b7:0b:14:5b:a0:dc:bc:4b:8f:80:e0:a3:4a:
         d6:3d:9a:ca:7c:18:1c:4d:6e:3b:70:d0:2e:8c:19:b6:91:fa:
         50:9f:71:0c:8f:5d:0b:02:57:83:fb:a3:18:d6:17:11:51:c6:
         3d:26:f1:c7:5a:e8:bc:2a:4f:30:5c:d1:b3:73:79:ea:58:61:
         71:38:67:c1:a9:53:10:5b:28:35:08:61:bc:45:b1:ec:ec:73:
         ff:52:e7:c5:ba:c8:dd:36:a1:17:e3:1d:0b:fc:88:c1:38:8c:
         1c:91:cf:91:93:db:64:f9:71:6d:e7:eb:7b:07:59:7c:06:5d:
         24:fe:a6:13:56:13:3c:df:b1:6e:df:f1:eb:23:72:85:9b:eb:
         ce:a6:03:f4:d8:b3:b6:0c:e8:1b:d5:9a:f4:55:f0:d0:38:7c:
         cd:8f:ba:04:80:f4:27:41:f0:6f:41:70:0c:43:26:fc:79:15:
         72:64:ee:b4:c5:fa:0f:88:77:55:a3:09:31:b3:98:2d:b6:62:
         23:a2:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:12 2025 by rpki-client