Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231362e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231362e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          eC00yziBff+fVIk+EAdwIqkuJtpFB46WGnLA6RvPts0=
Subject key identifier:   F9:3B:43:27:C5:64:48:1C:3F:C5:92:0E:63:69:84:BD:22:03:D9:B2
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       346718736A86D3D2C90B59B4D1DEF7D826AA6B3D
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231362e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:15 +0000
ROA not before:           Tue 04 Feb 2025 18:47:15 +0000
ROA not after:            Tue 03 Feb 2026 18:52:15 +0000
asID:                     20015
IP address blocks:        200.71.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:67:18:73:6a:86:d3:d2:c9:0b:59:b4:d1:de:f7:d8:26:aa:6b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:15 2025 GMT
            Not After : Feb  3 18:52:15 2026 GMT
        Subject: CN=F93B4327C564481C3FC5920E636984BD2203D9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:66:0b:f7:41:dd:c4:73:33:93:23:33:48:
                    e8:0c:a3:aa:ba:1a:3a:f3:bf:c1:ef:a2:5f:ad:78:
                    54:67:1d:1a:d4:9e:70:5d:b6:e3:56:62:56:01:73:
                    d1:1f:c8:a0:d2:31:c4:db:cc:5e:cd:ff:f9:4d:18:
                    69:1c:b3:86:3e:4a:30:f7:7d:92:38:d7:56:92:cb:
                    5c:f4:4d:02:f2:35:30:a9:ee:fe:5d:4f:31:2d:7b:
                    e5:42:d6:94:57:7d:86:23:a9:cf:b9:f3:21:39:dd:
                    97:aa:c7:71:e6:c8:be:44:5f:97:f7:57:cd:14:1e:
                    ba:71:12:f5:0b:46:bb:7b:05:cf:53:c1:93:07:b7:
                    3c:a5:d0:c5:01:f1:4e:c5:e5:f8:80:2a:7d:2a:bf:
                    f0:d2:f7:40:27:98:d8:b6:d2:14:dd:f4:6f:f7:2b:
                    bf:44:ae:39:d0:17:97:2e:33:6f:07:e5:20:9c:84:
                    3c:16:1e:e2:30:02:01:ba:74:0d:2d:5c:ac:cb:01:
                    7e:99:08:00:b1:0f:4d:42:29:ca:6a:5a:a8:ad:ed:
                    19:e6:5e:75:a2:6d:a6:7b:1d:60:af:a5:65:79:3b:
                    d9:b8:f3:20:d9:ef:12:25:19:cb:ea:c9:fe:6c:ce:
                    da:42:fb:43:1f:74:be:d8:42:2b:ca:ab:cb:75:19:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:43:27:C5:64:48:1C:3F:C5:92:0E:63:69:84:BD:22:03:D9:B2
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231362e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d3:97:58:83:8f:99:39:7e:27:d7:a3:a5:26:5f:62:9f:6f:
         e2:84:70:ed:04:65:53:94:c8:78:3f:f5:93:c5:6f:fc:c3:74:
         42:ca:ef:b2:04:be:71:79:cf:13:c3:78:cf:39:19:ab:8e:28:
         48:b2:2b:0d:17:71:59:0f:7b:5d:31:92:18:e1:ee:67:d6:41:
         ac:9e:b3:75:24:fc:68:05:6f:dc:b5:f0:7c:ec:49:3c:33:f2:
         29:70:48:04:7b:b2:dd:bc:54:4d:76:04:b8:07:e1:78:df:ff:
         db:e7:9b:ef:9e:fa:ac:c9:01:ae:8b:82:b7:49:6c:f7:4f:c8:
         73:f8:c1:88:ee:3c:4d:e7:bc:63:b2:bb:0b:df:30:82:4b:9b:
         3b:ce:d3:c0:f7:75:74:a9:6c:55:8c:62:92:8d:f7:53:66:bf:
         fe:99:6d:9d:b3:11:ac:92:a0:ea:3e:b0:39:cd:65:13:a3:34:
         99:3c:71:fb:af:34:f9:56:32:55:11:ad:a5:23:02:42:60:3c:
         67:0f:6d:78:88:43:0e:67:8d:11:1f:7c:8e:17:b3:21:ba:ac:
         07:48:d1:3e:08:6a:21:55:40:63:fc:05:f5:25:e0:a9:43:1d:
         61:cb:1b:e3:79:83:09:b2:53:80:75:ab:25:35:4c:7e:17:3e:
         18:58:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:10 2025 by rpki-client