Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232332e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3232332e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          w1po2i6m+XHmce4cVwrX+T9ZuwkMDPVb5SEdCx5Fk8Q=
Subject key identifier:   0A:73:E4:76:DC:89:ED:B2:CB:69:8C:1D:B0:57:BD:E0:12:F2:A8:FB
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       2FFB0E98E5A3437B3E5603946D496BE8BB8CA783
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232332e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:14 +0000
ROA not before:           Tue 04 Feb 2025 18:47:14 +0000
ROA not after:            Tue 03 Feb 2026 18:52:14 +0000
asID:                     20015
IP address blocks:        200.71.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fb:0e:98:e5:a3:43:7b:3e:56:03:94:6d:49:6b:e8:bb:8c:a7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:14 2025 GMT
            Not After : Feb  3 18:52:14 2026 GMT
        Subject: CN=0A73E476DC89EDB2CB698C1DB057BDE012F2A8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:71:32:4f:68:a1:4a:7f:ab:6f:10:35:90:
                    f1:c6:d5:51:98:cf:bd:de:d8:a7:40:a3:9f:6a:7b:
                    b8:3b:5d:4c:1e:30:bb:f4:4e:61:be:a9:a4:78:dd:
                    2b:64:be:1f:ba:6a:f9:f9:95:30:91:e2:2f:2f:1e:
                    57:64:90:ca:1a:31:8c:aa:89:04:5c:6f:35:e5:79:
                    8a:43:98:0c:c5:27:d1:4b:df:97:8a:4f:12:ca:56:
                    27:c0:89:53:4f:42:6b:b9:fb:3b:69:1e:f3:80:39:
                    e5:da:76:82:4a:57:a3:60:ce:50:8b:b7:6b:d8:ee:
                    f3:04:f3:bc:06:5c:8c:6e:a6:5f:cf:49:95:17:51:
                    5b:e8:03:64:bf:11:87:7f:07:dc:88:ee:c8:76:20:
                    43:80:e2:64:6c:d6:45:8d:20:9f:59:76:51:13:73:
                    e4:6e:22:8c:0c:44:a3:fe:bb:ca:73:e1:89:aa:b9:
                    e4:2d:b0:71:e6:ed:62:8b:2e:5d:d7:01:9f:ba:76:
                    5e:87:f1:c5:da:89:61:7f:31:3a:b9:35:73:c5:16:
                    a0:42:28:f5:f6:8d:88:b5:4f:7c:e8:a5:bc:40:09:
                    9d:4f:6a:74:1a:ba:7f:f1:88:99:e6:32:76:e5:26:
                    28:7e:9c:03:44:16:cc:5e:4a:07:13:9e:9a:41:ab:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:E4:76:DC:89:ED:B2:CB:69:8C:1D:B0:57:BD:E0:12:F2:A8:FB
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232332e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f3:ba:8c:79:60:0c:0a:19:7e:9d:31:a4:85:97:2e:42:b0:
         39:3c:9d:e6:20:6e:44:88:c9:f8:1d:fa:90:2d:99:36:cf:c7:
         8b:1e:5e:45:7e:4e:a0:40:14:d8:b3:1d:f0:b7:54:07:e4:a3:
         f5:d4:58:68:ad:7c:cf:49:21:0d:6d:a3:70:df:2e:b6:b0:1c:
         ba:f5:f2:05:20:05:bf:c9:c9:6f:cf:e5:a1:d5:85:be:04:3e:
         c5:b0:52:78:2e:47:f6:7f:59:10:c2:40:8c:e9:af:5b:42:73:
         47:af:24:15:aa:67:dd:f2:75:3e:b6:b1:7c:b2:d1:ef:57:5f:
         c5:71:c4:31:47:11:5e:9d:6b:f1:b5:38:5e:6d:41:d3:27:06:
         33:31:33:aa:32:9b:a9:f4:3b:af:14:7c:8c:88:bb:ca:1e:b9:
         3f:7e:d1:a3:94:02:3c:39:d7:c1:6f:4b:be:ef:11:6e:be:cf:
         84:ee:78:fe:fc:8b:8e:af:2a:bd:88:27:42:28:72:42:0e:8e:
         9d:cf:f2:2c:f3:30:7d:49:48:82:9c:5a:5d:3a:5d:29:7c:be:
         7e:f8:66:7e:74:a1:06:50:06:7e:e7:15:cf:fc:90:63:a7:a9:
         c1:33:0d:2e:c0:ed:ab:a2:dd:10:cf:d3:d4:8f:05:a9:df:79:
         66:b6:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:18 2025 by rpki-client