Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233372e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233372e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          BCyvqVp3bys4dP2eYy2Ga8AFhJH+JPYv5qJ37W6aqdo=
Subject key identifier:   B4:55:FA:40:6A:9D:15:46:9E:4C:E3:89:3C:8C:3A:70:8E:A3:B7:53
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       6FFF0C304C7645F7501A1B80ABC1F953F4398F1F
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233372e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 04 Feb 2025 18:03:53 +0000
ROA not before:           Tue 04 Feb 2025 17:58:53 +0000
ROA not after:            Tue 03 Feb 2026 18:03:53 +0000
asID:                     27727
IP address blocks:        200.61.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 19:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ff:0c:30:4c:76:45:f7:50:1a:1b:80:ab:c1:f9:53:f4:39:8f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Feb  4 17:58:53 2025 GMT
            Not After : Feb  3 18:03:53 2026 GMT
        Subject: CN=B455FA406A9D15469E4CE3893C8C3A708EA3B753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:4c:81:ae:7b:e3:f4:4f:cf:f4:55:70:ed:
                    2d:3e:8c:51:d1:cc:59:e6:7f:76:39:25:b7:c3:71:
                    8b:8b:08:69:32:34:fb:66:6a:ac:06:5f:a1:37:fb:
                    83:8e:db:43:df:e6:5c:9b:7c:a0:de:f7:69:fe:ef:
                    84:a5:66:41:57:61:72:b0:6b:47:ef:f3:e9:cb:ee:
                    f4:f9:8d:a0:b1:3f:e7:c4:81:0a:66:7f:45:86:ba:
                    27:b7:cf:49:dc:f5:c8:d3:07:e6:fc:51:39:4a:60:
                    e6:71:cc:a9:76:a8:cd:52:a6:a4:c8:e6:f5:54:65:
                    49:5f:df:69:4a:42:9b:9a:67:ec:8c:e0:3d:55:56:
                    9a:83:1d:1e:4e:e2:34:d6:d0:ed:21:04:30:df:71:
                    9b:90:85:45:b7:e4:11:a8:12:d5:d6:56:d5:40:b9:
                    9e:74:f6:71:2e:ab:5d:9b:58:d8:66:4d:16:4a:a5:
                    4c:51:6a:8e:d4:33:b5:45:d9:04:35:e2:b5:aa:83:
                    88:1f:8d:68:16:f5:55:08:1f:a1:a3:3c:d2:7c:c4:
                    9c:89:a2:40:f2:76:4b:e9:44:5c:00:17:43:d3:91:
                    4d:00:c5:62:1d:e5:fb:91:ec:d3:e7:b1:43:08:01:
                    74:10:cf:e2:3d:96:e7:d0:9e:7e:04:81:14:6e:88:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:FA:40:6A:9D:15:46:9E:4C:E3:89:3C:8C:3A:70:8E:A3:B7:53
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233372e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:74:98:d1:86:a2:24:8e:18:90:e4:98:43:40:8f:90:af:38:
         16:ef:60:6b:a6:45:ea:51:0c:dc:33:18:3a:65:b4:55:24:39:
         0e:6a:88:6f:37:59:8b:ea:03:c7:6f:e6:95:74:8b:4d:86:cc:
         fd:2c:d7:0b:7e:cf:f8:3b:2e:25:5a:14:ba:5d:bc:b4:a9:d8:
         da:75:fe:0d:42:82:99:e8:55:16:41:f4:66:7a:29:db:b8:96:
         e4:38:8d:a2:b6:32:0a:6f:ef:3e:d9:be:df:69:9b:d1:ce:59:
         f8:de:e7:d3:99:a0:a0:18:4b:7e:89:51:19:04:55:6f:a6:fc:
         7b:40:00:00:0e:01:7e:99:dc:ee:05:4d:4c:4c:46:d3:7d:a3:
         2e:fb:7c:83:c6:0a:71:79:a0:47:3a:c6:4d:ed:e9:87:04:71:
         ce:32:78:77:f2:60:0d:a8:0f:ea:13:c6:c3:22:f2:dd:b2:9e:
         9d:c5:8d:b9:4c:53:0b:fb:4d:49:1c:41:64:de:1b:fc:d3:a8:
         ac:19:ed:67:17:f2:c6:c4:14:e3:a5:04:e3:5b:bc:be:94:29:
         d2:af:68:b0:89:46:b9:4b:c8:a9:fe:c2:99:e7:40:38:d2:cd:
         ea:aa:74:99:e4:8f:0a:24:2e:d0:79:6f:c6:ea:58:4e:61:7e:
         71:fa:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:37:54 2025 by rpki-client